Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
File:                     a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer (raw, json)
Hash identifier:          skvEPHnifzrFXHtpvLs0wbfFze1vm6tR9X2riT7Omug=
Subject key identifier:   5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2C5AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Sep 2021 12:58:22 +0000
Certificate not after:    Sun 28 Apr 2024 15:00:00 +0000
Subordinate resources:    AS: 13585
                          IP: 190.1.96.0/19
                          IP: 190.11.128.0/18
                          IP: 2800:220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14861742 (0xe2c5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 29 12:58:22 2021 GMT
            Not After : Apr 28 15:00:00 2024 GMT
        Subject: CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:35:f2:3c:eb:72:3e:b7:3b:f1:47:69:8d:
                    ff:3c:1f:3f:5d:45:0f:8d:fe:85:c6:88:af:db:3b:
                    f5:1d:40:88:59:44:a1:56:01:db:76:a8:69:c3:fb:
                    2f:8f:c1:54:1c:4a:d9:18:5e:23:94:03:46:df:7d:
                    35:42:cd:6b:15:5d:2a:77:1d:03:16:6f:23:c8:23:
                    4f:52:08:e9:49:9c:2e:14:f8:76:d1:20:4f:65:dd:
                    f3:71:cb:87:4c:1f:af:08:da:cb:bc:db:37:ff:89:
                    06:28:6b:8c:b7:f2:05:c8:a9:e1:1e:d1:e9:66:b3:
                    a9:8c:02:bc:dd:16:87:46:f5:fa:70:4c:29:93:85:
                    20:00:db:cd:0d:23:16:d4:09:c0:2f:87:ae:24:30:
                    31:45:a4:d9:82:dd:b0:de:29:7f:8c:61:c0:69:fb:
                    6c:0d:09:54:c2:fe:69:65:21:e9:43:80:ff:3d:2d:
                    35:14:56:60:bd:b1:62:a1:3b:05:9e:2d:7a:8f:2f:
                    ce:15:a9:bb:f0:fe:4a:2d:94:20:6b:1d:6e:b6:15:
                    ea:66:39:39:b9:9e:ca:4d:3e:b8:14:67:42:8a:bd:
                    47:5c:ee:d0:8d:c7:3c:3c:3b:f6:6f:86:02:09:c8:
                    80:68:2a:30:24:da:6e:70:57:80:89:e1:90:c2:e8:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.1.96.0/19
                  190.11.128.0/18
                IPv6:
                  2800:220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13585

    Signature Algorithm: sha256WithRSAEncryption
         24:19:d6:69:9c:d9:ef:a6:96:21:b3:b5:13:66:b2:e6:f9:23:
         aa:0a:6b:6e:da:01:7c:09:b4:eb:ed:12:ed:8e:f2:cc:b8:54:
         56:c2:0f:c6:ba:17:45:7a:82:34:12:0b:c7:63:b0:6a:4a:e6:
         69:d5:d6:31:e7:f3:b3:fb:46:b5:b1:ad:e3:c3:79:e6:84:0b:
         39:87:8b:ae:a6:67:a3:36:de:21:d9:66:37:0f:9a:cb:6e:85:
         01:09:f6:68:cb:13:cf:61:69:38:2f:f9:21:37:aa:ee:50:2a:
         8b:8f:a3:27:81:98:6f:37:47:8a:40:55:f9:a5:a6:9a:61:fd:
         a5:57:b5:1c:01:20:ec:47:c6:12:9e:0c:d8:15:c9:e4:20:6f:
         ce:54:d6:ad:f4:b6:7c:1e:dc:0d:26:4a:89:e0:6f:94:9c:15:
         43:c8:44:37:b4:45:7b:7b:74:c5:4e:1f:2d:a1:63:bc:26:4e:
         f1:43:8d:b3:32:df:93:d7:0c:95:7c:6d:51:d2:c1:68:3d:f5:
         4f:fc:d7:99:ed:4d:d0:2c:e2:a8:be:ad:b9:52:30:bf:3b:0c:
         cf:48:e9:92:d3:91:3b:aa:67:9e:c9:f3:f3:75:a2:23:76:f1:
         91:06:68:94:12:c2:08:5c:b2:0d:b8:0a:f0:f5:45:7d:42:c2:
         76:a1:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----