Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer
File:                     af916a8098c48f9f0fefd791512ee124a99ce09d.cer (raw, json)
Hash identifier:          WBFhFLn7yT8l0gjkR3wXcy53RU2bw96LcRDyr1CjzQY=
Subject key identifier:   72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1CE94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Aug 2021 16:47:17 +0000
Certificate not after:    Sun 04 Feb 2024 14:00:00 +0000
Subordinate resources:    AS: 20191
                          IP: 146.155.0.0/16
                          IP: 2800:1b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14798484 (0xe1ce94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 10 16:47:17 2021 GMT
            Not After : Feb  4 14:00:00 2024 GMT
        Subject: CN=af916a8098c48f9f0fefd791512ee124a99ce09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:f0:7f:fc:47:9d:5c:67:6f:ca:b5:72:ec:
                    e0:de:7e:f2:5c:77:8d:da:f0:a4:4a:a7:2f:7e:1e:
                    65:a6:49:2c:a6:93:13:b2:a4:01:e9:4c:ad:fd:ea:
                    82:ca:8f:d5:91:91:c6:cd:3a:db:d6:45:a3:b0:1b:
                    bf:4d:f0:9b:8a:84:23:b9:72:35:e5:03:e6:62:7f:
                    3f:2e:34:d6:a4:a5:da:19:25:ed:11:60:8f:cd:f4:
                    72:4d:04:b9:38:44:38:85:98:7d:5a:cd:7e:a4:a8:
                    d9:f0:ea:ac:d6:13:42:ad:61:03:05:71:f2:80:8e:
                    a6:18:c9:21:87:21:3e:e9:d5:09:b4:e2:dd:e1:94:
                    cb:4e:fb:97:46:34:64:6e:bb:f6:e1:fd:77:58:cc:
                    4d:29:d9:97:cb:dc:51:72:d9:40:ba:40:9b:64:e4:
                    71:3d:aa:c3:74:4d:d3:2d:c9:66:95:7c:d1:bf:1d:
                    96:5e:ad:aa:a2:d5:a4:8c:53:0c:98:99:d9:b7:88:
                    3c:48:00:5a:f2:a6:8b:e0:24:9a:42:4f:62:61:e5:
                    f5:ed:82:3d:95:51:c0:8d:61:1f:f2:81:3c:ef:75:
                    1f:ea:9a:06:16:74:5f:7f:56:e3:6d:cb:a8:48:76:
                    ab:e1:5a:23:ad:c3:1d:e9:c4:35:25:98:c1:4f:e5:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.0.0/16
                IPv6:
                  2800:1b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20191

    Signature Algorithm: sha256WithRSAEncryption
         51:77:02:d9:79:be:6d:ae:5d:62:a1:9b:d0:48:f6:88:95:9a:
         50:37:2f:45:0d:18:f3:61:c3:e9:6e:d4:21:7a:39:b2:c3:d0:
         78:9a:8a:bc:23:79:08:21:c1:f2:0a:7b:29:2a:bf:7a:dd:61:
         2e:f9:ca:99:9a:ee:35:7d:bc:ad:f9:56:dc:ab:0b:cd:9f:55:
         fe:30:0e:2f:67:b6:76:5d:14:1f:c4:32:11:67:53:96:f5:2c:
         da:2b:e6:50:6a:34:47:db:e9:74:8c:29:28:bd:e1:46:06:4a:
         83:d0:00:ec:58:3b:53:3c:73:4d:24:03:81:50:16:1c:6a:02:
         dd:09:d4:d9:af:96:c9:22:d2:51:a5:8d:07:d8:45:42:d0:82:
         c2:04:b3:dc:ea:9e:b7:7b:aa:e0:08:17:d5:96:65:2e:6c:7d:
         e3:d7:c6:6b:a9:a2:9f:e0:f1:5e:9e:4b:c1:6f:52:87:30:1f:
         b4:12:2c:2b:26:15:4a:1d:98:13:ea:c6:77:9e:48:96:e2:1a:
         73:e5:3f:9d:2b:fa:88:40:35:9e:9d:32:78:41:15:92:98:a3:
         11:61:ee:c0:63:1a:18:70:17:ad:27:5b:c2:fa:67:53:59:93:
         b5:5d:fb:19:31:76:66:53:f9:fa:64:01:4d:22:81:58:a7:f9:
         f8:b4:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----