Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer
File:                     010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer (raw, json)
Hash identifier:          G6KLphT4i7M4BkRhceAD8y0OS5t7MG3tNpugxhgp0PA=
Subject key identifier:   4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1168A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Jun 2021 11:03:03 +0000
Certificate not after:    Tue 09 Apr 2024 21:01:45 +0000
Subordinate resources:    AS: 263755
                          IP: 138.121.124.0/22
                          IP: 2803:6440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14751370 (0xe1168a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 22 11:03:03 2021 GMT
            Not After : Apr  9 21:01:45 2024 GMT
        Subject: CN=010b9d9c696fcfc6fcf94f280d1b1174a54c09fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:ca:7d:30:94:c1:bf:76:d3:75:96:7d:2a:
                    8c:83:0c:b3:d1:72:eb:a0:e7:b0:bf:c9:a8:63:63:
                    44:b8:59:03:25:ee:14:06:20:47:f4:3e:4d:0a:a8:
                    1e:3d:7b:af:50:b8:22:a5:63:6b:cd:e5:11:68:f8:
                    c0:97:ae:d0:3c:09:94:9c:fe:b0:dd:d2:a5:6b:8e:
                    d7:14:ce:4d:f3:c4:a6:21:f7:df:31:ed:58:80:d0:
                    0b:8a:33:30:81:0b:16:5d:8a:8e:48:8a:e2:2b:f9:
                    07:24:91:c0:25:e2:6f:42:f1:e1:81:32:f9:28:ef:
                    fd:21:2b:d2:f0:d5:6c:ee:0a:d9:8c:04:51:78:cd:
                    36:4a:29:f8:ba:09:01:24:83:31:14:f9:65:a8:ec:
                    c1:84:55:9c:6e:18:d4:65:41:76:3f:7b:a8:75:62:
                    bf:db:72:0b:6b:f5:f7:f9:5e:49:37:74:d0:be:06:
                    47:cc:6a:0e:53:8d:db:1a:f5:90:96:51:8f:6f:d8:
                    58:ed:64:73:75:5d:35:dc:fd:d0:d5:a5:c5:38:28:
                    c4:1a:ce:58:7c:2e:ff:8e:97:70:56:dc:1c:38:e4:
                    5a:32:5a:70:e1:70:9c:7b:c4:a8:b5:14:8d:93:66:
                    b2:63:70:f2:1a:03:e4:37:68:b6:44:04:17:27:86:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.124.0/22
                IPv6:
                  2803:6440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263755

    Signature Algorithm: sha256WithRSAEncryption
         b4:63:f2:3c:a6:6c:3b:9c:af:cc:50:cc:95:cd:45:aa:8f:6e:
         c3:e3:08:33:96:8b:94:e6:b8:bc:e2:08:01:37:b5:41:93:e7:
         00:48:7e:e1:12:e0:24:8f:d2:89:0f:a4:37:36:9c:1a:66:de:
         a1:06:7a:d2:f6:af:08:f1:f2:3b:42:03:f2:7f:9b:95:d5:3a:
         d8:07:92:83:11:57:df:71:71:cf:f6:1a:fc:c6:c8:18:43:e0:
         4f:78:35:25:d1:8c:4f:15:9c:22:d6:6f:10:ee:5e:70:5e:08:
         7e:cf:44:d1:19:b9:62:25:d0:35:44:df:f7:35:c7:77:34:08:
         bd:d6:87:dc:85:fe:71:5d:9c:14:06:9a:aa:d4:83:36:54:f6:
         29:14:53:4e:c8:9b:79:71:8e:7a:84:43:e7:59:bf:88:8b:6e:
         b9:cd:e0:a2:f9:20:97:71:29:21:99:66:48:72:6c:80:b3:ac:
         ac:dc:e7:d7:49:a7:f5:25:fb:b4:95:6c:75:15:89:bf:d2:3f:
         8f:6a:8a:30:d3:cb:ef:c0:f7:c7:ce:0f:77:38:73:cb:c5:e6:
         5a:d1:0d:83:aa:fc:45:b8:78:36:ab:34:a1:6f:87:ea:be:4d:
         19:63:32:72:a6:be:8b:20:fb:ae:f3:04:eb:34:1f:cf:c5:5f:
         af:f3:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----