Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.cer
File:                     a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.cer (raw, json)
Hash identifier:          gJ4alqQLa4aLENp+OtxqeBj4JPLqaTgiLaNSMrd6lro=
Subject key identifier:   7F:C7:51:44:1B:C1:0A:A1:A4:72:8E:80:D1:07:45:34:FE:A6:D2:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA9F83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 24 Jun 2021 02:04:42 +0000
Certificate not after:    Fri 21 Jun 2024 14:52:31 +0000
Subordinate resources:    AS: 270098
                          IP: 190.171.88.0/22
                          IP: 2803:c7e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15376259 (0xea9f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 24 02:04:42 2021 GMT
            Not After : Jun 21 14:52:31 2024 GMT
        Subject: CN=a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:b0:06:48:9f:f6:a7:7f:01:30:59:7d:91:
                    a2:55:f4:2d:63:bc:b3:10:ed:f4:c2:cb:62:46:08:
                    eb:2c:1f:0e:ae:5c:1e:33:f2:42:80:af:dc:8a:89:
                    1f:e5:ba:e1:87:6d:e1:a4:d7:89:34:42:f0:ed:f5:
                    ae:70:be:30:ea:8e:70:14:54:1e:15:84:0d:62:e7:
                    2d:3a:67:10:b1:7a:bf:e6:de:90:bc:66:9b:f8:c6:
                    90:99:45:e2:b0:b7:32:da:1e:b2:5f:50:2a:96:4b:
                    56:74:41:2e:2c:a6:ac:ef:f1:a1:6d:9a:5e:ee:c2:
                    b4:68:4b:42:aa:e8:43:91:65:3f:6a:ec:91:e0:5d:
                    98:74:08:9f:5d:0e:db:49:10:78:1d:e7:bb:c3:fd:
                    3c:4c:17:19:fe:fd:77:18:97:16:bf:a9:86:55:20:
                    3b:07:46:8d:22:5b:ab:66:72:ce:25:eb:c4:95:ef:
                    b7:2b:d1:5a:37:ab:16:7b:4a:ea:2f:44:f8:65:34:
                    99:d3:b3:f5:5c:fc:ab:71:94:a4:8d:fb:a3:99:b3:
                    a6:01:f1:d2:cd:30:b3:ac:3d:6a:67:09:e4:72:39:
                    3b:5e:99:8d:f4:f8:b8:43:ec:92:c4:04:a4:92:e3:
                    32:fc:c3:af:cd:ff:b2:16:22:ce:a4:e9:aa:f0:38:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C7:51:44:1B:C1:0A:A1:A4:72:8E:80:D1:07:45:34:FE:A6:D2:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.88.0/22
                IPv6:
                  2803:c7e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270098

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:23:6f:aa:03:6f:86:0e:e3:30:48:05:95:e1:7c:48:f8:
         fe:82:87:a3:7e:48:7c:55:4f:c0:e9:12:38:64:d9:8d:b9:29:
         0d:b0:c0:88:d1:19:60:96:f9:07:ba:62:d0:f8:e3:b1:32:1f:
         4b:3c:f7:5f:b6:94:2e:78:22:05:69:d8:c5:a1:1e:07:47:57:
         a2:67:d8:88:17:2e:21:e7:3d:1d:66:03:da:d7:14:49:81:0b:
         f7:34:33:6b:d8:3c:99:22:32:68:9f:20:c2:8b:bc:4a:51:4d:
         f9:ee:c9:02:13:20:43:f5:bf:6e:2f:d9:ae:12:73:c7:ff:c9:
         5a:cf:26:b0:6b:bb:da:55:b6:42:8e:da:41:c6:fd:7b:e8:70:
         83:ed:86:64:f0:f6:87:ac:ea:66:91:a0:29:d5:cc:c2:4b:2a:
         69:5e:16:db:b8:32:ce:a3:04:ff:8c:97:af:f6:99:f8:43:b5:
         44:c8:cd:86:47:aa:ca:49:95:62:6e:d9:1e:a0:80:cd:37:e5:
         36:66:25:e7:7e:40:76:1d:cc:48:ac:89:12:47:f8:9f:9a:cc:
         03:c4:12:4f:47:c9:6d:37:a1:22:61:99:56:bf:ab:c0:f1:a3:
         e2:6e:d8:8a:96:98:25:85:bd:49:fc:42:ef:a8:03:92:24:52:
         8e:09:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----