Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.cer
File:                     21a3123959d9e97ae7e204e2a4018c03a6d5ab84.cer (raw, json)
Hash identifier:          vI74Uhxqp79lB/ZNLtL4Ex57Fm0vTx7DscJZjjBOBfQ=
Subject key identifier:   A9:61:C9:74:C7:C6:A5:CF:0B:06:49:21:C6:47:E9:0F:3C:55:75:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5554A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Jul 2022 13:11:08 +0000
Certificate not after:    Mon 13 May 2024 22:18:29 +0000
Subordinate resources:    AS: 52380
                          IP: 179.60.152.0/21
                          IP: 186.65.84.0/22
                          IP: 2803:ea00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15029578 (0xe5554a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  4 13:11:08 2022 GMT
            Not After : May 13 22:18:29 2024 GMT
        Subject: CN=21a3123959d9e97ae7e204e2a4018c03a6d5ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:83:15:13:f4:de:8c:e2:98:f5:a5:21:db:
                    84:9b:e1:ad:4b:47:b7:a0:b5:24:bd:f3:a9:49:47:
                    13:6d:fc:bf:f3:6d:c6:56:ee:14:17:80:0e:84:32:
                    98:77:6e:e4:32:24:af:ec:51:b4:02:f0:b5:bf:e4:
                    a6:65:bb:bb:63:29:85:77:9c:59:6b:db:db:4b:d3:
                    65:06:6e:8a:1e:e3:64:f2:47:58:da:98:92:b6:2b:
                    ed:11:01:a2:59:67:3a:67:6a:e2:da:79:d7:28:9c:
                    83:d6:d0:fd:2e:b2:5a:a2:68:97:01:c5:54:e6:94:
                    30:d2:59:e5:8f:61:64:0d:1b:4b:18:6e:cc:62:9a:
                    59:93:7a:e1:7f:34:df:6b:c5:7b:13:09:cc:74:96:
                    93:8b:58:41:8b:5a:7b:59:88:49:28:04:f3:6d:17:
                    d8:5c:30:a7:72:e1:c4:a7:04:3b:28:c0:d2:99:ee:
                    bf:fe:20:8e:03:e8:a5:54:aa:b0:d9:1f:29:16:73:
                    33:d2:1d:50:56:53:41:41:39:67:8f:30:1f:2b:72:
                    56:77:cc:f1:73:a9:97:74:19:72:2c:d4:e4:bf:33:
                    95:24:29:62:74:4b:ae:fb:d9:d9:b7:4d:9b:12:36:
                    81:ec:f1:ca:ad:8a:9c:3d:ce:b6:89:09:16:86:a1:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:C9:74:C7:C6:A5:CF:0B:06:49:21:C6:47:E9:0F:3C:55:75:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.152.0/21
                  186.65.84.0/22
                IPv6:
                  2803:ea00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52380

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:dc:ef:99:fa:10:71:58:aa:6a:da:ff:10:de:b7:12:ae:
         2f:5e:cb:d5:20:71:07:bb:ca:43:34:9a:12:43:3e:3e:7e:45:
         26:8c:7e:fa:7d:df:74:2e:11:d0:23:10:62:cd:92:44:f0:b4:
         72:bd:27:c1:da:42:00:11:fa:c6:12:08:5b:47:a3:c4:2c:6e:
         f0:39:cd:b0:b0:8b:f1:e5:6d:bc:34:6f:9b:92:a4:d6:1e:17:
         2f:e8:34:3c:c2:28:dd:f2:dc:16:d6:b1:82:e2:f6:23:7c:33:
         1b:a6:c5:d3:70:b5:fc:d4:8f:89:10:5c:35:8a:33:d3:83:53:
         cb:a6:5f:ba:0c:bd:cd:63:cb:18:1e:a5:1e:d2:7d:c1:9f:49:
         1c:cc:0f:68:9d:92:a4:92:b8:e3:af:b5:5c:a4:be:23:90:3f:
         47:e7:2d:76:58:f9:7f:93:5f:e8:7d:3a:20:e5:53:a7:2b:ed:
         59:d3:0a:52:51:83:34:a6:14:15:68:0e:10:62:16:6f:d1:74:
         42:73:fd:90:8b:66:e5:5b:79:36:cd:1e:95:92:31:17:bc:88:
         19:cf:62:dd:4c:9e:49:4f:20:ab:44:7a:09:7c:7c:5c:f2:d0:
         31:74:80:75:31:21:09:35:75:71:f2:33:b8:a2:13:38:e4:5d:
         37:86:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----