Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
File:                     7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer (raw, json)
Hash identifier:          a6CypYmxf8EHtn6JAob657TJ3IIeq/7UFXtET/cKgQ0=
Subject key identifier:   A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104403A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Sep 2022 16:56:30 +0000
Certificate not after:    Fri 17 Jan 2025 21:20:23 +0000
Subordinate resources:    AS: 265679
                          IP: 45.4.216.0/22
                          IP: 2803:c1c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17055802 (0x104403a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 16:56:30 2022 GMT
            Not After : Jan 17 21:20:23 2025 GMT
        Subject: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:be:ea:0f:f0:30:92:be:5f:69:8f:5e:7f:
                    46:fd:f0:65:5b:13:bf:84:c9:99:35:df:c0:55:54:
                    b1:50:d3:03:df:05:22:1f:50:2c:19:cc:21:41:b4:
                    aa:a9:a3:7e:4d:05:0e:38:3d:5b:c5:3a:08:ad:4b:
                    5e:6f:9b:59:37:c3:f5:67:bb:5d:d7:30:cc:c3:77:
                    62:6e:10:5a:46:5f:4e:77:a9:f1:c0:89:85:24:8e:
                    f6:5e:b9:2d:4c:ed:58:e2:04:31:c5:0e:d8:cf:74:
                    c4:b5:82:6c:ea:01:b5:30:c5:ea:d6:d4:a0:22:51:
                    bd:b6:7d:cc:1b:0f:7c:ee:42:34:a7:b9:1b:ef:10:
                    b8:d7:da:4c:e4:31:b0:6c:f8:42:ce:d0:06:02:6f:
                    12:36:5e:b6:ac:8b:77:26:7c:93:34:ac:ba:e0:81:
                    e6:9b:14:c4:b7:16:55:15:c8:d4:5f:80:e9:31:23:
                    fa:d4:4c:f3:4b:d2:67:32:e7:a1:10:87:b9:b1:7a:
                    01:55:c5:aa:05:94:85:e3:12:65:4f:1b:e3:14:74:
                    b4:13:fd:df:87:98:8a:f6:6b:d7:f3:6e:47:7a:9c:
                    e2:1a:00:45:97:71:fa:ae:dd:b9:28:23:f9:37:cf:
                    2f:19:7a:cb:b9:4f:0e:7b:e4:30:d7:23:bf:15:72:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22
                IPv6:
                  2803:c1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265679

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:79:c0:13:51:93:27:6a:10:ab:84:97:5d:db:99:78:c6:
         5c:22:50:82:14:f5:b8:6c:b9:cc:5f:cc:d5:c5:80:a7:3f:34:
         54:83:6e:f9:1b:31:41:28:2e:4d:83:a9:62:b8:5a:31:30:b7:
         ed:42:73:97:d2:77:d9:58:e5:39:62:a4:f9:81:7f:99:62:15:
         3b:c2:33:94:06:1b:e5:66:ea:6d:6e:87:3d:01:f7:e6:40:f6:
         69:3e:7d:0f:02:c9:ce:2d:8c:48:5a:2a:52:c7:c7:1f:4a:58:
         85:2e:20:55:e5:f7:b4:8d:85:ff:ff:67:65:c5:ad:50:66:9f:
         f0:63:9d:79:2f:35:e2:17:60:2e:10:24:a2:e6:f7:2a:2a:b5:
         e8:24:76:5f:c1:17:7c:49:54:bd:24:de:c2:f2:cc:40:32:d8:
         34:18:02:1c:26:42:4a:7a:ca:dc:0e:d4:0b:54:b8:5e:81:de:
         34:08:91:2b:a5:5f:3f:43:12:bb:7f:24:de:e4:4a:6d:8a:f8:
         a2:0d:aa:67:8c:c9:32:61:e6:13:fd:76:56:ce:96:4f:96:f9:
         b8:9f:ab:59:41:0e:5f:2a:54:c6:eb:f3:39:60:19:a5:bf:5a:
         e3:a6:7a:b1:aa:c9:3e:4e:37:1e:3b:59:4f:f3:3c:8c:29:90:
         52:21:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----