Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9e820551771f82418fb35bf3b8f848be57dcbf3.cer
File:                     a9e820551771f82418fb35bf3b8f848be57dcbf3.cer (raw, json)
Hash identifier:          xzV4FZioQWWZsGFgya3UzzDgj12fS9w4tfHxLO8i8xw=
Subject key identifier:   56:B8:73:C7:8D:99:1B:7F:A0:90:1C:69:8F:1D:04:4A:D0:27:6B:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F45CE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/a9e820551771f82418fb35bf3b8f848be57dcbf3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Dec 2021 16:07:16 +0000
Certificate not after:    Sun 08 Sep 2024 06:00:00 +0000
Subordinate resources:    AS: 272011
                          IP: 2803:d910::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16014569 (0xf45ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 29 16:07:16 2021 GMT
            Not After : Sep  8 06:00:00 2024 GMT
        Subject: CN=a9e820551771f82418fb35bf3b8f848be57dcbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:6c:65:f0:b6:63:7c:cc:3c:bd:4c:44:5d:
                    c1:21:79:43:5c:32:29:a7:2c:bc:8c:54:02:b9:b3:
                    e1:53:94:74:7b:0b:87:a5:ea:09:a1:cf:7c:49:ec:
                    0a:93:b6:f0:21:cd:e0:9e:ea:83:dc:1b:5c:7b:ca:
                    67:3b:3e:6a:e5:a2:13:dd:fc:62:be:68:33:cc:9c:
                    72:d0:01:12:f9:ef:7c:b1:6f:ed:fd:e1:22:b8:42:
                    2f:cc:30:11:06:f5:5d:14:3d:93:ec:f2:4b:72:a1:
                    8c:7a:73:cc:8b:18:7a:74:61:6e:99:4b:80:a9:f4:
                    15:82:89:fc:66:52:89:b1:21:d9:35:99:c6:57:d0:
                    7c:54:f0:d3:23:e2:97:6e:17:31:f7:81:bd:5a:7b:
                    8e:07:47:af:14:19:e7:55:da:f3:a1:d5:29:39:d6:
                    eb:00:7b:71:80:4f:38:2a:d3:d2:1e:d4:81:d5:ca:
                    38:6b:51:22:0b:6d:72:9d:e0:7e:0a:a0:04:63:44:
                    74:c1:b9:af:84:22:1d:57:58:39:5a:e9:19:8c:63:
                    32:23:50:96:27:5d:4b:b7:7a:70:8c:2e:53:c7:fe:
                    70:21:a2:e7:02:2d:3c:33:2f:7b:ce:ec:a3:4b:bf:
                    9f:00:6d:d8:ab:a6:78:d9:8f:0d:4c:62:2c:2e:7c:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B8:73:C7:8D:99:1B:7F:A0:90:1C:69:8F:1D:04:4A:D0:27:6B:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/a9e820551771f82418fb35bf3b8f848be57dcbf3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272011

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:d2:8f:29:e7:89:99:99:f7:b0:d1:6b:d8:cf:e9:c9:c1:
         87:22:70:db:ed:c5:d6:8e:a2:c2:23:e8:76:9f:41:07:a4:06:
         42:64:bb:51:06:e6:f4:4c:f0:46:ac:2c:45:39:6d:e3:ef:53:
         6c:df:c5:d3:4d:ad:4d:e4:77:3c:79:72:a7:6c:b5:19:2a:1f:
         b8:d7:c8:3c:d9:05:78:3e:d5:b0:18:c3:cf:33:c3:c7:18:7f:
         d4:e3:c7:2b:3a:46:be:d3:8e:ee:7b:87:1b:5c:69:38:75:5d:
         d5:09:1a:a4:c0:45:47:d8:66:82:82:b3:fe:10:c7:f0:57:0a:
         fa:bc:2f:6d:64:36:c1:76:4a:2a:be:a0:01:67:a0:2a:08:1a:
         2f:56:98:a7:aa:7f:a2:fc:94:0d:bf:1e:8c:29:28:ce:4c:17:
         e8:22:cb:5e:cf:84:5b:0c:1c:71:d0:9d:18:45:b9:fe:2a:fe:
         1c:e3:0d:c3:77:fc:2b:c9:ba:3a:b4:e9:f8:dc:a0:bc:19:d5:
         4f:1b:6a:eb:e8:53:f5:79:75:1c:af:df:05:2b:32:4b:48:7b:
         70:da:59:ed:28:71:27:0f:4c:ac:0b:19:a7:1d:59:73:89:91:
         81:9e:71:81:d1:cc:0b:28:ea:8c:19:68:54:da:4b:ee:5f:27:
         2b:0f:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----