Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
File:                     fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer (raw, json)
Hash identifier:          1gFIDbPAumE/Jo0ixTq/eTugN9y6mXM9rPCSTv041d4=
Subject key identifier:   27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C71D3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 May 2022 18:10:30 +0000
Certificate not after:    Fri 24 Nov 2023 20:42:36 +0000
Subordinate resources:    AS: 267858
                          IP: 170.244.168.0/22
                          IP: 2803:eac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13049147 (0xc71d3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 12 18:10:30 2022 GMT
            Not After : Nov 24 20:42:36 2023 GMT
        Subject: CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:4d:e6:f7:82:6b:f2:0f:d3:c7:4d:21:74:
                    7a:6b:db:78:24:e6:5d:c3:9c:6b:4a:4f:8b:44:7a:
                    13:f8:89:97:ba:d3:15:b1:f8:f6:73:e3:87:02:57:
                    f2:55:9b:df:44:15:2c:9b:dd:44:91:2e:a4:7d:12:
                    86:c9:58:ce:e2:d4:2b:a5:c1:19:11:ef:25:3d:4d:
                    16:5d:6c:a1:41:de:c1:0d:1e:bd:33:8c:8c:d2:00:
                    b5:27:93:3d:8c:f3:34:be:3e:ce:9c:10:57:b0:3c:
                    35:bf:04:f6:c3:24:9b:22:5a:9f:c9:a1:23:c4:d0:
                    3c:06:4d:69:85:46:07:3a:50:99:c0:85:40:ac:38:
                    c5:fd:0b:eb:ed:6e:c7:2f:55:a1:97:4a:c5:4f:bc:
                    84:13:7a:83:98:e4:bb:44:87:f7:bb:52:bb:b9:fe:
                    b3:d1:77:b2:aa:c1:50:fb:74:7d:1a:71:4d:50:6c:
                    26:63:d8:24:76:2f:f9:02:4e:af:29:53:3a:b6:a8:
                    74:95:21:04:60:f9:d5:bf:38:f3:d7:e4:81:07:11:
                    98:71:08:44:8c:d4:5f:7a:49:fd:7f:1d:ce:83:b7:
                    90:15:3d:24:ad:17:79:6e:c3:3d:07:56:39:60:a6:
                    99:71:bb:cb:6b:64:18:61:17:e4:8f:0c:0b:ed:1d:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.168.0/22
                IPv6:
                  2803:eac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267858

    Signature Algorithm: sha256WithRSAEncryption
         b8:15:ff:bd:cc:ff:fc:97:0e:75:a7:99:5d:21:ec:a1:b2:6f:
         80:b0:58:4a:29:c1:5f:c5:88:e7:31:95:8a:ac:87:58:01:d1:
         6b:56:32:53:e2:ef:58:e7:91:62:d4:5b:b2:ee:a7:5a:ef:72:
         16:af:94:f0:28:e8:87:02:64:81:b6:ff:96:3a:69:5d:05:66:
         5e:4a:31:dd:cb:01:63:eb:d3:13:b6:7e:98:76:04:65:e6:1c:
         d7:f9:ae:3d:3b:82:dc:bc:43:ce:37:b4:66:3e:d1:41:93:3f:
         85:fd:e8:83:09:db:a0:00:7e:36:63:55:af:fb:53:3b:9d:86:
         19:93:01:0e:76:0f:1a:af:c6:cf:79:b1:f3:65:f7:c4:5e:13:
         86:66:af:08:b5:6c:22:d7:4d:c3:0f:d7:0c:53:19:4b:75:90:
         2c:7c:7c:da:ed:69:ce:19:34:d2:99:d2:36:8a:6d:d5:86:ec:
         a5:b8:d7:e6:74:91:83:4c:a5:be:71:41:70:04:6b:64:ea:6c:
         d8:a9:3b:56:6e:e8:29:2d:97:3a:84:83:55:29:61:3d:1e:f8:
         86:f9:42:d8:7f:58:e1:39:ea:ae:25:85:f2:a5:0e:33:53:11:
         1d:8a:7c:fa:cb:2d:2d:0a:3a:82:54:f0:b4:d0:64:5b:e9:01:
         b4:d4:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----