Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe217e2da4ae2415c89508c34523b34f7d66c869.cer
File:                     fe217e2da4ae2415c89508c34523b34f7d66c869.cer (raw, json)
Hash identifier:          KbtSvs8zZgckMlqavNMC/hD1p3VSV0fKAv8iIrF7EHs=
Subject key identifier:   1B:40:6F:0E:F9:68:7B:82:6C:AB:68:33:B6:E5:9B:D5:36:32:03:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D42560
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/fe217e2da4ae2415c89508c34523b34f7d66c869.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Aug 2021 15:09:37 +0000
Certificate not after:    Sun 02 Jun 2024 17:34:59 +0000
Subordinate resources:    AS: 271948
                          IP: 2803:9610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13903200 (0xd42560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  2 15:09:37 2021 GMT
            Not After : Jun  2 17:34:59 2024 GMT
        Subject: CN=fe217e2da4ae2415c89508c34523b34f7d66c869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:2d:39:99:6f:60:d9:ce:42:1f:89:dc:37:
                    c3:ab:f8:42:d6:17:77:55:a4:0d:c8:39:55:ec:55:
                    ac:17:99:ec:d1:9a:47:53:35:de:bb:41:a7:6b:fb:
                    45:fb:bd:18:de:be:22:c7:79:47:6c:7f:2e:96:30:
                    83:f1:bb:4e:1f:f3:6b:f0:63:aa:54:a9:5c:da:07:
                    1b:54:92:d0:7d:fc:29:bc:a2:12:64:e8:6a:c5:43:
                    a3:8f:b6:09:74:04:c3:4b:9e:18:fd:1a:48:76:0f:
                    ef:df:aa:68:4e:97:92:d6:1f:1d:69:51:b2:35:f9:
                    e2:8a:2c:c4:51:e7:da:d2:c8:30:02:07:81:1a:ab:
                    07:d8:c9:c2:96:bd:84:2b:94:a8:8c:08:5a:6b:5c:
                    61:91:3e:80:54:5c:2f:f3:ee:c2:1d:63:ec:77:01:
                    b5:a8:7a:23:88:25:bb:fd:7a:74:1f:ab:13:89:91:
                    d5:a3:09:ca:7e:ba:fe:3f:82:7c:44:be:8d:19:f2:
                    17:59:8a:96:97:58:0d:e6:89:fe:71:37:60:32:38:
                    bd:5c:18:3f:d5:5f:8a:ba:5a:83:7f:c1:0a:2d:f4:
                    2b:a6:f5:34:37:d9:36:6b:ea:f7:8e:07:08:e8:ff:
                    d9:31:5c:99:47:b1:7b:1b:e8:fc:69:bd:d0:8e:80:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:40:6F:0E:F9:68:7B:82:6C:AB:68:33:B6:E5:9B:D5:36:32:03:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2f08051f-ce78-43a5-a57b-08c387b9576d/fe217e2da4ae2415c89508c34523b34f7d66c869.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271948

    Signature Algorithm: sha256WithRSAEncryption
         2e:09:2b:a5:0b:8c:c7:59:50:ff:0b:3c:0e:94:27:83:58:d6:
         d6:a4:09:cb:69:2a:c2:01:f8:c5:ee:68:da:ca:4a:e9:5a:b9:
         28:8d:a7:e5:f7:a5:3b:05:b2:12:0b:6b:14:52:21:c9:a2:b1:
         ff:e9:8e:b7:8c:97:ee:93:ae:51:a4:a0:99:45:fc:2a:b2:c3:
         42:87:4f:f9:ce:6a:b7:1b:60:2e:41:e5:f6:f4:f4:f1:9b:86:
         21:9b:6e:5e:73:16:db:85:11:91:2b:e0:db:63:16:7d:79:e7:
         fc:14:34:96:4e:fe:5d:76:1d:0c:69:16:63:6a:d5:14:69:04:
         69:08:37:7d:1b:68:ae:59:41:2d:d0:de:b6:e1:6f:af:34:69:
         de:80:a0:81:c2:77:47:d5:a6:2b:09:cc:63:9f:40:bb:90:41:
         e0:d2:ca:b4:f7:da:46:e2:d0:a9:aa:05:98:2b:f2:4e:13:2d:
         69:85:41:71:39:c3:c2:d2:b2:69:53:e9:81:cd:f3:50:4d:48:
         20:36:ec:fb:91:ab:83:4d:e2:0e:e9:7a:6c:74:2c:39:e9:19:
         d4:51:e0:a0:3d:d3:94:56:f8:68:ea:71:cf:56:dc:a4:5b:f4:
         46:07:21:c3:54:5b:4e:a5:87:f5:3c:8d:1d:ed:1f:39:a5:a6:
         2c:3b:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----