Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021a168cf68ddbf90cd8b94e942cd81f43caedd1.cer
File:                     021a168cf68ddbf90cd8b94e942cd81f43caedd1.cer (raw, json)
Hash identifier:          +uBPSutV08LOudvsMALG+VH2Fh/JbP++K3elyj/QkXw=
Subject key identifier:   00:AB:A3:B8:0B:BB:EB:1B:1C:FA:E8:FB:CD:DC:10:12:BD:82:3B:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9DBF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/021a168cf68ddbf90cd8b94e942cd81f43caedd1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 15:23:01 +0000
Certificate not after:    Fri 10 May 2024 20:56:48 +0000
Subordinate resources:    AS: 270054
                          IP: 200.225.116.0/22
                          IP: 2803:5de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15326198 (0xe9dbf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 15:23:01 2023 GMT
            Not After : May 10 20:56:48 2024 GMT
        Subject: CN=021a168cf68ddbf90cd8b94e942cd81f43caedd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:33:c9:26:92:55:42:bc:62:55:d0:7a:43:cd:
                    77:54:b0:56:4c:00:b0:35:fd:39:f7:a0:f7:62:23:
                    0e:b2:ba:94:d2:19:db:d9:25:ad:0c:e1:b8:6e:39:
                    e9:10:49:f7:ea:ba:8d:ee:de:b7:c4:bb:1f:1c:f6:
                    61:3c:5b:8c:7f:e6:a9:f7:7c:b2:ea:ca:31:e7:92:
                    30:fc:cb:80:d0:58:e7:fa:c7:a5:7d:b2:14:9f:35:
                    94:bd:83:1f:16:48:82:ee:e5:67:1d:b3:b7:a8:54:
                    02:44:21:a5:af:32:38:7d:da:9b:be:7a:64:e3:ee:
                    8d:18:83:14:d9:f5:62:d5:07:6f:48:2b:52:c8:44:
                    a3:31:89:d8:26:e2:f4:24:47:e8:1a:7b:17:3a:37:
                    9e:e3:33:3b:67:46:93:05:0f:d2:6f:e7:a6:94:55:
                    ba:54:57:74:24:e4:98:34:bf:72:ad:62:c8:91:10:
                    04:30:9e:9d:cb:97:35:60:f6:59:1c:1f:ed:08:fc:
                    ea:d9:0b:1b:cb:1a:41:59:27:a1:63:12:62:ac:47:
                    2d:a3:1d:d6:ce:a5:86:d1:c0:62:9d:65:ea:a2:7e:
                    cb:36:2c:16:2e:e9:fe:e7:3a:1e:a2:c3:ce:1a:d5:
                    4f:50:03:23:66:02:b2:45:44:4d:61:e7:1b:ca:ed:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AB:A3:B8:0B:BB:EB:1B:1C:FA:E8:FB:CD:DC:10:12:BD:82:3B:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/021a168cf68ddbf90cd8b94e942cd81f43caedd1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.116.0/22
                IPv6:
                  2803:5de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270054

    Signature Algorithm: sha256WithRSAEncryption
         8d:8c:02:d2:25:e5:31:d4:63:88:46:91:57:57:91:36:92:3c:
         e6:86:c3:1f:93:bb:d0:19:7b:f1:9f:4d:e9:f8:a8:fa:32:84:
         a8:52:8a:be:a9:a0:e5:c6:ad:57:65:1b:ae:d5:68:3c:d1:5a:
         a7:6c:b5:31:10:93:11:f5:5c:06:61:e7:1a:6f:b9:27:7c:63:
         12:14:a0:c4:62:88:09:5e:3b:cf:f9:16:d5:c1:50:64:94:ae:
         fd:a2:66:78:9f:8d:8e:25:51:88:8e:a7:97:32:9d:da:75:a3:
         9e:de:d8:64:7f:bc:1f:c4:b6:0d:5b:b4:6e:22:ec:96:16:6e:
         f5:79:1a:4d:eb:2d:a1:c2:ed:bb:da:85:36:c5:21:42:62:0b:
         de:1f:23:86:46:52:50:9d:51:39:6f:6c:45:c2:3e:4e:ce:29:
         f0:d8:02:4b:ce:05:d8:d8:79:9f:1c:2f:d7:9f:04:74:5c:11:
         5f:54:4b:57:96:3d:91:1c:38:91:e8:e5:68:bb:cc:a9:68:e6:
         e9:9f:75:0b:d3:0e:64:7d:6d:aa:0f:4b:8f:8a:e8:a2:1a:68:
         19:14:ef:77:cc:07:d9:6b:2e:12:8f:e2:bd:09:76:8d:2e:5b:
         82:07:24:3a:59:ca:93:e6:43:e4:01:41:2a:fc:cb:da:bf:73:
         b1:73:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----