Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer
File:                     1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer (raw, json)
Hash identifier:          XVizbiv5Txva2oPNGL2rwP5/qR/KXRWKPG+yWwlqj5k=
Subject key identifier:   58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA36E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jul 2021 06:39:25 +0000
Certificate not after:    Wed 04 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 263700
                          IP: 132.255.68.0/22
                          IP: 138.121.168.0/22
                          IP: 170.239.152.0/23
                          IP: 2803:db80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16398054 (0xfa36e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 06:39:25 2021 GMT
            Not After : Sep  4 05:00:00 2024 GMT
        Subject: CN=1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:0a:7d:59:65:b7:53:79:28:0d:e9:04:7f:
                    33:05:1d:96:b9:2c:1a:2f:1a:f2:5e:b3:53:cc:ee:
                    41:cd:09:28:31:de:16:41:22:bc:be:ce:75:eb:df:
                    5e:fc:71:ee:89:bc:8c:95:f2:50:c9:06:35:1c:bd:
                    92:e4:8a:5e:ff:44:8c:9a:96:de:13:e0:fb:8a:13:
                    d2:c2:d6:f9:fd:00:7c:2a:c9:b2:c9:5f:3f:5c:37:
                    c0:4b:34:f0:cc:ed:2f:a2:ac:96:13:8f:a6:59:be:
                    c9:af:8a:aa:d2:ea:94:4f:90:cd:e6:b3:49:95:a1:
                    16:89:67:86:72:ea:28:42:c7:32:55:83:c0:ef:3c:
                    23:e7:b6:c4:6b:9d:08:03:be:75:9c:f9:9d:83:69:
                    da:00:33:ec:44:da:28:b0:04:08:ab:6a:dc:74:d3:
                    d6:28:b5:f2:a8:92:bf:67:d8:11:6d:49:c4:b3:22:
                    7e:8f:4b:e8:9f:c2:ce:d3:3e:75:b6:70:8a:77:ef:
                    47:8a:f9:fb:7a:ae:36:2e:95:9e:42:c3:c6:b4:03:
                    01:07:06:88:7f:cc:d9:d8:d5:68:21:63:35:b5:f6:
                    1e:be:4c:6d:3c:be:52:03:ed:ff:3c:d4:64:16:04:
                    45:1f:ee:c9:5c:50:03:5e:2d:d4:a5:9c:fc:b2:67:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.68.0/22
                  138.121.168.0/22
                  170.239.152.0/23
                IPv6:
                  2803:db80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263700

    Signature Algorithm: sha256WithRSAEncryption
         09:77:13:1d:84:93:86:34:e9:6c:9d:69:0d:48:c6:f7:d4:7b:
         4a:d3:f4:43:43:3f:cd:91:80:e5:1d:b0:13:e2:e1:5e:33:a5:
         f8:09:92:d8:f8:dd:e7:f9:21:30:34:a9:46:3a:50:02:68:f8:
         28:e4:10:c9:3f:83:16:a2:79:6c:e7:b7:c3:34:f7:eb:5c:fa:
         79:5f:ec:d1:68:2e:0a:aa:5e:66:74:92:c3:5f:fc:f5:75:b9:
         65:5c:db:46:c9:9c:ba:93:16:b2:f2:32:47:20:07:b5:09:37:
         c1:08:51:9b:eb:e9:27:4d:03:5b:14:f4:8c:4b:c3:be:2e:70:
         52:38:dd:1a:3b:f0:04:1a:7f:b2:24:16:ab:95:e2:59:3b:b5:
         c0:e1:72:b1:ea:cf:c5:54:04:98:29:6d:8c:2a:86:49:2c:4b:
         98:1c:8e:87:d6:58:7d:59:9f:38:c7:88:32:f2:6d:a2:3a:fa:
         50:34:b9:e0:31:2e:b2:fa:2e:76:b7:31:0e:60:5c:16:5d:57:
         ae:51:09:d2:6a:81:f2:30:22:3b:27:67:4d:ba:de:b9:b6:98:
         ed:a1:71:06:6e:f2:7c:8c:06:ce:81:5c:c9:f0:8a:ee:a0:81:
         e1:d9:b3:85:7b:76:50:8b:40:94:51:bc:ae:03:6f:04:ed:db:
         0a:10:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----