Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer
File:                     a7526df002a574a7e96f1fd69133114135b1b5ee.cer (raw, json)
Hash identifier:          AsNlpZpiCCww3fRPZONtK9JaRcLgBTlqWzUKxeftIhg=
Subject key identifier:   A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA45A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a7526df002a574a7e96f1fd69133114135b1b5ee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Sep 2021 12:45:44 +0000
Certificate not after:    Mon 21 Oct 2024 14:33:02 +0000
Subordinate resources:    AS: 271973
                          IP: 201.222.43.0/24
                          IP: 2803:b810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16401826 (0xfa45a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 12:45:44 2021 GMT
            Not After : Oct 21 14:33:02 2024 GMT
        Subject: CN=a7526df002a574a7e96f1fd69133114135b1b5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:77:3c:e1:bb:e7:4c:d9:e8:42:d4:5f:5d:
                    48:6c:bf:70:fe:b9:8c:6d:e4:83:32:e4:f6:36:ee:
                    90:5a:89:f0:c9:27:15:84:bf:f4:10:3d:f4:ba:fb:
                    b3:f0:38:1e:11:f8:9d:04:a8:ac:c9:aa:a7:5b:01:
                    27:6b:6e:b7:72:c1:cc:fb:ac:43:ce:89:f4:c6:30:
                    d9:5d:ec:f4:24:91:03:7d:25:f7:b6:b8:32:2a:30:
                    7f:e2:2f:d7:a4:8d:53:00:c3:6a:33:a9:a9:a8:13:
                    df:07:73:da:9a:70:3c:8d:8c:ca:26:a4:33:21:f5:
                    68:97:27:37:1d:30:e8:79:3b:35:3c:b3:80:ce:07:
                    b3:22:cd:36:ef:33:22:99:36:e5:b5:db:d9:73:79:
                    b8:1f:1f:24:d7:e8:1d:bb:9b:b2:40:6f:ce:a7:4b:
                    ad:71:a5:4c:66:d1:43:2a:36:a9:75:a8:b1:81:f5:
                    e3:af:43:23:1d:cb:7b:63:35:72:ee:2f:be:ce:d9:
                    a0:41:30:a5:89:d6:c4:cf:85:cf:73:96:76:f7:3d:
                    e7:5a:f1:81:3a:0d:1c:af:1f:d1:a9:55:bd:23:8c:
                    7b:92:bd:c0:dd:92:01:9b:a7:f6:e4:e6:67:23:43:
                    f3:ba:ae:af:8a:84:e5:2c:32:99:4a:43:92:3c:2f:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a7526df002a574a7e96f1fd69133114135b1b5ee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.43.0/24
                IPv6:
                  2803:b810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271973

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:49:5e:77:0f:ce:30:27:5a:58:91:69:5d:44:85:37:81:
         38:02:bc:aa:ab:b7:34:7d:2c:04:d4:ba:e5:6b:cd:8d:9f:0d:
         67:5e:a4:bf:cf:f7:10:fd:8d:7d:11:d2:34:d4:1c:21:02:14:
         01:40:d5:01:0f:e2:b3:fa:f7:4c:91:fd:b2:9b:f8:ea:a1:59:
         24:df:e8:06:72:d5:40:04:26:c0:0c:40:f4:f8:59:83:9a:e9:
         25:b4:5d:f4:7a:b4:01:75:6f:bf:ed:cc:c7:db:3d:81:c9:0d:
         40:1a:5f:ea:d1:eb:18:5b:25:23:2e:32:dd:0e:38:08:08:2c:
         b2:2d:11:9b:39:65:1a:0b:21:55:f6:e6:71:b0:b6:63:b2:64:
         3e:ae:e1:60:85:fd:ed:46:20:74:5e:bd:9b:6d:4c:2d:d3:61:
         4f:08:80:76:05:2e:5b:b7:ff:4a:d7:44:4e:a8:36:b7:43:ba:
         71:73:43:be:18:6e:29:8d:1f:4b:ee:d8:21:c3:36:e5:fc:9b:
         cd:0b:c9:75:0f:8f:46:9b:cd:04:92:0a:ca:e0:8d:5e:c9:93:
         75:85:0d:7e:d0:3a:ba:f1:07:8e:ab:44:c6:b9:25:42:13:d1:
         ab:27:99:3a:26:68:ec:19:04:68:34:32:04:f9:a0:ae:7a:21:
         19:1c:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----