Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f42a104f40c339106e4ac9b70ec275eb472678a8.cer
File:                     f42a104f40c339106e4ac9b70ec275eb472678a8.cer (raw, json)
Hash identifier:          L3SFMZSp+YpaHB+k0Inx/Knqq2MyrZlzktvtXt7o/O4=
Subject key identifier:   9A:76:56:90:37:A2:51:57:DA:E6:48:EC:D2:6E:7A:3B:74:95:29:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F85D78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9dc886d8-f765-426b-8c45-7875d02774f6/f42a104f40c339106e4ac9b70ec275eb472678a8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9dc886d8-f765-426b-8c45-7875d02774f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 18 Mar 2021 22:37:27 +0000
Certificate not after:    Sun 06 Oct 2024 18:57:44 +0000
Subordinate resources:    IP: 190.103.184.0/22
                          IP: 2800:bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16276856 (0xf85d78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 18 22:37:27 2021 GMT
            Not After : Oct  6 18:57:44 2024 GMT
        Subject: CN=f42a104f40c339106e4ac9b70ec275eb472678a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:7b:48:59:c9:07:36:bd:c1:31:71:08:ad:
                    70:16:eb:cb:4c:f5:64:ab:39:59:c6:09:58:12:87:
                    f9:47:96:47:57:e8:7f:ec:1e:94:13:ff:ca:14:70:
                    61:a9:23:c7:5f:9e:0a:68:b6:02:3c:37:9c:d5:6e:
                    1a:ce:83:03:12:24:70:c4:fe:fa:10:89:5b:92:91:
                    5a:46:d1:5f:6f:0f:50:3c:34:ce:8c:73:e0:33:47:
                    8b:50:ec:f2:40:a3:13:e0:bc:1b:7f:cd:df:41:eb:
                    f9:6c:0f:99:3e:70:b5:a8:69:4a:b1:65:0c:84:e5:
                    a0:60:df:04:70:90:b7:bd:d6:5a:0e:7d:ad:7d:3f:
                    ca:2b:ca:f9:c2:de:07:ee:a1:1a:f4:79:f0:69:84:
                    31:82:1a:b0:f0:47:9b:b5:86:17:15:5a:59:69:7a:
                    4f:f0:f9:79:f0:4d:27:37:74:ae:cd:53:14:63:11:
                    fc:ca:50:90:5c:9e:2f:9e:02:c0:12:63:5c:e7:1a:
                    08:73:4c:b0:02:e4:46:6a:44:b0:8a:4e:8b:31:25:
                    a3:48:67:fd:21:87:90:d9:b3:e4:fb:a3:67:1c:30:
                    20:cb:0c:16:b2:0b:72:5d:fd:2e:f6:9c:52:fa:9d:
                    ec:cc:78:e5:03:c0:6b:3c:8e:65:f2:41:95:a4:ac:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:76:56:90:37:A2:51:57:DA:E6:48:EC:D2:6E:7A:3B:74:95:29:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9dc886d8-f765-426b-8c45-7875d02774f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9dc886d8-f765-426b-8c45-7875d02774f6/f42a104f40c339106e4ac9b70ec275eb472678a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.184.0/22
                IPv6:
                  2800:bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:89:16:58:b9:47:37:13:22:5d:3f:69:31:c8:0c:84:01:
         84:ae:d3:1c:16:2c:94:38:61:85:7a:82:22:25:6b:a7:4d:a5:
         77:8e:0a:56:84:64:79:6f:7e:d6:a4:dc:15:77:c9:05:af:d5:
         47:a0:49:a6:95:59:2d:9a:6a:e8:b7:56:b5:4c:c9:57:51:26:
         72:a9:36:2b:1c:60:38:98:26:b7:3e:34:23:d4:a2:d1:9d:6c:
         f3:27:45:1e:80:a8:ad:43:f5:42:78:73:06:90:7f:71:ce:02:
         1b:40:ab:36:b4:2d:4e:14:9f:6f:4c:24:21:34:42:2d:66:2b:
         e0:97:f3:4a:a7:8b:31:45:dd:12:a6:9a:0b:d9:2b:58:a6:7a:
         21:d6:e0:3c:18:64:ac:7e:9d:0f:6e:63:1e:3e:80:a5:53:34:
         1f:d5:98:17:45:8a:c5:02:cb:f6:b8:06:d5:d4:44:c4:ec:dd:
         2e:be:6a:30:76:e7:21:e4:e3:d4:0d:3a:1e:75:bd:13:27:60:
         bd:fb:a0:bb:af:01:a8:94:79:fb:3a:1f:99:b7:c2:0d:62:a1:
         84:a9:c0:ba:a9:28:91:99:0e:95:48:80:be:5a:30:ed:3e:75:
         3e:61:b6:ca:3c:7d:25:44:48:bc:de:64:52:8d:d7:b3:9d:d7:
         b8:eb:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----