Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
File:                     3ac089c221d0dbc870f89217c46c6a8f5a357910.cer (raw, json)
Hash identifier:          IjJES5xw3yCDxE9s8TjCAACwI9IfSM8iS7hPu5aRu5M=
Subject key identifier:   7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB1C12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Feb 2021 06:24:33 +0000
Certificate not after:    Tue 29 Oct 2024 21:04:01 +0000
Subordinate resources:    AS: 271843
                          IP: 45.162.132.0/22
                          IP: 2803:f810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16456722 (0xfb1c12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 23 06:24:33 2021 GMT
            Not After : Oct 29 21:04:01 2024 GMT
        Subject: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:8e:e3:5c:89:92:b4:2f:67:b9:2b:08:de:
                    5d:b1:8b:cb:a3:97:4c:e1:9f:8c:72:6a:ff:a0:39:
                    ed:49:81:d5:8d:9f:09:0d:80:cc:de:ab:ff:f3:53:
                    f0:89:28:33:5c:95:6e:ac:c0:5e:c7:61:39:1d:3a:
                    fc:43:dc:b8:76:92:4d:61:17:e7:9b:84:f9:77:dd:
                    6d:03:36:a0:88:bb:14:18:eb:de:2d:af:1e:24:4e:
                    0a:a4:d3:b9:66:b8:c4:ac:03:58:d2:a0:12:67:d6:
                    5f:bb:d1:2c:a7:f1:de:aa:4d:d0:ae:e9:af:d6:6c:
                    81:b9:b7:b1:8a:21:2b:a2:2e:b4:b8:bb:68:d6:d4:
                    80:b9:da:64:e1:40:79:65:ff:c6:a6:5d:79:a6:bd:
                    6f:f0:11:49:fa:f4:29:a2:83:7d:03:04:b4:bf:ba:
                    72:79:79:28:4d:9a:27:6d:32:3f:9a:8f:d1:b6:ae:
                    c9:d1:da:4e:0d:1a:f0:b7:9b:25:96:9a:d4:c7:45:
                    8c:66:3a:d9:a6:9a:3c:90:67:ee:e2:0d:18:33:57:
                    59:81:c5:c7:0e:a8:85:8f:00:33:f3:0e:61:17:be:
                    44:67:70:a6:6a:2c:af:99:29:8b:b9:a2:a0:e0:58:
                    f2:1c:27:09:80:cb:73:ed:89:d5:dd:21:b1:8d:13:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0/22
                IPv6:
                  2803:f810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271843

    Signature Algorithm: sha256WithRSAEncryption
         13:8a:4d:22:ad:a5:1d:75:e4:f5:9a:ab:4e:2d:5a:55:41:50:
         64:d9:f8:6d:14:fe:22:d8:5b:32:74:5f:a1:76:bc:b9:4b:82:
         9e:e3:db:25:21:58:dc:be:44:a9:5b:17:d0:2a:d5:3f:7b:8e:
         62:02:94:bd:88:10:57:7b:cd:09:61:7e:fd:48:08:ca:9d:4b:
         55:33:b2:7c:11:88:27:7a:67:fa:6c:1c:2e:15:a6:72:79:4a:
         8a:cd:bb:86:43:73:f3:7c:10:b9:72:18:3b:63:da:12:0f:9b:
         86:ca:98:aa:83:c1:e6:c7:22:00:4c:83:ff:a0:fb:dc:3d:09:
         e4:69:e5:b6:29:1f:96:47:20:89:33:a3:c3:29:2c:59:57:64:
         6e:1d:f0:9f:86:66:5d:e3:74:30:25:70:17:da:98:a2:93:c9:
         dc:11:74:5c:89:57:a1:e1:e7:fd:70:a1:ca:68:48:fb:a0:b8:
         16:0c:2b:51:70:43:42:d9:fb:45:44:22:21:98:74:04:a1:f7:
         64:db:30:dd:3c:b2:71:ef:eb:fe:43:90:70:bc:44:28:73:2d:
         88:3b:86:55:49:24:b7:ff:f0:be:c8:93:83:e9:c4:c1:fe:cd:
         08:c0:2a:26:d4:0e:78:af:6d:51:4c:63:85:ae:71:42:37:1e:
         a8:27:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----