Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.cer
File:                     ad25e0e95ec04958be3de512ff6388c7b80e5fe5.cer (raw, json)
Hash identifier:          xK2BlAQTogGXkT5bYb53EXUT6V+UEnaMP8dHkk5UQ+I=
Subject key identifier:   B5:8C:13:04:EF:B2:A1:FE:B4:DE:61:BE:94:EC:37:5B:8D:E4:AB:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCFE7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Jun 2021 00:06:17 +0000
Certificate not after:    Sat 16 Nov 2024 21:03:50 +0000
Subordinate resources:    AS: 269906
                          IP: 45.191.80.0/22
                          IP: 2803:cce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16580222 (0xfcfe7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 16 00:06:17 2021 GMT
            Not After : Nov 16 21:03:50 2024 GMT
        Subject: CN=ad25e0e95ec04958be3de512ff6388c7b80e5fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:df:83:dc:b4:85:bc:79:8c:59:d9:05:a0:
                    9f:43:dd:25:9a:cd:55:8f:1c:44:7e:5c:a2:85:c9:
                    09:6e:42:a4:d9:7d:da:77:d0:00:48:7d:28:e4:ea:
                    36:db:e9:08:48:cd:26:11:15:1d:74:c5:f7:70:5a:
                    47:7b:e7:31:fd:07:e0:c8:43:ad:3b:53:0c:d7:d3:
                    d2:ec:77:a6:9d:04:31:5b:30:ab:c6:09:ff:96:15:
                    f0:aa:d6:c0:de:a4:3a:c7:fb:2d:d5:e1:28:3a:f2:
                    e8:5c:4b:c1:43:28:23:e6:fb:d5:df:b3:5d:5c:66:
                    19:22:dd:4c:ab:48:f2:c9:5b:1e:21:dd:c7:3f:0f:
                    69:b8:96:ed:88:c1:a2:e9:00:67:25:15:30:ea:9c:
                    85:68:09:7a:38:e3:f0:3d:91:67:21:51:05:ae:c6:
                    02:ab:f3:28:2b:fd:99:53:f2:fc:d0:80:33:85:c7:
                    6d:d5:8a:d8:f8:75:7f:7e:a1:73:67:97:fa:7a:c9:
                    0b:f2:04:a5:ba:c9:a0:fe:66:fe:54:e5:f1:9f:b3:
                    6c:09:24:0c:6a:9d:ea:2b:54:e0:54:82:97:d2:38:
                    d3:7c:39:11:d1:8d:16:c9:1b:49:6c:f3:81:cf:4f:
                    32:f7:57:21:8f:da:d8:95:31:3b:84:17:65:e9:d7:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8C:13:04:EF:B2:A1:FE:B4:DE:61:BE:94:EC:37:5B:8D:E4:AB:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.80.0/22
                IPv6:
                  2803:cce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269906

    Signature Algorithm: sha256WithRSAEncryption
         a0:32:b1:3b:96:4b:e8:d8:0f:34:34:24:b1:00:98:b4:b8:9b:
         f7:8a:82:bb:c4:eb:fb:48:1a:52:08:2d:d0:e8:1b:35:de:9f:
         4a:f7:33:0a:7d:23:6d:24:dd:32:4f:82:d0:31:92:71:a3:0b:
         a1:08:2a:6f:02:44:63:9b:32:11:06:8a:13:1f:28:c1:99:3b:
         57:82:a9:76:a2:4e:14:65:1c:3f:ea:67:64:b0:a7:bd:09:b5:
         8f:6a:e2:f5:89:6c:ad:fe:83:f4:59:e9:e9:e2:f2:c2:63:17:
         3f:20:63:aa:6d:27:22:b8:e7:07:97:57:48:08:41:91:de:9a:
         df:69:ae:d1:61:b4:3c:32:d9:7d:0d:e2:78:e6:22:32:36:3b:
         09:a5:52:25:20:d5:ed:d4:92:e4:61:c9:b4:62:d1:8d:e8:56:
         4f:ad:a5:1b:16:fc:6a:80:f0:98:a0:14:16:db:98:0f:07:a4:
         1b:e8:8e:d1:96:5a:fc:21:1c:d2:f7:86:8c:f6:ba:8f:1b:ff:
         07:65:17:b4:bd:bc:24:38:36:c4:b6:6e:4d:a9:99:08:bf:62:
         a8:80:e5:b0:17:5c:7b:d0:f2:0f:df:a7:1c:7e:ae:7a:48:7a:
         91:fd:c3:52:a9:16:74:f7:c5:9f:16:ef:7e:32:33:59:a8:da:
         9e:4a:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----