Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.cer
File:                     c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.cer (raw, json)
Hash identifier:          fZaBICKPcuFFfOF0zlYz0A/FLmJbPMF0P0OXyOWLYqk=
Subject key identifier:   78:C8:8F:7F:6E:E8:D6:93:1C:0D:C6:18:92:23:9B:F8:65:9B:B2:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D82D86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Mar 2021 19:51:29 +0000
Certificate not after:    Tue 26 Dec 2023 15:24:04 +0000
Subordinate resources:    AS: 271866
                          IP: 200.36.156.0/23
                          IP: 2801:1f:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14167430 (0xd82d86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  5 19:51:29 2021 GMT
            Not After : Dec 26 15:24:04 2023 GMT
        Subject: CN=c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:a9:81:98:37:1f:db:1c:03:dc:81:6b:a6:
                    f5:74:8b:70:ed:4a:35:de:d6:35:67:b0:08:db:f1:
                    d9:20:93:9e:88:5e:5e:c8:4e:0e:8b:00:53:6f:8d:
                    17:57:bc:73:ab:be:4a:c2:d0:ab:ed:c4:d1:1b:1c:
                    f4:e3:22:bc:ba:d5:f3:23:e3:a9:9a:8f:2c:bc:56:
                    b3:aa:76:ee:dd:8d:d7:2e:13:7d:aa:cc:2d:9b:6a:
                    82:b7:53:5c:77:cb:70:b2:ef:52:c2:31:6d:91:b7:
                    16:ea:21:7a:8d:79:9c:21:16:a3:ae:aa:7e:0e:b8:
                    73:37:35:fa:09:1b:90:08:c1:65:f2:af:64:c2:8e:
                    02:2d:3a:e9:9e:aa:8c:47:08:e8:8b:9e:62:85:fc:
                    e8:44:dd:81:2b:1e:2f:72:c8:cd:20:15:7a:c7:a2:
                    1c:92:91:9b:6c:d4:5e:cb:e3:ec:d0:68:03:dc:7c:
                    af:4c:a4:c4:64:61:fe:84:af:f8:0d:39:ab:69:aa:
                    d6:49:6e:d1:f4:45:10:88:c7:8b:5e:cd:da:62:fe:
                    63:c6:a1:c6:ae:f6:db:e9:a8:1a:1a:79:94:bd:8f:
                    34:8e:eb:4f:c2:c7:33:8a:b5:7c:b3:5d:bd:be:cb:
                    8d:47:f5:5b:2b:cd:9b:08:ee:d8:70:78:57:dd:ff:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C8:8F:7F:6E:E8:D6:93:1C:0D:C6:18:92:23:9B:F8:65:9B:B2:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23
                IPv6:
                  2801:1f:6800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271866

    Signature Algorithm: sha256WithRSAEncryption
         47:17:03:49:e7:72:94:91:6e:88:fc:1c:27:a1:4b:3f:2c:ec:
         b1:50:80:0b:c4:04:90:ed:45:5e:59:a8:68:49:43:b6:dc:53:
         8d:af:ed:b2:ee:c6:5c:ae:56:0d:22:73:dc:13:f6:69:70:47:
         2f:32:cc:f8:a7:51:84:39:b4:35:cd:42:ff:11:4e:3d:3d:de:
         57:f2:c2:d6:b4:d5:e3:70:c8:00:35:79:1e:62:5d:71:76:53:
         ac:1b:d9:77:9d:35:ff:ea:a7:93:b2:a7:70:1b:8a:20:a8:08:
         c4:19:e4:32:93:7f:ed:20:79:03:0c:e6:fc:ce:a9:19:12:11:
         79:39:ec:4d:a2:3d:7b:b4:0a:f3:53:7a:b0:f8:9a:ae:52:1f:
         ae:23:81:8e:67:49:de:2c:8a:d1:3b:09:93:50:e5:75:c5:d4:
         6d:bb:7c:b5:f5:28:b1:a8:3c:77:f4:79:4c:e3:67:c1:97:e7:
         e3:eb:26:85:19:f5:8d:cc:8a:53:2f:3a:39:9a:7b:2d:ac:be:
         20:27:a3:cd:fa:5c:ed:99:09:56:19:9d:fc:71:e4:cd:f6:3c:
         9a:ba:ce:61:ef:6f:1f:30:27:13:9d:80:eb:53:8f:09:9a:54:
         35:1b:82:61:e0:39:07:47:33:b8:4f:93:f4:54:ee:5d:58:4c:
         bf:d1:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----