Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer
File:                     a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer (raw, json)
Hash identifier:          ToOUWVV5ijk+rydaO1f4k7kVMD7FkGb3Vl0439F5UYI=
Subject key identifier:   E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01019AEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Oct 2021 16:06:19 +0000
Certificate not after:    Thu 19 Dec 2024 13:40:08 +0000
Subordinate resources:    AS: 271864
                          IP: 190.113.32.0/22
                          IP: 2803:b410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16882414 (0x1019aee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  1 16:06:19 2021 GMT
            Not After : Dec 19 13:40:08 2024 GMT
        Subject: CN=a421ae9f935de1a361bde176bcfb6a5e99b7b1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:10:dd:d7:30:de:4a:e0:12:2f:3b:14:1a:
                    03:98:2d:13:a1:1e:c3:3d:09:dd:ee:02:1f:a0:18:
                    a5:41:78:1b:fd:9c:8c:60:c4:aa:8b:14:eb:46:30:
                    51:7c:c5:42:37:0c:22:ad:66:b3:88:7c:bd:40:b6:
                    e1:2d:37:80:13:99:1e:39:ea:3c:5d:8e:15:9d:30:
                    1a:8c:2d:04:ec:69:4b:a7:9b:2c:cc:15:c1:ad:5b:
                    d6:44:a1:98:81:c0:9e:60:ea:f0:48:79:64:8c:fe:
                    49:14:42:c4:08:22:11:16:b5:b7:96:e4:7b:05:35:
                    22:18:d3:80:6e:36:1c:16:83:0e:d6:33:28:cd:75:
                    16:05:87:e1:fe:ec:75:ed:8b:fe:09:d2:d8:e9:c8:
                    80:a0:0b:6a:ec:2c:53:e9:51:e6:f9:7e:7b:8e:36:
                    23:76:34:69:30:60:86:3a:06:e6:5e:37:52:45:c0:
                    35:ba:e7:07:3c:30:be:8e:a4:14:30:52:f8:25:01:
                    40:5f:64:76:ba:b3:fe:cb:6d:de:9f:73:fe:e9:10:
                    dd:5e:93:a9:1b:c8:25:aa:fe:5b:0c:af:c9:9b:d8:
                    06:ae:d9:08:e4:90:3a:ce:2f:77:0e:c3:f9:ef:c0:
                    af:fd:c0:c1:08:cf:5e:8c:7a:ad:78:2b:e8:71:79:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.32.0/22
                IPv6:
                  2803:b410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271864

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:af:97:79:56:7c:b7:fe:03:05:03:ac:a8:4f:de:4b:1d:
         ca:8e:e2:ef:79:37:4e:32:d4:f9:01:77:2f:2e:1c:ff:44:79:
         48:9f:56:b3:55:d0:bc:31:0b:67:a9:39:a9:fa:0a:52:57:2e:
         68:fc:a4:e6:47:9c:d8:6d:61:d0:ad:6b:ee:82:7a:28:3e:f4:
         46:cd:d6:53:13:9e:b6:e8:c2:f1:77:36:c8:53:07:d0:1e:03:
         e9:dc:35:9c:6c:02:ba:6f:6f:19:b1:19:03:3c:65:f0:2a:d2:
         b8:76:87:1b:a8:97:9c:d2:d2:32:29:ef:98:b0:33:3c:a9:75:
         2f:68:55:27:ae:d8:e1:ea:e5:a5:ce:3e:6c:e8:bf:8a:d0:9b:
         eb:83:a4:f0:eb:6e:02:9a:9f:4a:ab:08:a2:30:dd:7e:b5:9e:
         4c:bc:e0:7a:b9:db:9c:a9:45:64:f6:ef:b7:2a:ea:51:e4:d8:
         ea:db:7d:2d:49:0a:c0:89:11:79:1a:3b:49:2d:24:d0:fd:07:
         f9:db:aa:29:4b:13:96:06:a3:6c:20:79:a4:e0:23:de:f8:32:
         f4:a2:c7:23:8e:27:93:02:1f:7f:07:28:40:32:29:65:75:2f:
         14:5d:4c:6d:59:cd:67:fa:e8:29:43:1f:ae:12:3a:b7:fb:e7:
         71:07:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----