Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d68573fe0b2d5e63c16744588b911ccf8b80b873.cer
File:                     d68573fe0b2d5e63c16744588b911ccf8b80b873.cer (raw, json)
Hash identifier:          xhqbn1teXibn+g+jX/gax5we0t3soLV79Ry4cPEclTg=
Subject key identifier:   C3:09:E3:B0:1F:3F:30:04:7E:68:BD:41:1E:20:7E:14:45:3F:0E:F5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100B28C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/d68573fe0b2d5e63c16744588b911ccf8b80b873.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Aug 2022 19:00:37 +0000
Certificate not after:    Mon 09 Dec 2024 15:45:20 +0000
Subordinate resources:    AS: 266730
                          IP: 45.231.104.0/22
                          IP: 2803:d320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16822924 (0x100b28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  1 19:00:37 2022 GMT
            Not After : Dec  9 15:45:20 2024 GMT
        Subject: CN=d68573fe0b2d5e63c16744588b911ccf8b80b873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1b:56:aa:da:1e:9e:7c:73:b6:11:d7:23:d9:
                    9a:bd:53:de:b2:bf:9a:63:3d:b7:df:8b:16:73:8a:
                    93:58:02:12:db:87:db:c0:cc:32:a3:25:d1:6f:ef:
                    02:60:03:b6:8d:99:e0:13:78:9c:b6:77:6c:27:67:
                    68:a5:ba:61:aa:a4:96:1b:ff:df:64:16:ac:ce:a1:
                    f9:43:5f:63:c3:f0:d5:12:4a:d6:96:42:b5:30:ae:
                    b3:8c:3c:38:a1:49:f8:8d:f8:16:b2:77:46:f1:cf:
                    20:06:18:71:4c:13:ea:0b:be:3f:f8:a5:34:97:cb:
                    f6:90:c1:6a:84:63:98:80:b2:b5:6c:32:3e:95:72:
                    f7:bc:03:0e:a8:52:c4:ae:28:dc:bb:b4:cb:54:74:
                    11:f1:e7:5c:69:2e:2d:0b:61:6c:93:8a:a7:e9:25:
                    5d:e0:3f:b1:62:af:66:86:d6:22:ed:cb:d9:9d:35:
                    1e:e6:40:61:39:04:07:02:f4:5f:c9:44:88:bf:a3:
                    3f:29:36:25:5a:6a:97:de:21:76:4e:16:55:ac:b5:
                    39:7a:ab:ec:75:be:0a:96:8a:05:b0:73:4b:02:0e:
                    fa:8e:9c:c8:96:86:fc:32:e6:30:b5:0a:c3:95:3d:
                    fb:b3:6e:7f:17:0d:21:51:af:d6:d4:6f:42:80:38:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:E3:B0:1F:3F:30:04:7E:68:BD:41:1E:20:7E:14:45:3F:0E:F5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/d68573fe0b2d5e63c16744588b911ccf8b80b873.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.104.0/22
                IPv6:
                  2803:d320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266730

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:63:fd:65:1c:c2:77:54:7c:fd:34:74:52:31:ca:6c:2e:
         60:0f:5c:f2:9f:23:73:f0:f1:ce:dc:62:ca:b0:f6:48:c8:3f:
         54:2c:a1:0b:ff:7c:54:5e:29:b3:f3:07:c2:16:86:c9:c4:af:
         9e:65:e5:8c:e9:32:2a:54:d5:52:2d:8b:54:44:6f:87:11:e3:
         6f:40:79:63:84:d4:1f:14:39:5c:12:f7:31:31:0c:35:21:f5:
         98:cd:d2:7f:33:53:f5:72:a1:b0:5c:e8:48:29:2a:4b:17:70:
         9d:a5:04:ce:fd:b0:97:4b:25:8f:52:9d:01:f6:ef:f0:6b:94:
         dd:ff:78:8d:d0:fc:e1:5e:26:2b:55:7c:37:4f:c5:43:bc:81:
         db:c9:fb:4e:cf:a7:29:21:64:7e:23:ac:7e:91:4c:5a:60:72:
         bf:7c:32:51:31:3d:66:db:a5:43:64:71:db:f8:57:6c:2b:94:
         e4:73:f2:8f:4d:e9:07:22:7d:fe:ab:e1:f7:8a:41:66:a2:3f:
         9f:84:31:e9:3f:4d:1b:cd:9f:58:e6:7b:b2:f9:35:a7:cf:07:
         ce:41:43:72:56:69:07:b4:6d:54:d4:b7:3a:f6:d0:9a:84:b6:
         32:7f:a2:e9:c4:db:6b:7c:3a:69:10:f1:28:d0:ab:0a:6f:d0:
         e6:df:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----