Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da49da4a1967abec3f02fc95ba51928148a5a9c5.cer
File:                     da49da4a1967abec3f02fc95ba51928148a5a9c5.cer (raw, json)
Hash identifier:          htafuLNRYixgOVfrsye8JQrmUfEcLYxonQsWcx8prag=
Subject key identifier:   24:8E:14:29:6B:51:BF:25:C8:11:B0:33:7B:66:13:E9:B5:6D:05:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE8D45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/da49da4a1967abec3f02fc95ba51928148a5a9c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 20:15:01 +0000
Certificate not after:    Wed 27 Nov 2024 16:01:36 +0000
Subordinate resources:    AS: 269957
                          IP: 45.191.156.0/22
                          IP: 2803:22e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16682309 (0xfe8d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 29 20:15:01 2022 GMT
            Not After : Nov 27 16:01:36 2024 GMT
        Subject: CN=da49da4a1967abec3f02fc95ba51928148a5a9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:50:98:c8:66:b6:01:61:90:70:9b:c3:26:
                    a4:84:46:2f:c2:fb:87:9c:a2:b7:b4:dd:84:85:77:
                    4e:f5:98:ae:f0:96:a6:15:14:de:7b:96:08:23:0b:
                    38:ca:7a:47:a4:90:e8:9a:7d:b1:45:48:9d:f7:a2:
                    cc:7a:a4:cc:f5:bf:9c:db:d0:9d:53:22:3e:91:75:
                    69:28:1a:0b:c5:5d:d3:89:b8:36:a8:9b:68:1b:83:
                    61:88:d1:36:74:f0:30:a7:d0:10:a5:38:b3:b9:bd:
                    55:dc:e9:54:21:21:01:2c:7c:0f:86:e9:0e:57:38:
                    c2:81:de:09:75:3e:ff:a8:93:d0:cd:c2:8a:01:57:
                    47:7a:a4:75:71:49:01:ee:5a:e0:e4:56:d2:17:66:
                    e8:30:d1:e4:c6:20:82:d1:0d:41:7d:e4:82:77:73:
                    0d:e3:68:ca:ec:e6:36:80:7c:16:37:59:4a:e2:b9:
                    91:48:fb:a2:e9:ad:2f:9e:bb:ca:1f:0b:b7:91:ae:
                    04:aa:fc:19:15:92:f1:9d:3e:ed:9c:0f:dd:66:fd:
                    a6:0b:8b:07:39:7d:38:9a:73:52:41:fd:99:30:ee:
                    ec:d6:5c:65:60:db:44:73:d4:ad:62:e0:d4:92:e0:
                    62:d0:ee:6f:73:f7:0c:ee:8a:41:c7:0f:7d:7e:e2:
                    1a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8E:14:29:6B:51:BF:25:C8:11:B0:33:7B:66:13:E9:B5:6D:05:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/da49da4a1967abec3f02fc95ba51928148a5a9c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.156.0/22
                IPv6:
                  2803:22e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269957

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:71:5c:c7:37:b9:c4:c7:cf:0d:68:fd:d6:05:e2:90:22:
         7a:29:12:0a:13:56:c0:c5:87:3f:c2:ac:0a:7d:9c:de:8f:2f:
         42:5a:f7:b5:a5:e8:2a:6b:5b:ef:b6:91:ed:95:9e:98:9a:7b:
         08:5d:83:8e:c6:bd:14:fe:df:bb:46:12:10:14:d6:bf:df:9c:
         ed:68:8a:d4:dc:f0:e7:d7:17:f0:0a:0d:cf:c0:7a:42:13:34:
         e9:1d:33:90:c2:71:e2:3b:f6:94:b6:ab:91:62:1d:42:5f:de:
         31:d7:22:84:e0:58:a5:f8:55:f7:69:80:20:b1:64:a1:00:1e:
         6e:b3:f4:61:e1:19:bb:bd:3b:cb:e9:bc:84:35:3a:41:37:91:
         49:07:4e:8e:00:31:a0:4d:0e:ab:fe:74:a2:f6:7a:7e:a1:4e:
         4a:53:46:99:65:2d:90:ce:76:84:21:42:7b:54:20:2c:9a:48:
         20:15:05:38:23:84:35:63:9b:54:40:36:0c:c7:b8:23:27:81:
         cf:28:0d:de:f3:e6:1d:17:1a:c2:68:d1:c5:e4:80:39:23:76:
         5c:37:00:b2:12:45:6c:ba:62:4d:63:6f:23:85:5a:ae:a2:3a:
         ee:2b:78:d7:2b:62:a5:73:92:ab:4d:a1:5d:27:fe:30:18:b5:
         5b:da:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----