Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab54f870629d44668b4eafe72acded873a82381.cer
File:                     0ab54f870629d44668b4eafe72acded873a82381.cer (raw, json)
Hash identifier:          BIatPuZpdrHxHCH+aAnlV+s74qIXXGc6H1M5U899PMA=
Subject key identifier:   A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01041A47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/0ab54f870629d44668b4eafe72acded873a82381.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Oct 2021 23:01:37 +0000
Certificate not after:    Thu 16 Jan 2025 15:56:53 +0000
Subordinate resources:    IP: 45.5.64.0/22
                          IP: 2803:7ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17046087 (0x1041a47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  4 23:01:37 2021 GMT
            Not After : Jan 16 15:56:53 2025 GMT
        Subject: CN=0ab54f870629d44668b4eafe72acded873a82381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:61:7f:8e:ad:68:df:63:62:d1:88:7e:8b:
                    10:3d:33:a1:48:a7:cf:e4:8f:0a:d3:6e:6a:4b:69:
                    26:da:68:38:e3:7f:f5:29:df:10:db:5d:1e:91:ec:
                    43:87:c5:bc:0d:3d:a1:66:ef:d5:9e:b2:ef:70:cd:
                    3c:27:f5:1d:1b:cf:e1:06:e6:20:8d:18:09:2f:30:
                    18:a7:d1:de:81:76:6b:4b:1d:21:ab:41:41:ba:92:
                    db:40:3e:f6:4b:b2:0a:17:95:8f:74:75:ac:99:e4:
                    57:ef:11:75:0f:f0:06:47:3b:02:1b:c5:4c:44:b5:
                    f1:ac:d1:48:43:06:2d:48:ed:7c:44:90:8c:d7:af:
                    6c:ba:c8:22:e9:33:9a:a1:a7:22:54:77:e5:24:95:
                    31:1f:87:aa:d4:ad:a7:a0:90:f9:42:8e:92:63:d7:
                    85:a8:ac:51:b3:61:3c:10:b0:98:50:79:2f:6f:60:
                    c6:73:4e:6c:ec:5e:5e:d9:ab:22:ab:c0:e5:b6:e8:
                    b6:bd:e5:29:e5:f0:e8:e4:9a:6d:e7:93:f1:55:06:
                    fb:00:ce:cb:e3:2f:13:17:c5:c2:4e:57:25:e0:6a:
                    91:c9:36:c4:af:8d:75:8a:71:52:b1:f5:1a:fa:2c:
                    c8:3b:6e:22:2f:24:8e:42:af:14:39:58:74:f0:e7:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/0ab54f870629d44668b4eafe72acded873a82381.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.64.0/22
                IPv6:
                  2803:7ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:d0:64:d7:94:ba:5e:ff:e6:f8:63:7d:b6:bc:31:8f:74:
         21:a1:72:c4:be:25:00:6a:c2:64:a1:b1:ac:ac:7e:32:e5:a2:
         17:48:15:71:30:ae:5c:47:c1:02:87:69:5b:0d:9d:d2:24:70:
         84:65:83:2d:20:a8:c3:de:dd:78:1d:df:f9:4b:b0:55:28:9a:
         81:f3:a7:c0:e8:41:3d:f1:6e:77:30:46:c0:91:62:39:e3:1c:
         b7:60:97:9c:72:87:c8:4f:0a:5e:31:7b:18:5f:64:f8:a9:eb:
         ba:1e:1a:09:7d:16:0e:42:fa:ee:ae:61:9e:f4:24:dc:a5:80:
         4c:db:02:10:ba:96:db:4c:cd:54:0e:5e:ba:42:ca:13:2e:b2:
         1b:e8:a9:24:b4:01:4a:50:33:c4:c7:7a:91:e7:07:1b:82:1f:
         b1:aa:04:61:20:59:82:ce:1b:d3:56:19:b4:10:9d:c0:34:ac:
         b9:1d:e2:65:5a:46:6c:6a:64:41:d7:11:a2:54:62:ad:8f:fe:
         1f:09:10:c3:9f:cf:65:d7:0b:b9:b9:cb:8c:e1:fd:0c:0c:1a:
         f5:3d:33:f1:f8:91:cf:79:20:fd:70:99:0d:fb:0a:9f:0b:a9:
         9f:83:42:4e:41:95:4e:02:a8:c2:74:5b:45:62:07:4c:67:8b:
         ed:a6:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----