Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad7d6f790bf6867516dffd067b3a4d238010cdaf.cer
File:                     ad7d6f790bf6867516dffd067b3a4d238010cdaf.cer (raw, json)
Hash identifier:          BTNa4MZwSB5Y7xltvhhc6S0o1OVFO+gNsJC7IrxOd2c=
Subject key identifier:   8A:0A:09:D1:77:1D:60:CF:DB:54:B9:83:4F:8C:BC:77:CE:2A:24:E4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E217FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/ad7d6f790bf6867516dffd067b3a4d238010cdaf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Nov 2021 13:43:48 +0000
Certificate not after:    Sun 21 Apr 2024 16:02:39 +0000
Subordinate resources:    AS: 264723
                          IP: 170.231.124.0/22
                          IP: 170.244.184.0/22
                          IP: 2803:2740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14817279 (0xe217ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 13:43:48 2021 GMT
            Not After : Apr 21 16:02:39 2024 GMT
        Subject: CN=ad7d6f790bf6867516dffd067b3a4d238010cdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:c7:bb:98:9a:a2:ac:2b:07:92:a3:ed:3b:
                    aa:6e:1f:13:ce:72:a7:fe:0f:5f:57:94:d1:37:02:
                    ee:25:08:57:43:e7:72:8a:92:03:2e:8c:97:f2:0b:
                    9c:fc:53:e9:b5:1e:80:b4:dd:f8:d3:29:97:58:60:
                    ed:4e:92:2b:cb:ad:52:f0:1b:ba:99:e8:c2:94:98:
                    60:12:de:2a:9c:47:6c:fe:de:28:5d:88:77:aa:df:
                    54:a2:03:ce:b7:fd:16:66:b9:ec:fa:ba:93:b6:d4:
                    1f:7a:28:5f:b4:01:b5:52:2f:15:dc:ad:7c:7d:f6:
                    ff:e1:77:c6:a7:79:17:08:87:7b:35:3d:14:56:3a:
                    b7:d7:3e:04:57:97:36:af:46:6a:9a:14:3b:5c:5c:
                    68:e1:a6:63:52:07:6a:28:54:42:42:66:54:dc:f7:
                    4d:f4:b7:14:f1:b4:6f:03:28:e2:7e:5f:e3:c8:86:
                    1d:aa:a0:18:ca:f4:81:5f:66:5c:76:26:fe:46:5e:
                    53:be:bd:9a:5e:5c:6e:ce:18:0d:18:d3:71:a1:0f:
                    2c:bb:ab:f7:33:05:bd:31:1c:63:dc:24:15:fb:53:
                    96:1b:67:7d:a6:aa:25:56:ab:79:8b:b8:9c:58:9f:
                    b3:54:62:70:b5:f6:83:49:6a:7e:a0:96:0f:a4:70:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0A:09:D1:77:1D:60:CF:DB:54:B9:83:4F:8C:BC:77:CE:2A:24:E4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/ad7d6f790bf6867516dffd067b3a4d238010cdaf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.124.0/22
                  170.244.184.0/22
                IPv6:
                  2803:2740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264723

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:6a:4c:3d:b1:0c:15:1e:b8:ee:d2:84:d7:64:28:9e:33:
         20:1a:75:c2:8d:5a:12:04:60:7a:19:9e:69:cb:e9:42:b7:4d:
         3a:87:50:32:85:e6:72:84:f6:68:cd:cd:d5:d2:5f:33:9f:e2:
         78:5a:bc:64:98:6c:c2:c0:1f:26:83:5d:f1:28:4d:72:de:9c:
         48:15:ab:54:0f:d5:22:64:eb:eb:30:00:01:5c:0e:40:f1:4b:
         17:41:0a:a2:09:a9:07:46:7b:ca:ff:39:bf:77:be:c0:2c:e7:
         4f:de:a3:a4:fd:c5:f0:dd:bd:bd:26:e7:16:ab:74:89:f9:ed:
         1a:05:1c:c5:d2:75:f9:62:12:c4:80:b1:76:96:e2:64:dd:08:
         a2:6d:c4:f3:29:35:e8:29:00:16:b2:e8:4f:02:4a:30:0f:53:
         6a:ae:58:5b:4f:00:53:18:68:50:6c:21:6e:b2:34:fb:ff:d6:
         ce:5c:6f:bc:28:7a:46:47:5f:a8:4a:e0:a7:cd:6e:d0:41:00:
         c9:4b:ed:04:9a:ae:c1:2a:f7:45:7b:6f:81:bf:f1:c1:72:92:
         0c:85:0f:f5:b1:66:9f:fc:54:75:21:c4:86:bb:cd:5a:04:76:
         8f:30:54:94:27:54:73:3c:1b:c4:8b:cd:04:8b:30:1b:66:10:
         28:04:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----