Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer
File:                     4ae50a1688a42b708c8e50cedee53ca7debfc796.cer (raw, json)
Hash identifier:          pMj82aIsRzBiQjwBih8yg0J3wtT4SoGT5V6w9kluQVE=
Subject key identifier:   73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6DC62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Oct 2021 17:59:42 +0000
Certificate not after:    Sat 09 Dec 2023 19:15:57 +0000
Subordinate resources:    AS: 265643
                          IP: 170.247.76.0/22
                          IP: 2803:16c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14081122 (0xd6dc62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 18 17:59:42 2021 GMT
            Not After : Dec  9 19:15:57 2023 GMT
        Subject: CN=4ae50a1688a42b708c8e50cedee53ca7debfc796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:b9:ac:45:54:7a:c8:a4:53:9a:60:b3:06:
                    13:c4:78:7b:90:c9:0a:34:7d:28:31:4b:52:41:3f:
                    d5:1f:67:68:b9:97:be:9d:99:6d:dd:14:c5:52:29:
                    35:c4:fb:15:5c:99:1a:d2:93:0e:d8:11:c6:7f:f7:
                    06:cc:cb:7d:f5:12:9c:54:25:93:0b:d5:0f:d0:d6:
                    a8:02:fb:8d:89:1c:b3:31:5e:81:f9:8b:ba:1b:d2:
                    5b:a4:81:bc:b1:bf:ae:51:22:17:3a:61:fe:11:bf:
                    f6:59:dd:be:8d:b3:0e:be:4b:3c:dd:68:9c:5f:9a:
                    2b:91:0d:16:c8:06:cd:cd:3d:8f:17:3e:82:27:f3:
                    1c:54:86:ac:31:f4:2b:4d:96:d1:79:e6:10:42:d3:
                    50:52:51:b2:f5:03:00:43:75:4f:c0:be:1b:e0:49:
                    43:5e:c7:b5:b7:0b:4d:e1:ed:cd:11:d2:c6:45:80:
                    0b:4b:a5:56:66:17:b3:91:17:df:1d:6f:a0:cb:be:
                    81:03:a9:33:99:cf:17:32:03:30:58:f8:7c:9d:79:
                    a3:14:ba:2c:1f:e0:e7:e2:f8:16:30:c3:67:2c:ae:
                    42:bb:e2:7e:8d:12:48:36:61:8f:88:7e:2d:c3:5e:
                    eb:d7:04:8f:ec:f9:d7:f5:b6:e6:9b:c1:b3:53:0d:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.76.0/22
                IPv6:
                  2803:16c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265643

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:f5:34:7e:a8:2f:a4:7b:6b:1b:7b:fb:ce:49:76:95:4d:
         c9:f0:0a:47:3b:18:ff:8e:6f:ea:4f:c0:ba:b3:24:d5:93:02:
         d4:aa:bd:be:99:9e:b5:8e:b8:da:a7:28:5a:57:b2:b3:07:3c:
         71:3c:96:c1:df:43:9d:94:6d:ef:df:40:ba:29:3c:f6:64:cf:
         9c:df:b7:08:db:42:1f:fc:2b:f4:5f:f4:c4:77:47:54:d2:6f:
         cf:1e:2f:ba:8b:67:5f:66:df:e4:6e:d1:8a:d8:20:ff:a1:c8:
         4e:88:23:ec:75:67:b8:02:e1:fe:54:60:7d:63:eb:44:46:b3:
         0b:2f:3c:5e:9d:49:0f:b3:c8:d6:00:57:33:39:85:a9:40:6d:
         e7:54:55:69:7e:a2:f6:83:71:c6:50:36:c0:bf:19:1e:b8:33:
         d8:71:b7:9a:7c:3e:e8:af:60:3a:9f:79:f5:8a:a8:d9:6c:f9:
         fb:9b:7e:e9:c8:bf:2a:39:e1:ff:e7:55:4c:5b:81:c5:12:cf:
         ce:89:dc:c1:9c:c2:f1:82:ec:d4:cb:bf:8d:88:62:16:2d:fc:
         83:3e:d2:f4:f5:6b:65:f6:d1:57:48:6a:3f:a0:4f:15:16:ff:
         56:39:b6:33:81:b9:56:cf:3e:2a:cf:09:68:6a:19:31:e3:1c:
         a5:ef:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----