Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3ae922638ff81e225680ea4c3aac3257c696ced.cer
File:                     a3ae922638ff81e225680ea4c3aac3257c696ced.cer (raw, json)
Hash identifier:          xj4KMXz2WtsDV3ZTQ2v3697Sc5wQ5197zTeVphds3ac=
Subject key identifier:   2E:3B:A7:9E:FC:E5:D6:CA:A3:4C:00:96:20:C0:30:2A:7F:5A:EB:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D28BC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/a3ae922638ff81e225680ea4c3aac3257c696ced.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Sep 2022 13:24:50 +0000
Certificate not after:    Wed 24 Apr 2024 19:02:25 +0000
Subordinate resources:    AS: 264725
                          IP: 170.231.176.0/22
                          IP: 2803:6740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13798343 (0xd28bc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 13:24:50 2022 GMT
            Not After : Apr 24 19:02:25 2024 GMT
        Subject: CN=a3ae922638ff81e225680ea4c3aac3257c696ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:75:bd:a5:d1:61:95:33:e3:d6:3d:e5:52:
                    3c:7b:93:27:85:14:06:e2:2c:ab:5b:d9:cc:13:c2:
                    d3:3c:82:9a:00:ad:42:b1:58:b0:92:ec:5f:f7:78:
                    9e:50:b2:44:da:f6:3e:85:e0:6e:b5:bb:4f:26:1c:
                    11:fd:f1:ad:c4:62:b4:d5:30:62:28:2e:6d:b6:b3:
                    71:15:26:10:d1:6d:2e:3c:38:0d:45:f8:ed:a4:05:
                    f7:cc:5b:46:38:ea:a4:75:b1:9f:c8:08:a3:1b:79:
                    13:bb:8e:a9:96:ec:93:d3:f2:30:55:42:f5:d6:73:
                    ed:13:71:ec:5b:54:67:59:94:9c:73:61:04:84:4e:
                    5c:4e:aa:f8:04:53:78:02:a7:c8:ab:4b:e7:f8:de:
                    64:0c:be:c6:bd:7f:33:bc:a2:97:03:a8:c4:3d:5b:
                    48:95:68:bb:96:5d:d6:f4:be:04:32:dd:07:ba:05:
                    71:a4:cf:52:b0:31:2e:ec:41:e2:55:bb:71:d9:b2:
                    3f:de:51:42:df:d2:72:33:f5:ee:e8:9a:b4:92:b9:
                    16:4a:80:0a:8c:45:70:3a:b4:c4:12:2d:d1:04:ce:
                    d7:9c:fa:b7:88:91:e2:2c:44:02:ba:99:e2:60:cc:
                    e6:cc:28:cc:50:5a:c3:11:35:b1:60:26:fe:33:76:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:A7:9E:FC:E5:D6:CA:A3:4C:00:96:20:C0:30:2A:7F:5A:EB:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/a3ae922638ff81e225680ea4c3aac3257c696ced.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.176.0/22
                IPv6:
                  2803:6740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264725

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:04:7b:ca:9e:ba:5a:b0:29:aa:e6:85:aa:f2:cf:8c:43:
         dc:70:ad:77:b3:35:e0:7d:9e:94:11:7b:07:77:65:a1:3f:cc:
         62:ae:00:56:a2:96:4b:09:f1:4e:cd:93:ad:51:97:bb:1d:3b:
         a6:65:c7:26:2d:64:98:9c:4a:73:f6:f9:71:49:89:04:bb:39:
         37:7d:86:15:59:0d:b5:4a:7d:52:3c:23:65:f5:0a:96:49:d6:
         db:27:ef:48:0a:e0:00:85:51:60:58:c0:d5:ab:61:08:e3:bb:
         21:8f:1b:74:d4:cf:f0:93:78:c4:ad:55:e9:0b:d1:1b:70:7a:
         04:ae:90:40:ff:b8:f5:59:bb:8b:7e:7e:92:c9:db:2b:b2:10:
         4b:ec:51:a1:40:7c:a1:e9:49:bc:fd:0d:26:e2:cd:f8:91:53:
         1e:ab:6d:96:ea:ee:bf:2f:94:81:64:ff:67:0c:ef:3a:7d:89:
         f4:48:b6:4a:92:a2:25:66:65:79:90:30:1e:b6:c5:c1:15:bf:
         97:9e:2f:8a:22:7d:d2:89:e6:d7:bf:b8:b3:c7:32:ac:7b:b2:
         f9:b7:ab:62:d1:34:36:d8:59:1b:97:e0:95:9e:db:8f:95:4d:
         7c:de:3e:46:a0:a3:1f:46:10:0e:d5:ac:ba:6a:cc:f8:b7:3d:
         98:6b:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----