Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
File:                     acba41ca66eb0e77192d2d22221e4fb662988a5d.cer (raw, json)
Hash identifier:          ItPVh5qGoUdi3Q/lNAcMrjtyi4xI0GbfjxtIYLydck4=
Subject key identifier:   FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB6FED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Nov 2021 03:44:10 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 164.77.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16478189 (0xfb6fed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 03:44:10 2021 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:53:b2:b5:ce:11:35:e7:59:00:16:62:37:
                    93:fb:dc:2e:c9:16:93:b8:85:fd:0a:05:44:64:b8:
                    e4:c3:14:c8:2e:6e:33:0c:8d:32:2c:32:ee:5f:bc:
                    fa:4d:97:7c:ff:44:77:10:9a:8a:64:17:89:ba:48:
                    c8:25:d1:bd:78:27:63:8c:2d:19:63:10:d8:06:67:
                    8f:fc:0c:25:87:f7:8f:0a:6f:bd:e4:d5:a7:fc:c0:
                    52:4b:ec:9c:8a:99:8b:fe:31:4e:65:ba:00:ea:cb:
                    d7:bb:e0:42:1a:5e:f5:90:77:0f:8e:e1:2c:b6:97:
                    8d:66:79:f0:b2:11:3d:f5:e4:23:70:cb:90:47:da:
                    b1:f8:60:2b:44:35:2a:d7:de:43:e7:4f:7f:f6:a1:
                    2a:12:37:5e:61:fb:93:59:bb:bb:55:79:71:4b:79:
                    d1:a6:9c:c5:09:47:71:a7:44:14:52:cc:0e:6d:e7:
                    d0:ce:36:7c:dd:5c:c8:46:f7:b2:d0:9e:e5:ec:11:
                    6e:17:d7:fe:08:37:ee:23:7a:f5:f8:e8:2a:d3:b7:
                    ca:a2:50:ef:57:be:34:9c:7c:ab:39:42:0d:a4:35:
                    0c:8f:0e:b5:8d:21:74:e1:db:9d:85:93:d7:ff:94:
                    e7:fc:f3:15:5a:66:7a:d1:2b:2e:2a:2c:c2:39:ba:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:aa:db:14:32:d4:20:68:0e:b8:d6:fd:8d:57:9f:2d:35:
         91:46:fb:9d:31:ce:fd:96:e4:21:4a:cc:b1:d8:62:7a:aa:97:
         da:fe:b1:bf:78:85:72:53:af:f6:de:51:e2:ba:26:10:b1:60:
         81:a9:91:ff:3f:fb:57:93:62:89:2f:4b:dc:5c:7d:69:f2:d7:
         5b:3b:84:8c:71:2d:eb:68:dc:85:e4:ed:1e:b0:9e:16:47:69:
         24:4d:73:6f:de:ac:2e:1f:97:d2:19:8a:8f:59:d6:81:d3:ac:
         63:d0:9a:5d:fe:8d:89:1b:d9:b4:19:66:81:b1:dd:f7:b4:43:
         37:b0:1a:c0:ba:b8:6e:18:a7:91:ef:6f:06:64:f7:e1:8e:b8:
         21:84:39:f3:73:4e:ec:c3:3b:d0:1f:19:fd:51:84:24:8f:35:
         04:9b:06:57:4a:84:b1:c1:81:24:e4:6f:89:bd:17:2e:41:03:
         05:50:82:97:ee:7e:ff:29:e1:94:6d:9f:12:5b:c1:e8:1f:e8:
         e9:fd:6a:27:e6:2f:ab:45:c4:41:2b:30:b5:31:59:e1:62:e1:
         6f:c8:50:db:8e:6f:f9:06:6a:7e:9d:78:c0:3e:b6:6f:0c:12:
         f4:ef:63:d2:63:1b:2d:36:9b:eb:6f:d4:5d:a2:45:a4:fc:04:
         61:dd:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----