Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1cac4218e010e3d59d004f744b976a5437d792e.cer
File:                     a1cac4218e010e3d59d004f744b976a5437d792e.cer (raw, json)
Hash identifier:          BqYK8LB9dVLKyoPpWXFpCdGhHcb8I7GA79OK7fmnbwY=
Subject key identifier:   33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7B2FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/a1cac4218e010e3d59d004f744b976a5437d792e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 Oct 2021 18:32:37 +0000
Certificate not after:    Wed 29 May 2024 19:04:43 +0000
Subordinate resources:    IP: 45.230.60.0/22
                          IP: 2803:93e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15184637 (0xe7b2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 15 18:32:37 2021 GMT
            Not After : May 29 19:04:43 2024 GMT
        Subject: CN=a1cac4218e010e3d59d004f744b976a5437d792e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:de:90:3e:fb:e4:30:ad:4c:26:e4:0e:77:
                    8c:86:4c:73:70:a0:48:9f:d9:bb:f9:16:03:ba:ba:
                    dc:7b:46:30:c2:fb:18:a1:d6:68:00:32:89:23:06:
                    16:31:a6:9b:20:e8:8e:fd:48:7f:24:0d:d1:87:67:
                    2f:f7:e3:89:ca:3a:bf:7c:99:26:fb:af:e5:0b:0f:
                    3d:2e:bc:c8:c2:50:d9:a1:27:9c:d4:23:07:bd:eb:
                    f9:82:c0:79:04:1c:39:eb:df:32:f7:83:33:43:64:
                    b2:94:76:ff:06:cd:ff:aa:32:2c:dd:54:2e:01:2b:
                    f2:1c:1b:92:98:b2:b1:45:14:a0:5c:89:95:48:9f:
                    d4:5a:41:f6:e1:21:7d:09:3d:c1:37:4a:cf:cc:74:
                    a8:71:20:03:63:5e:0c:86:fc:df:f5:cf:ca:f6:0a:
                    1c:b0:c6:8d:b1:1e:2b:e8:18:87:8a:f5:d2:fb:e4:
                    c6:48:06:41:d2:0f:98:ea:ab:fe:e2:b1:6c:52:46:
                    e6:77:c7:49:fe:91:19:a3:5c:80:ec:e2:c5:23:85:
                    f3:e0:2a:98:3a:b3:fc:ff:8a:5c:4c:2d:4a:3a:e4:
                    cb:ce:09:66:1b:79:09:fd:f5:e1:65:1c:9b:b7:a4:
                    81:2b:3e:62:1d:c9:50:7e:3a:e5:6e:d7:7c:63:b6:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/a1cac4218e010e3d59d004f744b976a5437d792e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.60.0/22
                IPv6:
                  2803:93e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:8f:47:1b:68:fd:c1:29:3d:1e:78:66:0b:08:dc:c4:aa:
         df:71:58:fc:a2:3b:70:92:e6:64:4f:8b:cc:f6:c8:a7:52:78:
         ba:12:e2:06:e1:ab:58:16:95:5f:a7:ee:50:da:34:3d:e7:2f:
         83:0c:10:68:24:3f:e5:09:cd:2b:54:ad:88:a5:e4:e6:a0:5f:
         7f:04:b3:6c:c1:d3:4b:37:8a:58:2e:99:9d:14:4d:a6:1f:cd:
         43:c2:48:cf:ed:75:61:25:c3:c9:89:78:47:42:ff:eb:b2:bb:
         70:71:40:46:64:34:0c:b7:e4:59:4c:2d:db:12:3f:9e:f6:cc:
         34:1d:4f:b6:64:64:21:b5:04:bb:bb:93:53:4a:01:0e:79:3f:
         e7:9c:72:52:e8:90:3b:a3:10:1b:59:25:84:15:83:2c:64:4c:
         6c:25:06:06:73:85:33:5b:74:8e:54:08:ae:aa:ff:52:c9:27:
         7e:23:37:92:18:71:8a:74:a6:6c:fc:7e:67:49:f8:c1:3f:cd:
         83:40:31:f5:56:14:b1:2d:6e:b2:82:72:fa:68:4b:2d:6e:83:
         1f:40:78:ae:d7:a2:57:88:e9:b2:2c:fd:1f:2f:b2:85:9d:f2:
         cb:7f:8c:9f:07:5d:5c:ec:dd:9c:88:63:80:32:29:4e:b7:46:
         d0:ef:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----