Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa48bdf98923c008b9085066d1cb5863456f5e2e.cer
File:                     aa48bdf98923c008b9085066d1cb5863456f5e2e.cer (raw, json)
Hash identifier:          jmBNpNs4MHnIXpULuW0fdRgkS2wXGuQohRE+4WWY7jE=
Subject key identifier:   DA:E6:08:EB:3B:4E:CC:C7:82:8B:3E:6C:00:13:D3:5C:0A:6A:BC:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF202E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/aa48bdf98923c008b9085066d1cb5863456f5e2e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Sep 2021 13:32:30 +0000
Certificate not after:    Tue 19 Mar 2024 17:28:41 +0000
Subordinate resources:    AS: 271915
                          IP: 2803:7210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14622766 (0xdf202e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 14 13:32:30 2021 GMT
            Not After : Mar 19 17:28:41 2024 GMT
        Subject: CN=aa48bdf98923c008b9085066d1cb5863456f5e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:e9:6f:0a:b3:44:fb:26:30:dc:2b:96:9a:
                    3b:64:0a:62:b0:3b:cc:30:57:37:1a:b1:e7:6b:83:
                    59:af:b2:7e:8e:ec:1d:79:15:1a:8a:a6:b4:e7:8f:
                    49:71:d8:f4:74:ec:36:65:a1:e6:9a:2f:4c:43:bf:
                    e8:1a:f3:51:4f:9c:33:5a:68:07:6f:f7:b3:1d:77:
                    4c:2b:bd:0a:94:39:80:bd:8d:24:93:76:9b:09:4a:
                    85:f6:0a:80:c3:e3:aa:8a:40:7f:30:04:ac:e2:3b:
                    85:05:f3:25:97:d5:49:d2:38:52:06:8c:f0:8d:73:
                    1e:6d:75:f1:ac:da:7f:56:3d:9d:a4:fd:28:63:22:
                    f8:d9:cf:6f:30:6e:08:d9:b6:4c:77:a0:8a:ba:9e:
                    3c:f3:eb:23:12:f2:cc:54:15:d0:4f:fe:82:be:74:
                    04:0c:03:09:11:5a:8b:99:61:24:18:8c:99:92:cd:
                    ac:3b:a8:90:d6:50:ea:1a:cd:9c:9a:9a:cc:e2:ba:
                    ef:84:e3:65:cc:34:f2:30:4a:5b:73:c3:cc:cd:b6:
                    e8:db:92:8e:a9:86:d3:05:99:e0:c7:d4:f9:ab:8c:
                    7d:c5:2b:fc:8a:12:db:1b:49:63:39:45:98:02:c9:
                    e9:8b:b4:5b:e0:1d:16:28:d8:b8:21:4c:67:76:65:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E6:08:EB:3B:4E:CC:C7:82:8B:3E:6C:00:13:D3:5C:0A:6A:BC:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/aa48bdf98923c008b9085066d1cb5863456f5e2e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271915

    Signature Algorithm: sha256WithRSAEncryption
         92:64:5d:25:08:c0:65:fc:ec:39:cf:aa:2a:d2:34:1e:b2:5c:
         c0:cc:c8:92:96:68:da:8d:c9:3e:e4:4b:f5:f2:b5:81:79:75:
         a6:5d:9e:e6:85:17:7a:b5:0d:0f:08:b0:9c:8a:ae:e9:4d:eb:
         95:4a:5f:0a:9e:a6:e9:fd:16:e1:51:ab:00:01:8a:00:2a:f0:
         35:f4:0b:26:d6:43:bb:c4:9a:97:f7:1b:92:dd:84:24:39:1d:
         a5:ad:ec:2b:a7:bb:a1:3a:4b:81:7a:9d:06:e6:b4:c8:bd:b9:
         22:60:9c:86:32:ef:1f:2e:90:ee:1c:89:32:af:e2:49:06:eb:
         84:c7:d5:7b:7c:bd:0c:f1:45:79:81:d4:6c:2c:6d:8f:2e:b5:
         ca:8d:34:34:b4:50:65:19:df:17:12:67:20:67:d3:cc:f6:06:
         cd:c9:b1:bd:87:a2:5e:63:d2:51:14:c9:5e:6a:58:6f:91:f8:
         3a:70:83:ea:3c:9a:df:63:81:71:45:0f:a8:0e:95:8b:05:94:
         f0:0f:18:74:57:2d:7c:5a:15:30:7c:9c:b0:97:ae:80:b4:05:
         4c:50:a4:8d:35:1a:00:35:a8:9a:c8:8d:d3:06:a8:bf:24:51:
         e5:a0:65:40:d2:02:90:4c:e8:0d:9c:6b:d3:13:a9:54:7d:eb:
         eb:87:14:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----