Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3cf2536575d774352e8bdfb75251b353267e80.cer
File:                     ae3cf2536575d774352e8bdfb75251b353267e80.cer (raw, json)
Hash identifier:          6LsywaJ+BsAomvNqe3qVFdruFFwhXObn3sJbgj6wvFM=
Subject key identifier:   A9:D0:89:41:9C:89:B0:BA:BF:5D:A7:C1:60:56:34:1D:AF:D9:D5:F0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1F758
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ae3cf2536575d774352e8bdfb75251b353267e80.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Jun 2021 13:49:44 +0000
Certificate not after:    Fri 16 Aug 2024 20:35:06 +0000
Subordinate resources:    IP: 201.131.49.0/24
                          IP: 2801:1c:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15857496 (0xf1f758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  1 13:49:44 2021 GMT
            Not After : Aug 16 20:35:06 2024 GMT
        Subject: CN=ae3cf2536575d774352e8bdfb75251b353267e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:78:44:cb:3b:89:9b:8f:32:fc:f0:36:87:
                    60:c8:b5:67:10:c6:1d:d9:1b:87:9d:5f:13:50:33:
                    48:44:5e:ed:ee:b4:da:e0:7e:4f:98:ef:1c:ef:7d:
                    94:3d:fc:4d:d7:a1:f9:cd:35:85:7a:3f:8f:81:f5:
                    3a:29:df:ba:7a:9f:bd:23:40:a4:4d:0c:c0:a5:24:
                    88:66:4a:bc:5b:8b:9c:7c:39:b5:ae:d2:8d:12:de:
                    d1:ab:3a:6c:04:58:b6:d4:08:2f:73:e6:7e:9b:bb:
                    81:a1:e2:aa:32:f4:a6:9d:50:f8:61:3d:3e:04:88:
                    62:44:39:a0:fb:a4:59:52:44:33:81:b8:db:0b:b9:
                    3f:46:0d:d4:3f:a6:01:3d:63:8f:cb:f6:74:6e:18:
                    c3:8d:60:61:eb:e0:76:0a:83:6a:04:39:75:d3:4a:
                    d5:df:5a:79:ae:d8:c4:ba:1a:75:49:7b:20:f2:85:
                    54:dc:a0:6b:8d:a1:c8:c4:e8:3a:60:ea:59:fc:8f:
                    d1:f1:e6:df:60:2c:69:78:27:7e:6b:6f:39:f1:33:
                    d4:70:f5:55:02:52:ac:2f:e8:45:5a:36:73:6c:db:
                    fa:bc:7f:11:d5:1e:ac:0f:c9:85:c2:73:00:e2:81:
                    af:46:71:28:76:ea:00:3b:1f:23:2c:ec:87:3f:bb:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D0:89:41:9C:89:B0:BA:BF:5D:A7:C1:60:56:34:1D:AF:D9:D5:F0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ae3cf2536575d774352e8bdfb75251b353267e80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.49.0/24
                IPv6:
                  2801:1c:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:98:96:25:b2:2f:fc:e7:84:41:e3:b2:8c:68:ee:d0:9b:db:
         98:04:3d:27:39:46:9d:0d:15:93:f6:a7:5b:3d:0a:3d:e7:f8:
         5f:51:dc:1e:dc:94:af:e2:73:d6:3c:e1:7c:35:b4:6f:89:e4:
         19:2a:3b:cd:23:07:86:4a:65:00:2d:f2:d4:2b:3b:32:eb:15:
         89:e3:9d:4f:2b:97:e6:da:fc:99:1c:7a:ec:03:1b:24:f2:18:
         c7:75:c8:14:21:ba:c5:7d:02:0f:a6:48:13:60:66:9f:c6:4e:
         c4:72:6f:30:c7:5d:75:33:f2:0c:f1:c2:bb:34:d1:8c:cb:ee:
         1f:ed:d9:73:db:9c:1e:6c:58:46:9f:67:6f:b6:34:d1:e4:98:
         83:01:2b:da:af:d2:18:98:ac:51:95:1f:47:77:40:e0:e1:ad:
         53:d8:e8:b2:c0:d4:f8:7e:6a:fc:40:09:13:9e:65:02:0f:c6:
         e2:50:10:94:ca:c5:e9:9f:16:50:c1:96:ee:e9:dd:bb:c4:65:
         b3:1e:44:85:89:9a:fe:47:6c:ac:2f:c8:75:4e:bf:d7:6d:1b:
         bf:24:42:0d:e2:9b:a9:93:fe:fd:81:31:38:33:6b:92:a5:44:
         fc:fb:f0:d8:1e:b1:1a:f9:ce:68:3b:3c:67:f1:c9:b5:47:63:
         0f:48:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----