Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
File:                     ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer (raw, json)
Hash identifier:          iI6YVlZuNHeQfYAHkB4MJa/A+cboOLOlAKFeSFemvvo=
Subject key identifier:   DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9B0A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Sep 2021 21:25:44 +0000
Certificate not after:    Thu 13 Jun 2024 15:56:50 +0000
Subordinate resources:    AS: 271956
                          IP: 2803:7610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15315109 (0xe9b0a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 20 21:25:44 2021 GMT
            Not After : Jun 13 15:56:50 2024 GMT
        Subject: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:b4:ae:73:91:7e:fe:1c:c1:69:ee:4a:76:
                    c5:bf:c7:6f:2c:8d:f3:8e:0c:39:77:11:24:e7:19:
                    5a:0e:2c:11:4a:4e:ad:a9:43:39:fd:e0:8e:8e:00:
                    b2:27:8e:01:13:d0:63:65:81:93:0f:69:2f:a3:db:
                    63:d9:99:05:3c:09:8e:49:1d:34:7b:fc:3f:e1:d3:
                    5f:23:ec:dd:09:74:6d:e6:df:6f:90:b5:cb:30:a6:
                    68:c4:37:33:2d:e6:fc:c8:1b:e6:d4:09:8b:ce:da:
                    26:f3:1e:a9:e6:cd:e4:99:f0:4d:60:d2:b9:e0:19:
                    7a:0f:66:ec:29:10:8d:1c:e5:0e:17:81:64:2d:b9:
                    d8:fd:8e:ba:48:de:db:81:43:98:97:92:bd:6b:ab:
                    d7:9a:8e:4b:fc:ae:fa:eb:44:e8:66:b3:0b:ef:c2:
                    b4:87:d7:cc:bc:5c:f4:ce:84:f2:94:eb:ce:46:61:
                    65:b9:a9:ba:ef:30:d4:6b:27:38:ba:2c:c2:5d:4d:
                    e1:74:6d:f0:89:79:5c:de:91:e7:72:7c:d4:ed:30:
                    df:0a:ce:b5:55:23:af:a5:64:5d:7c:b5:d5:8c:e2:
                    48:95:0c:90:5a:d8:d5:a9:b8:e9:29:a1:87:6e:63:
                    87:01:8f:e7:40:f7:70:8d:8f:f2:c6:1f:10:09:cc:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271956

    Signature Algorithm: sha256WithRSAEncryption
         28:89:71:fc:fd:8b:cc:04:37:53:4a:db:49:f2:ef:c3:6b:59:
         cb:cf:f4:3d:e5:63:03:0a:a2:b4:d5:3e:95:b3:97:f6:5d:04:
         2d:1f:66:c4:39:f4:d5:de:c4:86:f8:3f:b3:34:8e:c1:b4:aa:
         54:ab:e5:11:bf:b1:c5:0a:14:63:b6:07:59:0a:5e:cd:f9:bf:
         d1:5b:23:ab:6c:06:14:dd:07:bd:79:f3:7d:85:e7:d3:53:e5:
         74:06:e7:d3:76:f6:ef:c1:33:ee:4b:18:97:f0:5a:21:e8:19:
         28:2f:1e:59:ec:d9:e4:76:23:be:ab:30:ed:3b:f4:ba:e1:0c:
         19:73:f5:ea:95:44:79:b3:66:86:b1:54:dc:f1:2d:23:d4:67:
         08:b0:5a:55:0c:48:41:ed:b1:53:af:35:7a:61:c2:19:3b:a2:
         2f:e7:af:97:3a:9f:40:2d:bb:cd:d8:38:e2:06:dc:64:9a:73:
         6a:c6:fd:51:c0:17:e7:92:8f:bd:e4:a8:df:7e:3e:80:4f:a8:
         0d:b6:9b:8e:7f:59:eb:5f:e9:bd:27:f3:88:82:db:dc:97:a6:
         24:3a:aa:fb:86:bd:67:fd:d2:93:d3:d9:84:54:46:a5:4e:01:
         f6:65:be:2a:96:f1:4a:08:b8:10:c4:22:55:72:2d:23:c3:5c:
         0d:ea:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----