Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7d22eabd1574fbd4888f697b7c654bacffb3fea.cer
File:                     f7d22eabd1574fbd4888f697b7c654bacffb3fea.cer (raw, json)
Hash identifier:          BLnTVEsXR2W6ccTDyu+3hJnjyaO9pzfYOE/TXNVXBgs=
Subject key identifier:   43:2C:26:A6:61:7C:21:BE:ED:66:7D:57:D0:26:ED:3E:F5:0A:2E:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E36F4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4be75c5f-eea3-4b39-906b-2db4a882a7b0/f7d22eabd1574fbd4888f697b7c654bacffb3fea.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4be75c5f-eea3-4b39-906b-2db4a882a7b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 20:31:36 +0000
Certificate not after:    Mon 22 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 263787
                          IP: 138.122.160.0/22
                          IP: 2803:f440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14905167 (0xe36f4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 20:31:36 2023 GMT
            Not After : Apr 22 06:00:00 2024 GMT
        Subject: CN=f7d22eabd1574fbd4888f697b7c654bacffb3fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:80:3c:48:35:35:14:2b:84:18:ce:53:d3:
                    c7:19:c0:d5:78:1a:23:0f:e9:92:34:65:ac:7c:51:
                    c3:69:42:b5:f3:af:2e:71:e5:1d:73:c5:1c:71:3e:
                    56:8c:06:36:37:53:07:7b:e5:13:cd:68:88:15:a3:
                    90:ea:06:ec:92:92:c5:60:fa:45:5a:9c:8c:14:e1:
                    58:b3:cc:d1:fc:3f:d4:f6:34:82:91:26:d6:d0:53:
                    26:e5:6b:97:6b:c1:96:a3:11:64:50:77:f0:5c:af:
                    d3:42:b7:bf:5c:b3:fe:8e:fe:f7:e3:4c:b7:f4:79:
                    82:4e:06:f8:5e:26:fe:63:95:c5:cd:55:52:3e:91:
                    dc:b2:a9:e0:c2:a1:08:31:e5:4b:76:22:69:63:b3:
                    8a:08:01:7c:d0:96:c7:dd:0b:2a:15:bf:2f:6d:6a:
                    9e:05:5a:75:5f:6a:b0:8d:be:15:6d:e8:73:e1:61:
                    e3:f4:6c:e2:c7:6e:18:43:c1:bb:7c:c7:33:47:b7:
                    bd:cc:33:b2:a9:a5:c5:00:18:26:ec:9b:eb:73:5d:
                    7b:f7:46:c9:4f:53:d5:76:75:8f:1e:e5:71:9f:88:
                    49:1d:48:3e:73:39:1f:f9:c6:e1:de:c5:ad:84:26:
                    a9:f6:1c:b1:72:ab:01:c8:59:63:66:3c:7c:ee:a9:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:26:A6:61:7C:21:BE:ED:66:7D:57:D0:26:ED:3E:F5:0A:2E:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4be75c5f-eea3-4b39-906b-2db4a882a7b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4be75c5f-eea3-4b39-906b-2db4a882a7b0/f7d22eabd1574fbd4888f697b7c654bacffb3fea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.160.0/22
                IPv6:
                  2803:f440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263787

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:4d:45:8c:78:2b:12:5a:62:8e:43:3a:dd:f7:cb:9e:50:
         5a:31:11:f9:55:61:b0:44:61:fb:ea:84:cf:9d:88:f1:55:cf:
         8a:76:3a:54:ed:9a:1e:78:5f:bf:0b:40:81:d3:8d:0f:ab:18:
         bc:da:18:fe:2c:88:cb:91:31:74:1a:7a:95:e8:76:f7:ef:d0:
         48:38:27:4e:73:6d:2b:3c:e3:45:91:1f:6b:e5:cb:44:76:0b:
         9e:7d:3c:4d:74:60:33:50:10:55:e5:cb:80:ba:63:bc:25:23:
         00:68:b4:14:e4:90:42:26:3b:e9:c4:b8:45:17:68:66:b1:f0:
         cb:1f:90:4f:37:fa:0e:86:85:1c:55:35:f3:bd:46:9d:7e:87:
         76:cd:65:00:c9:25:71:71:1a:e1:7e:2d:89:0d:4d:b8:1a:f8:
         ef:21:46:b6:c1:a8:45:7e:78:ba:b3:e2:76:29:e5:3d:96:10:
         c2:6d:96:6c:d2:84:ca:7b:7b:8a:b4:ec:58:85:ba:5b:d0:ac:
         22:94:81:5f:7f:c0:8f:ca:f4:df:76:cd:e5:a5:93:07:c6:75:
         af:b4:e2:c9:85:79:da:ab:51:8b:1a:78:59:47:14:f9:cb:73:
         fb:89:e6:ae:fc:64:a4:b5:e8:0a:54:02:a7:34:27:01:5c:47:
         9c:de:a0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----