Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/152aa86f2f6bbceee909c302109ad878f09a7dbc.cer
File:                     152aa86f2f6bbceee909c302109ad878f09a7dbc.cer (raw, json)
Hash identifier:          IYNOCoadF5qQMaOnQXdF+CxZt7FEq7zmjQJvxp5ozFY=
Subject key identifier:   76:34:D2:6D:5E:65:05:AB:4F:FC:7F:3F:2F:A7:93:F1:59:7D:B2:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FDFAD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/152aa86f2f6bbceee909c302109ad878f09a7dbc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Oct 2021 16:42:13 +0000
Certificate not after:    Fri 08 Aug 2025 19:31:54 +0000
Subordinate resources:    AS: 271993

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16644822 (0xfdfad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  8 16:42:13 2021 GMT
            Not After : Aug  8 19:31:54 2025 GMT
        Subject: CN=152aa86f2f6bbceee909c302109ad878f09a7dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:3c:cc:af:c7:8d:1a:ba:21:f6:0b:7b:93:
                    30:eb:f0:b3:69:7a:fb:8d:33:5f:68:b9:5c:f6:34:
                    38:28:e6:a2:ea:e8:c1:fb:43:40:01:c5:b3:2a:57:
                    b4:69:91:4e:40:19:fb:36:4c:40:10:9e:9d:3e:1e:
                    03:b4:ba:f2:74:74:88:c2:98:6e:06:13:2b:d8:c5:
                    ca:cd:b9:ba:b1:c4:5f:1a:d0:f1:ae:6d:56:77:da:
                    b5:35:fe:9a:ac:86:7b:20:0f:63:79:60:fa:1b:d4:
                    71:e6:00:9b:67:12:2a:a0:0a:b0:c2:48:7b:d7:a2:
                    bc:33:3a:f1:ef:65:b0:61:6e:19:38:b6:ec:08:f8:
                    b2:65:98:64:00:1c:9f:4b:20:b1:cc:6c:57:d0:25:
                    d4:74:9a:bc:93:73:de:fa:2e:2e:bd:92:af:44:86:
                    d1:54:e2:81:78:c3:85:4a:43:30:da:12:8a:5a:5c:
                    11:4e:4c:d1:df:b2:5f:2e:48:c9:0b:ad:b5:20:4c:
                    a6:e5:a7:e8:88:4a:73:ec:f5:0a:6a:47:28:6b:3c:
                    68:d6:cb:08:82:bd:67:c4:3b:84:aa:73:c2:a7:7b:
                    ad:38:b0:fa:39:57:f4:cf:a2:e9:ff:5b:a4:e5:9c:
                    24:79:88:46:aa:94:46:52:a6:4a:a2:bc:24:af:c0:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:D2:6D:5E:65:05:AB:4F:FC:7F:3F:2F:A7:93:F1:59:7D:B2:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/152aa86f2f6bbceee909c302109ad878f09a7dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271993

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:6f:39:eb:a4:c6:08:df:ce:66:4b:f5:8e:1b:68:cc:6e:
         77:b8:f8:b5:76:3f:4b:c0:99:56:91:91:9b:f4:fc:64:c7:e7:
         71:46:49:bb:cd:9a:a4:97:2c:d1:64:47:61:7c:26:2f:c1:f0:
         55:87:a0:00:f7:00:fd:a4:2c:df:ba:90:c9:53:fb:77:86:c1:
         de:35:ac:6f:3d:c8:5d:47:5e:09:a8:fd:25:9d:05:47:02:9a:
         5e:aa:eb:e2:cc:f6:27:e6:6f:44:c1:33:f6:cd:69:14:20:c6:
         f8:7f:d5:2e:a0:1e:94:be:b2:94:45:50:15:ca:66:da:5b:2a:
         ec:aa:3d:b7:3c:8f:51:4d:3c:06:c3:22:07:db:5a:c4:02:bf:
         78:97:cd:a1:c4:ed:f0:11:18:c2:d2:79:8b:b6:7a:c5:e7:5a:
         5f:c8:66:8a:2e:9e:19:75:d2:da:33:91:37:12:a1:c5:1b:cc:
         cb:15:c6:fc:ed:c9:66:45:16:cd:36:d6:05:16:cc:a6:17:1e:
         62:6b:8a:45:15:2b:5f:29:e8:d4:4c:72:9e:62:59:d7:48:a4:
         d3:3a:9e:b1:83:cd:ea:c0:eb:92:4f:e6:9f:d3:f9:72:ef:7a:
         79:e7:cc:5c:27:6b:57:63:fd:24:9b:ac:1d:d6:14:93:35:b1:
         f3:04:11:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----