Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer
File:                     406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer (raw, json)
Hash identifier:          rsajBLp7VtMbbLhU5lxYEnIjxmWNf8tUiickbOtbMWY=
Subject key identifier:   09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FDB7D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/406965e9bc1d932024cd1f27cbf7489c0b714ac7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Jul 2022 13:34:15 +0000
Certificate not after:    Fri 22 Nov 2024 18:14:45 +0000
Subordinate resources:    IP: 45.170.128.0/22
                          IP: 2803:8ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16627670 (0xfdb7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 13:34:15 2022 GMT
            Not After : Nov 22 18:14:45 2024 GMT
        Subject: CN=406965e9bc1d932024cd1f27cbf7489c0b714ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:ce:53:5e:38:2b:f5:cb:9a:e1:1b:7f:c9:
                    0d:66:37:c7:5b:46:bf:38:9e:b6:d1:2d:91:92:57:
                    4e:ea:b6:c4:5b:1e:ac:d0:ef:73:ac:33:3f:66:53:
                    94:77:41:a2:c9:4e:b7:42:4a:ab:48:e6:98:71:b9:
                    4e:b3:6b:3b:08:60:54:4d:69:d8:53:b3:d5:59:b9:
                    7f:05:9f:ab:80:30:9e:b7:7f:46:4c:87:18:27:7f:
                    53:1d:d6:63:03:be:50:66:8f:56:8e:26:84:90:24:
                    3a:9a:01:7c:b1:2c:59:dc:12:40:5e:ab:f2:95:85:
                    ba:32:04:25:09:ca:f3:9c:24:0a:29:ee:c0:41:8b:
                    46:04:5f:9f:e2:56:e3:a8:b4:42:3f:45:d8:f8:28:
                    92:09:33:e8:5c:e5:76:4c:22:58:4c:ce:ca:e6:d4:
                    55:e1:ee:c6:ee:11:30:20:17:02:c0:64:80:95:e8:
                    35:5b:0d:52:4c:39:8c:c8:be:9e:72:2f:87:08:9f:
                    f1:50:08:6b:4b:5c:26:42:a2:76:5d:a4:9d:08:95:
                    86:b7:a7:d2:93:ac:27:8c:19:81:71:0e:51:61:8a:
                    fa:14:78:36:a7:2a:50:4a:b3:04:c0:76:5d:04:13:
                    e0:34:23:be:cd:7f:08:47:a6:68:5d:ea:df:7e:55:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/406965e9bc1d932024cd1f27cbf7489c0b714ac7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.128.0/22
                IPv6:
                  2803:8ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:56:f0:3d:0d:6d:6d:3c:93:07:47:9d:c6:af:b2:e8:40:82:
         1c:1c:52:0e:7b:b2:a7:be:84:e6:cf:63:94:f6:ee:24:28:9f:
         ba:9b:e5:07:38:61:cf:a4:45:ae:78:ce:4d:ec:d9:7f:52:15:
         71:61:2b:b1:b0:67:14:29:fd:e8:c4:09:d4:be:47:83:f3:4f:
         eb:fe:49:d3:47:0c:a5:aa:9f:6f:30:a3:c7:1f:d9:1e:65:4a:
         66:a7:44:75:b0:f5:17:97:37:c0:b2:7f:ba:b0:32:ab:da:42:
         6d:b4:52:19:e0:62:84:25:6a:b6:46:a2:c5:83:b2:d1:1e:27:
         c7:e5:9d:d3:dd:56:3f:ba:71:91:38:ab:cf:be:0e:f6:da:ed:
         aa:db:2a:65:73:61:29:55:26:96:19:6a:d3:b5:7d:94:5b:4b:
         af:be:28:95:cb:69:40:70:26:9c:97:92:58:ad:8d:41:43:50:
         94:f3:cd:b3:8b:1d:99:d1:b5:b5:f7:c4:86:f2:29:b6:1e:56:
         a7:7e:ac:73:27:77:72:18:ee:5f:01:c2:64:37:c2:ec:c6:57:
         dc:80:2f:c2:ea:7c:2d:37:95:fe:4a:af:47:7a:57:74:97:5e:
         8c:fb:1b:10:46:80:13:12:28:c4:95:bd:dc:d8:3b:5c:55:77:
         82:b4:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----