Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.cer
File:                     4fb1e072b1b2c5dc6972e25a3b19063dc5466874.cer (raw, json)
Hash identifier:          gfNFRSmdVo5m/fXNLNcdaksKjNyfZ7+hmeW1qgR4n6Q=
Subject key identifier:   F9:49:7C:85:E7:A0:DD:7C:CA:20:F2:66:62:19:B5:99:42:D3:B9:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01047084
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Jul 2022 22:47:49 +0000
Certificate not after:    Sun 19 Jan 2025 18:12:52 +0000
Subordinate resources:    IP: 45.232.32.0/22
                          IP: 2803:4720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17068164 (0x1047084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  5 22:47:49 2022 GMT
            Not After : Jan 19 18:12:52 2025 GMT
        Subject: CN=4fb1e072b1b2c5dc6972e25a3b19063dc5466874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:b7:1b:d7:1b:b9:24:f0:71:7e:e9:72:00:
                    3c:30:12:8f:6b:5b:04:2f:38:3b:f3:d3:cb:58:6a:
                    33:cd:61:28:56:74:cf:92:81:28:9c:dd:de:6e:9e:
                    db:1f:28:a1:a8:3f:6b:74:73:a6:3a:79:b9:3c:77:
                    49:a2:6e:cb:20:9f:ae:59:e9:d9:2a:6d:3c:f7:c5:
                    73:b8:ac:b9:f6:ed:b6:17:40:7d:56:a0:b1:5d:f9:
                    5a:f2:aa:0f:01:f0:bf:8e:e9:f0:44:db:aa:98:fa:
                    3f:c5:0a:51:86:9d:8a:42:0d:56:ce:52:7b:03:51:
                    b4:26:7b:ee:3a:ed:c1:15:35:65:23:00:56:5a:ed:
                    33:05:9a:83:82:df:4b:d4:dd:01:42:7c:00:15:bc:
                    1b:a4:50:c5:22:88:81:92:93:b3:08:f0:f6:0e:61:
                    dc:a1:73:eb:ae:02:b4:32:34:4a:f4:8a:a7:02:e0:
                    d3:4d:6c:c0:05:f8:74:68:3c:61:0b:d8:df:53:12:
                    75:de:76:db:d9:ff:51:9f:ae:91:69:97:81:de:86:
                    b2:33:2c:d0:d9:ed:0b:b8:d0:e2:3a:ff:09:17:11:
                    10:ba:75:fb:11:c3:4a:ba:e2:eb:5e:64:51:2c:b2:
                    96:f5:0d:f9:27:82:00:14:5a:f2:6b:3f:35:8b:14:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:49:7C:85:E7:A0:DD:7C:CA:20:F2:66:62:19:B5:99:42:D3:B9:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.32.0/22
                IPv6:
                  2803:4720::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:75:c9:5e:10:ca:be:92:02:30:9e:90:9b:64:ce:ba:ed:20:
         10:60:99:a3:b1:1c:2b:0c:fb:fc:57:e4:83:4b:34:c8:06:12:
         eb:6b:aa:11:96:5d:41:84:f1:f8:93:08:3f:3e:47:7f:ae:1f:
         a8:ab:5f:00:e6:8c:47:c4:43:3c:d6:0a:6c:c7:7a:0a:21:a4:
         18:87:cc:48:f6:51:e7:82:57:65:6c:77:d7:d3:8a:69:63:ea:
         68:57:f3:61:e6:3f:72:df:06:95:0a:c6:14:c2:ed:8f:f2:4c:
         85:3b:90:63:26:67:c4:b1:45:3b:16:45:d2:2d:89:42:3a:82:
         73:9a:03:39:ff:1d:c1:24:43:6f:91:aa:88:a0:61:96:31:5d:
         8a:1d:10:a6:48:f5:e6:54:79:8d:3a:76:f7:f1:f3:00:93:b1:
         1c:7a:75:22:fa:61:ca:85:2b:8d:f4:b2:0a:34:d9:aa:8b:09:
         ec:6d:e5:6c:6d:6e:0d:01:e5:ad:9c:ec:89:4b:03:5a:33:1b:
         4e:f8:30:98:a9:90:14:ca:0c:29:fc:06:45:50:cf:4e:dd:67:
         3d:75:f6:cb:2f:4b:90:3c:a9:39:6b:e9:e3:89:e8:5b:b0:fa:
         c3:5a:90:21:d6:45:30:56:93:dc:b4:22:8b:45:9e:40:92:0a:
         3a:6e:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----