Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/150f32775997390a892546bcb71f77c91bf1ccc6.cer
File:                     150f32775997390a892546bcb71f77c91bf1ccc6.cer (raw, json)
Hash identifier:          4YgH4gjlBx5omJH/v5++Sj/iPjpeD1CfnEI4y95TlO4=
Subject key identifier:   BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D95A22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/150f32775997390a892546bcb71f77c91bf1ccc6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Dec 2020 23:00:11 +0000
Certificate not after:    Thu 11 Jan 2024 18:19:19 +0000
Subordinate resources:    AS: 269968
                          IP: 177.37.40.0/22
                          IP: 2803:d6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14244386 (0xd95a22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  1 23:00:11 2020 GMT
            Not After : Jan 11 18:19:19 2024 GMT
        Subject: CN=150f32775997390a892546bcb71f77c91bf1ccc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:59:c9:29:89:51:e0:15:73:b8:e2:03:f1:
                    19:8d:6e:b5:9e:c8:fe:ea:aa:cf:00:c1:b4:58:73:
                    ac:18:82:f9:b2:5a:d4:76:29:41:ec:cc:ff:25:82:
                    30:d1:6a:61:2f:90:7f:86:95:c0:e8:65:fa:0d:3a:
                    cf:92:3a:08:52:b9:03:ba:fa:6d:a1:2f:be:d1:46:
                    f5:fd:eb:ba:9c:2d:08:dc:05:98:ad:e8:63:0f:63:
                    f2:4b:c7:02:25:c2:de:d1:cb:54:af:59:a1:aa:ea:
                    ff:19:31:b7:7c:6a:41:87:e9:2f:dd:25:e8:5d:36:
                    2a:bb:ba:91:5c:98:56:39:bb:0a:d2:bf:4a:4b:ae:
                    2f:f4:5d:1b:6f:50:36:f2:52:5f:fe:7b:6f:f0:6a:
                    4d:74:41:5a:b6:bf:b5:c0:6f:06:44:2d:bd:15:02:
                    f6:4c:73:72:00:dd:b4:83:97:54:d9:26:f8:71:72:
                    c3:7e:e6:94:f1:70:c8:13:63:52:75:60:ba:bb:ef:
                    ef:12:45:bc:20:e4:30:d2:f0:e0:d7:e3:c1:da:2f:
                    73:b4:c1:af:0e:f7:b7:7e:99:15:7e:8b:5c:e4:1a:
                    6f:c5:42:cb:6e:2f:23:59:37:5b:fb:d1:e7:e5:09:
                    8f:f1:51:6a:e5:78:07:13:5d:52:ba:88:99:5e:eb:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/150f32775997390a892546bcb71f77c91bf1ccc6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.40.0/22
                IPv6:
                  2803:d6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269968

    Signature Algorithm: sha256WithRSAEncryption
         01:68:54:74:6e:8d:7f:1d:f0:27:5c:0a:69:a0:50:79:52:fd:
         8f:14:f7:2d:c8:d1:df:d7:15:71:40:96:cd:93:26:47:a6:b6:
         4f:58:5b:ed:01:8a:4e:72:a8:57:1e:35:90:12:84:33:c1:2a:
         34:d3:f4:28:50:85:21:4a:2d:58:b4:61:ae:7b:5a:ad:a7:0b:
         53:78:79:2b:42:2e:5b:85:1f:c3:c8:16:4b:dc:df:9d:ed:a1:
         8f:c4:cc:fa:98:1e:3a:9e:c1:d8:e2:d6:34:30:e3:02:d0:9d:
         cf:f8:73:dd:65:fd:8e:75:7c:22:29:3f:3c:f9:8d:20:f2:b8:
         bc:d6:16:4e:6c:56:48:dc:b4:a4:58:4c:9f:d9:61:8b:63:e3:
         31:c9:16:51:f6:f4:d2:36:02:4a:81:1c:c1:a3:b4:29:85:6a:
         09:ab:cd:80:56:f4:9f:ea:70:dd:9a:a5:53:4f:ab:c6:a1:ca:
         8a:6b:c9:63:ec:ef:e3:32:2f:b5:c4:67:2f:5b:26:7c:08:c3:
         28:54:88:44:b5:91:68:cd:d3:2c:8b:77:0c:7c:b9:22:08:a6:
         bd:fb:3f:e3:eb:f6:03:c9:9f:bb:17:ca:05:1a:4c:8c:c4:64:
         fc:93:71:c8:2e:7f:ab:ca:69:af:5f:29:76:76:cb:19:3f:d8:
         ac:fb:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----