Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.cer
File:                     a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.cer (raw, json)
Hash identifier:          8zuXv9ok3nJDQUbgW3OH6mVWsWrZe4uWKjVUJS1oUt8=
Subject key identifier:   12:A7:2B:66:E3:12:28:9E:97:67:96:DB:FA:BB:8F:F0:2A:54:F8:CC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDC0E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 05 Apr 2021 12:50:19 +0000
Certificate not after:    Mon 15 Jul 2024 22:00:18 +0000
Subordinate resources:    AS: 271800
                          IP: 170.246.76.0/24
                          IP: 2801:1e:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15581412 (0xedc0e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 12:50:19 2021 GMT
            Not After : Jul 15 22:00:18 2024 GMT
        Subject: CN=a282b488a30f6e8b70f0d85fd8cddfd7888f98a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:0a:b0:98:a2:cc:07:d3:83:4a:67:3d:b3:
                    97:bf:51:c4:55:9c:fa:af:be:d5:14:52:9a:d9:dc:
                    5f:14:5f:7d:20:59:f7:67:3b:f7:98:fd:99:d4:75:
                    75:17:7b:04:71:2d:9a:8c:01:95:a1:dc:2f:68:75:
                    0a:8f:55:d3:61:57:cc:40:a0:f6:80:80:d9:87:95:
                    4d:09:e0:a3:26:a4:9a:3f:7a:73:b3:9f:a7:cc:12:
                    f9:26:9b:26:a0:65:ea:21:7a:90:2f:4f:5b:5f:3b:
                    58:2e:3d:e9:27:12:44:69:9b:50:ad:04:ad:da:a9:
                    b5:53:49:28:4d:3b:95:2c:78:24:8d:fe:b0:7c:8f:
                    60:a3:4e:4e:e4:9b:18:41:dc:d2:cc:c2:2b:fe:a2:
                    17:ed:84:46:09:8c:d6:e2:c9:ba:c0:cc:fe:2b:c7:
                    08:1e:11:e1:03:99:13:ef:fb:52:90:dd:b5:3b:1a:
                    96:5f:89:79:e7:3c:80:45:07:f2:b2:3b:ed:f5:d0:
                    0e:79:c8:87:c8:c8:e7:44:e6:66:9c:a5:fd:7d:f1:
                    53:dc:57:90:b1:9f:61:6d:c4:07:ac:9e:8c:f1:0a:
                    6e:a8:7b:e8:c3:65:7a:74:28:bd:2c:1c:5c:90:26:
                    e9:bd:e7:7f:e5:4a:57:fe:ea:46:d7:48:fc:69:9a:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:2B:66:E3:12:28:9E:97:67:96:DB:FA:BB:8F:F0:2A:54:F8:CC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.76.0/24
                IPv6:
                  2801:1e:a800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271800

    Signature Algorithm: sha256WithRSAEncryption
         93:2b:52:1f:96:08:2f:1d:71:de:11:ec:ba:d7:1a:0c:2d:57:
         15:34:f2:16:4f:a1:d0:e4:75:e3:a9:44:74:86:77:5d:08:0a:
         93:ed:17:31:35:cf:b8:66:a6:a1:7f:96:42:d9:fc:18:fc:a0:
         96:0e:7a:f0:82:52:35:c3:45:2d:fb:35:ca:47:da:47:d3:d2:
         4a:18:5b:d3:7d:88:94:a5:3b:c5:0f:0b:81:2c:a5:31:6c:97:
         24:34:fd:58:37:48:de:ab:0f:34:f8:5b:c1:5e:ba:ad:4e:d6:
         46:1e:ad:96:eb:78:87:c6:6e:e3:96:16:74:cd:73:63:a7:21:
         23:3c:00:b3:d7:74:e4:5c:66:23:e4:36:45:36:97:17:ca:75:
         45:c7:df:31:ba:cb:14:81:85:3a:c7:bb:a3:e8:a0:0b:f0:05:
         14:76:a5:bc:9c:11:c6:f0:39:e6:56:ca:7e:01:32:5c:98:3d:
         85:28:e4:c9:69:d0:b6:1f:d6:6b:35:f2:58:51:81:81:c7:f9:
         65:e0:e0:5c:9b:5b:38:f9:6d:60:eb:cb:7c:c2:f0:79:27:d9:
         cb:13:d3:01:d1:7a:5b:50:a0:9d:d2:41:56:43:c3:38:3e:5b:
         17:39:ee:60:80:70:49:69:f9:89:29:ec:c5:20:96:31:3a:6a:
         b0:a3:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----