Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer
File:                     5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer (raw, json)
Hash identifier:          h/EpntlIqiyy/dymxEhSh18G4dik8f26q0SSQwvHKnY=
Subject key identifier:   41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFB536
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Jul 2022 17:39:35 +0000
Certificate not after:    Sat 30 Nov 2024 19:36:26 +0000
Subordinate resources:    AS: 266720
                          AS: 272821
                          IP: 45.229.252.0/22
                          IP: 2801:1d4::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16758070 (0xffb536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 13 17:39:35 2022 GMT
            Not After : Nov 30 19:36:26 2024 GMT
        Subject: CN=5d102c8f4fcf978ba445fa1b13f0a5937e71aa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:bb:1f:f4:70:ce:dc:34:e9:f8:15:60:81:
                    c1:b7:0b:48:35:e3:4c:bf:84:5f:be:9f:28:4f:df:
                    7d:85:ed:5d:10:d0:6f:19:4d:d4:3a:5e:df:26:f8:
                    c7:d8:31:b6:7d:f9:88:3c:c6:b4:6f:62:5c:b1:5e:
                    25:f0:f4:eb:f5:7c:54:ec:e1:c2:70:f2:d7:c6:38:
                    bd:b7:f1:ed:2a:f8:98:63:aa:87:4e:28:ad:56:78:
                    d5:f6:96:6f:5c:6b:0e:90:5e:26:2d:06:c3:01:03:
                    b2:5d:7e:82:93:84:fc:3d:5b:ca:14:f7:25:8b:18:
                    da:8e:b4:48:63:36:2a:4c:1b:86:e2:47:69:31:8c:
                    38:f7:af:39:af:5c:1b:e1:86:2c:24:09:08:92:5b:
                    3f:b0:01:28:01:f1:aa:3b:93:f6:0d:2e:4e:7b:a1:
                    30:8f:aa:99:a1:52:e3:1a:36:2f:c6:c7:7f:e3:6e:
                    3e:38:e2:25:9b:a8:e8:db:18:65:32:18:ed:35:b8:
                    89:42:9e:e6:12:b1:9f:31:8e:6f:29:26:a7:59:65:
                    08:cb:ef:73:a2:76:1a:3d:b1:b2:63:6d:9d:9c:ec:
                    a1:f0:20:ba:51:55:99:d9:be:67:a7:6f:0e:a5:43:
                    dc:9f:81:34:61:62:4e:2d:71:72:b5:4f:4d:0a:dc:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.252.0/22
                IPv6:
                  2801:1d4::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266720
                  272821

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:5a:cb:b4:e9:16:6d:ad:a1:89:05:6c:f2:41:05:4e:1d:
         51:8b:74:ef:15:82:23:74:d1:b4:42:75:21:0c:a6:2a:1a:90:
         25:8d:83:93:e2:21:d8:55:54:6b:c0:32:b1:f3:79:74:cf:28:
         7f:fa:f1:07:c8:76:41:94:f3:1e:70:7d:dd:47:4a:a6:2a:61:
         4f:2f:d7:12:9e:7d:0f:90:19:1e:b1:41:49:09:71:e8:0a:01:
         d7:45:31:b2:98:87:ed:1a:ea:7b:eb:20:5b:f2:c7:88:8a:06:
         65:02:a2:99:1b:16:45:4f:66:50:ee:99:69:4f:a8:bd:2d:d0:
         61:d7:d7:69:94:fb:2f:05:da:9e:21:56:08:38:94:80:f8:7e:
         4e:75:50:05:58:e9:e0:79:63:48:23:24:22:01:a4:56:f9:d9:
         b0:dd:5b:de:88:28:d8:77:99:a0:19:1a:22:43:15:31:a7:7c:
         43:8b:2f:4f:68:d6:2c:d2:ec:cb:d3:89:24:14:b1:0d:67:f8:
         10:4a:f8:c0:86:7e:c7:88:a2:fa:65:7e:d4:01:3a:a3:6d:01:
         f2:c0:5d:30:be:8b:1d:dd:a3:26:ed:4b:56:db:03:e7:54:29:
         39:a9:bc:55:1c:2b:ad:45:55:50:f1:6c:d5:91:0b:93:ef:64:
         f7:14:a3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----