Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer
File:                     a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer (raw, json)
Hash identifier:          aICVr54uuCP7dbV/NMRRAh5KtiN01kArdS5nlFj+RPk=
Subject key identifier:   95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1216D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Sep 2021 22:28:24 +0000
Certificate not after:    Thu 08 Aug 2024 22:43:20 +0000
Subordinate resources:    AS: 267700
                          IP: 45.164.12.0/22
                          IP: 2803:d1a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15802733 (0xf1216d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 22:28:24 2021 GMT
            Not After : Aug  8 22:43:20 2024 GMT
        Subject: CN=a5c8adf6f7bb40c78965ae212032e0e1788ce533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:06:7c:26:5c:9d:1c:ce:7f:1a:63:c2:47:
                    ba:d8:c6:1f:e0:02:38:2e:ee:24:80:a0:c1:a3:a4:
                    ed:a7:86:28:0f:83:8e:57:5f:8b:56:26:b4:79:d5:
                    5d:0f:80:3c:48:ca:8a:0a:46:b0:2f:07:3f:c1:ad:
                    a3:d4:09:a3:6a:5c:8e:cd:52:40:a3:13:fb:46:d1:
                    a6:8f:fd:b3:d1:b8:6d:35:13:e8:ac:16:fc:4b:d6:
                    a2:a8:a3:d9:ee:87:d2:78:3f:07:54:d6:67:50:e8:
                    c1:11:ff:4e:1b:46:bb:e1:d7:38:10:94:5a:0f:07:
                    5f:54:d7:f9:16:23:6c:dd:17:2c:0d:75:d7:e9:5d:
                    1c:79:25:39:ca:30:94:09:27:68:2e:2e:2a:5d:1c:
                    13:d7:52:20:10:32:50:ba:df:d0:d6:a2:9c:fa:d3:
                    58:40:81:f0:38:4d:0b:a3:4a:31:ab:9b:21:32:2c:
                    79:76:61:4f:23:0d:77:59:d9:e1:f2:1a:a1:09:37:
                    20:6d:12:f4:26:b1:66:b9:f0:19:13:da:7b:cb:1b:
                    7c:ed:fa:23:a0:20:70:77:06:5a:ef:a8:56:15:fd:
                    d7:16:f5:f7:ba:fa:81:4f:62:d6:c6:54:9f:3d:22:
                    80:59:70:f3:59:8e:4f:be:8d:e1:7d:c4:6b:15:2c:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.12.0/22
                IPv6:
                  2803:d1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267700

    Signature Algorithm: sha256WithRSAEncryption
         00:86:b7:3c:8f:aa:99:94:d4:f2:16:97:1b:1d:da:83:cf:21:
         6a:60:f4:8e:f4:5c:2b:23:35:2b:ba:56:04:a4:a3:9f:33:f3:
         a8:4f:02:3f:81:d0:4f:04:40:4c:a4:87:86:f3:76:c8:13:69:
         c2:5c:ad:d4:9f:73:20:a6:90:e4:5b:2b:3d:01:58:89:41:d8:
         55:89:7e:24:3f:a2:45:ff:62:83:f4:2a:04:63:07:ec:66:cd:
         e4:1d:dd:7f:d5:6a:fa:28:20:4f:4b:07:29:ed:92:04:bc:bc:
         ca:7e:e3:b0:a6:bb:cf:5d:d2:f3:cf:f1:2e:2b:bb:da:3c:2c:
         a7:b8:dd:91:fd:dd:bf:4a:bb:90:db:ea:ed:9e:f1:e4:7b:f1:
         42:fe:4a:e5:49:e4:a5:75:0e:17:c9:f7:96:30:c3:e7:16:3d:
         82:0b:60:57:4e:e7:5b:78:e2:93:f3:25:18:68:20:31:a7:2a:
         46:56:5b:3f:ea:58:6f:5b:3c:f5:14:da:00:d9:a7:24:8b:d3:
         9d:6c:78:b6:8e:3c:e5:28:b8:36:72:a9:64:5d:c1:5c:45:3b:
         91:ac:a0:79:46:ae:92:f7:bd:de:45:ea:a3:db:8e:c4:e6:e2:
         fe:b8:3e:c8:04:75:46:40:fc:de:6e:10:17:a4:a8:dd:cc:69:
         83:66:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----