Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer
File:                     d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer (raw, json)
Hash identifier:          eSAYXew9Txx091p4ePh2F8KA6ccTaN8AaNV7090EPlk=
Subject key identifier:   01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE0876
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Apr 2022 07:09:16 +0000
Certificate not after:    Sun 24 Nov 2024 05:00:00 +0000
Subordinate resources:    AS: 269919
                          IP: 200.115.96.0/22
                          IP: 2803:42e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16648310 (0xfe0876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 07:09:16 2022 GMT
            Not After : Nov 24 05:00:00 2024 GMT
        Subject: CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:c3:ac:b6:e9:9f:25:2c:0c:b3:04:15:90:
                    75:82:6a:3c:fa:80:aa:93:e0:4c:cb:e8:40:01:fd:
                    0f:65:25:7e:b2:87:00:30:bf:90:e5:e0:9b:83:b6:
                    70:e1:1b:6e:bb:2d:f8:5f:47:02:1f:57:a9:ed:bb:
                    d9:c0:f4:87:b8:5b:ad:52:aa:21:a9:b9:28:75:21:
                    6f:d5:a9:11:c1:05:ce:38:e8:30:b1:02:38:60:7b:
                    b6:5c:1e:6e:00:78:dd:46:1d:22:ac:23:c1:83:ad:
                    f7:85:5c:69:60:b6:03:58:5f:0f:c3:6c:14:47:27:
                    81:e2:fe:38:91:1b:98:dd:76:05:25:31:4f:d8:f4:
                    c4:5a:c2:2f:3e:10:9a:53:62:cc:28:19:5c:63:c2:
                    bf:0a:88:a9:b7:bb:d7:c8:c3:86:20:b0:aa:99:0c:
                    5c:1d:8d:bb:36:ad:8a:15:ae:b8:b1:77:da:c9:5e:
                    fa:cd:84:c4:8a:e0:5f:e7:23:3f:3d:d4:4b:53:23:
                    cf:b3:c5:c9:e1:ab:23:61:9e:75:a0:05:a9:52:88:
                    72:30:bd:b8:77:6b:ee:7d:28:22:c4:5c:9c:ad:71:
                    fd:35:ee:68:03:e1:bd:ef:91:ae:88:cf:06:15:e1:
                    9a:82:b4:43:76:13:40:7b:f5:ff:5f:44:df:61:14:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.96.0/22
                IPv6:
                  2803:42e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269919

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:d7:61:80:8b:d0:9b:d2:3b:36:64:47:3e:5f:e0:90:4c:
         c9:59:38:60:70:89:f9:fa:1e:91:15:92:bb:a2:34:13:e2:0a:
         2e:6d:82:c0:9c:c2:8c:6f:9e:ef:68:34:d0:b8:31:01:cf:a4:
         c7:71:54:7b:a7:a2:0a:75:79:1b:93:a8:88:89:25:75:a1:43:
         35:e1:9f:3d:33:05:a9:ce:c3:35:56:07:ab:d1:81:84:92:43:
         ff:65:41:9d:03:73:3f:ba:be:ea:d6:8a:df:18:e2:2f:43:91:
         d6:72:c3:2f:62:26:60:6f:bc:f8:df:62:0d:0d:7c:e3:55:25:
         e5:65:be:c7:65:52:44:a1:72:f8:11:f2:46:ae:fc:5f:dd:14:
         e4:04:3f:66:9c:2d:2b:03:ca:61:8e:ca:df:d5:c6:08:8b:c1:
         9f:fd:b7:ff:8c:3b:64:b8:c6:e9:4a:63:88:6b:cc:85:85:6b:
         ef:26:5a:aa:c5:d9:4b:04:b0:df:5f:3d:16:f9:2f:3a:aa:60:
         4e:bb:45:8e:c9:d5:b8:5a:14:cc:80:1d:35:3e:ee:f0:9a:1c:
         0e:6b:dd:c7:8c:38:ab:88:64:32:0d:f9:08:25:9b:0c:52:1f:
         90:77:37:38:79:c5:7b:b0:82:ef:41:45:ab:9b:a5:b9:7f:db:
         9b:23:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----