Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa17fa162b8c63daa4db78d5049749365ad3d60b.cer
File:                     fa17fa162b8c63daa4db78d5049749365ad3d60b.cer (raw, json)
Hash identifier:          N0zPj+kQOqjS+cfgOlD6jzxiuXibIItb9dtAZr24s2A=
Subject key identifier:   0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D4140C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/fa17fa162b8c63daa4db78d5049749365ad3d60b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 13:47:15 +0000
Certificate not after:    Tue 09 Jan 2024 15:04:42 +0000
Subordinate resources:    AS: 264680
                          IP: 168.227.4.0/22
                          IP: 2803:7d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13898764 (0xd4140c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 13:47:15 2022 GMT
            Not After : Jan  9 15:04:42 2024 GMT
        Subject: CN=fa17fa162b8c63daa4db78d5049749365ad3d60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:19:0e:59:57:04:30:7d:db:e1:af:e6:9f:
                    82:97:14:3e:e4:06:cd:32:9f:e0:ef:e2:62:86:12:
                    a4:23:62:32:a8:f4:b7:e2:ae:7e:8d:24:39:bd:67:
                    bf:f0:bd:bc:52:e5:8f:88:51:2d:e1:b8:e4:44:3c:
                    98:9a:07:8b:53:53:80:b4:97:2c:86:92:bb:9c:e6:
                    a4:c2:37:bd:7a:ea:9b:69:75:20:23:a8:4d:c0:61:
                    5f:c4:2d:8c:7f:62:72:43:65:a1:3d:80:ab:73:b3:
                    fa:ad:58:9e:87:e8:82:3f:1b:6f:71:8f:21:89:40:
                    ac:51:67:33:34:f1:e8:5f:7f:a4:8a:f9:96:1a:2e:
                    4a:9d:57:37:9d:03:4b:6a:48:ca:9f:6f:b8:f7:40:
                    e9:6a:ee:56:6b:0e:36:e2:5a:5a:01:b7:b1:0c:e4:
                    21:2d:9e:98:50:ba:57:ef:71:93:91:34:fe:c8:63:
                    3e:23:0b:54:32:7a:2e:f9:d3:fd:b6:80:71:3b:12:
                    a1:4b:07:c1:57:ec:00:b0:64:a0:d1:81:93:cc:ff:
                    d8:44:81:77:25:22:d5:68:63:89:39:30:04:07:48:
                    69:e9:75:51:49:d2:ce:82:60:e2:e1:5e:5c:35:af:
                    a4:da:44:7b:55:fe:9b:46:43:cf:2a:b2:12:c7:13:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/fa17fa162b8c63daa4db78d5049749365ad3d60b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.4.0/22
                IPv6:
                  2803:7d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264680

    Signature Algorithm: sha256WithRSAEncryption
         08:98:c9:78:4a:e8:63:0f:e2:af:51:49:80:fc:f5:25:f7:26:
         4a:f6:05:e3:d0:4f:5a:d1:99:63:24:bd:8b:b0:33:a2:38:5b:
         fb:5a:68:fc:b2:70:0c:37:7a:bf:ab:fc:1d:a0:0e:8f:9a:48:
         d2:7c:ca:80:3e:eb:ee:0c:2c:46:f0:f5:c6:a7:d8:7a:97:b5:
         1f:7e:29:0b:5a:40:dd:4f:e5:cc:fd:c0:d1:47:28:db:c5:6a:
         2e:83:ea:d5:98:42:2a:d6:66:39:18:6e:1b:5a:f8:22:e0:0c:
         0f:fe:5b:59:64:45:a9:f5:1c:31:5e:4c:5e:24:05:45:b3:d4:
         d5:1e:05:72:cc:88:0d:05:e1:50:06:60:1f:b4:f5:2a:ee:7f:
         b7:8c:ab:d0:64:c1:d6:d6:9a:6e:69:53:bf:e5:02:f2:c5:e6:
         93:77:38:a4:d1:3a:92:5d:76:89:45:09:e4:f8:92:80:03:e6:
         97:ce:33:b6:28:d7:a4:6f:22:26:39:59:8a:9c:b2:e9:62:03:
         2b:6d:35:fa:e4:28:da:e3:da:17:3b:5a:4d:21:3f:03:9b:82:
         e4:67:18:05:a7:73:ec:6d:14:ed:5e:af:bc:8f:db:09:57:59:
         72:e8:8d:c3:03:2d:b1:2d:8f:c4:5c:c2:c4:17:67:65:99:ea:
         81:b3:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----