Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
File:                     40dd355863a64b49aaea56a333a078f4104009ff.cer (raw, json)
Hash identifier:          F6bBts5vi/JSvusFIO1gzU86ncUCWuvFd7IZW+4dVzk=
Subject key identifier:   30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103AFDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 May 2021 20:24:39 +0000
Certificate not after:    Sun 12 Jan 2025 19:07:16 +0000
Subordinate resources:    AS: 266754
                          IP: 45.232.0.0/22
                          IP: 2803:fb20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17018847 (0x103afdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 20:24:39 2021 GMT
            Not After : Jan 12 19:07:16 2025 GMT
        Subject: CN=40dd355863a64b49aaea56a333a078f4104009ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:ef:bb:ec:47:58:a1:60:a2:27:e7:d8:da:
                    a9:a9:0e:6f:90:1c:eb:3a:55:c7:72:34:65:f1:e6:
                    57:03:ef:8c:43:28:cd:f1:0c:9f:43:e4:88:da:d2:
                    80:c1:be:2c:77:eb:84:c5:3b:de:ba:54:b2:a4:43:
                    1d:ae:a3:cd:ab:bc:e1:76:a8:73:77:d0:ea:d3:ea:
                    db:ed:f5:fd:17:d7:77:ce:06:85:16:b2:3f:74:de:
                    70:35:1b:c5:c1:b9:51:67:cd:1e:e5:3b:b1:c7:b3:
                    0d:ed:c8:26:47:cb:87:66:c9:d1:8f:fa:ec:eb:d5:
                    f5:3d:01:69:24:68:42:c0:95:1b:db:da:9d:44:02:
                    99:ec:1c:c3:2e:32:74:39:23:b5:45:93:82:4b:7e:
                    6d:4b:de:a6:18:5a:4e:58:32:04:68:91:ad:77:dd:
                    cf:4b:30:db:09:1c:71:bb:42:68:bc:9c:8d:c1:30:
                    ed:40:4f:c6:31:f5:ce:b9:b7:79:6e:60:14:f3:15:
                    b5:9e:0e:d6:9f:02:bd:f9:8b:23:17:9d:50:12:b4:
                    85:f0:a3:8d:f4:c6:9a:1f:5e:3e:49:db:c2:ae:1e:
                    18:a5:69:2c:1c:98:53:7d:86:0f:1e:2a:b9:2d:a0:
                    d6:e7:a3:52:23:da:6f:97:e6:f6:a8:b9:da:14:90:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.0.0/22
                IPv6:
                  2803:fb20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266754

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:ae:bd:37:92:6a:51:2e:54:40:3b:f0:cd:df:da:d8:1d:
         17:73:c9:e9:ea:ac:ba:7b:47:eb:3b:92:42:83:b2:10:47:f5:
         aa:bd:26:34:7c:26:cb:16:19:52:7e:18:4f:52:53:5e:f0:b1:
         4a:ff:b3:6d:44:2d:1e:37:7b:71:a7:f8:bf:1d:97:c0:5d:22:
         7f:17:f2:b5:fd:80:c0:20:5e:13:c1:e0:6f:bd:6c:9f:ed:4b:
         74:09:39:e8:69:32:3d:18:72:66:0b:18:4f:cd:9d:78:ca:51:
         a8:1f:d7:99:e5:db:4c:d2:bd:09:e4:80:82:ac:60:db:d7:2d:
         eb:c3:45:3c:45:8d:96:98:37:60:1e:7a:bc:4b:b3:96:98:e5:
         88:cf:0f:b5:95:a0:31:74:c4:a9:83:c8:c0:b4:c9:ae:43:79:
         5e:44:5e:09:fe:4d:fa:a3:bc:7b:bc:e1:65:27:aa:b0:20:dd:
         8e:9f:d9:83:d2:27:d2:7d:08:9e:99:59:3d:d2:20:39:92:a8:
         6a:dd:53:d4:d2:51:ba:ed:f8:48:c5:c9:1c:90:a7:a4:33:a0:
         50:72:ea:8f:a1:83:ad:0f:0f:d0:eb:0e:3f:3a:68:b7:21:05:
         ac:a1:c0:67:80:05:a3:94:5b:2e:cc:b5:e8:1d:5e:43:69:8f:
         ee:66:3d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----