Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/286e94bbacb959d0de2a27539e8124836c0ca6f4.cer
File:                     286e94bbacb959d0de2a27539e8124836c0ca6f4.cer (raw, json)
Hash identifier:          OQ7k1h2jL7o3Lz1AgIm5NXuExFLl3JrRAS6uwPbE/SM=
Subject key identifier:   E3:FA:FE:2B:C5:2D:D3:95:6B:1B:C3:E4:3E:78:33:25:95:56:C7:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E57825
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/286e94bbacb959d0de2a27539e8124836c0ca6f4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Feb 2021 16:59:54 +0000
Certificate not after:    Tue 14 May 2024 18:21:44 +0000
Subordinate resources:    AS: 264736
                          IP: 170.233.92.0/22
                          IP: 2803:d740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15038501 (0xe57825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 16:59:54 2021 GMT
            Not After : May 14 18:21:44 2024 GMT
        Subject: CN=286e94bbacb959d0de2a27539e8124836c0ca6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:fa:f3:00:6d:ba:66:1e:a0:60:ce:59:7b:
                    48:df:79:2b:67:53:7f:11:f3:0c:65:ed:fe:f8:a4:
                    31:48:4b:78:30:5a:90:db:db:28:4e:a6:63:c5:e0:
                    e3:30:9a:59:e7:ec:68:d8:8c:cf:3a:2e:03:c7:48:
                    ab:09:c7:ce:0c:e2:cd:79:fa:6f:c2:58:32:7e:1a:
                    60:3c:d6:e2:18:16:3d:56:45:ca:5c:98:44:88:86:
                    fb:9a:3d:43:73:31:72:7c:64:35:12:ab:e9:44:de:
                    bb:7a:d5:f0:e9:7f:cc:d3:cc:ed:bd:f2:97:9a:2b:
                    e6:64:59:72:f8:66:8c:2c:b0:b9:18:a2:d4:95:f2:
                    49:54:7a:86:eb:49:14:40:a8:db:27:df:33:c1:30:
                    63:af:8d:71:cf:3b:43:cb:d8:0b:06:f1:7c:63:e8:
                    de:17:b7:6e:40:fb:a0:ad:c4:76:a7:af:43:9e:1c:
                    e6:ef:fd:91:13:fc:40:e4:fc:e0:a6:ac:b5:32:82:
                    3d:7b:dc:a9:a4:be:20:01:b3:cd:e7:9f:9b:f6:a3:
                    0a:8f:6a:67:71:0b:1b:73:0a:b7:2a:14:b9:9b:8b:
                    3a:5b:b4:a3:b9:94:d0:0c:4e:34:79:e1:d2:87:01:
                    9d:79:d7:66:89:a7:4e:8b:4f:2c:70:7b:f0:6f:61:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FA:FE:2B:C5:2D:D3:95:6B:1B:C3:E4:3E:78:33:25:95:56:C7:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/286e94bbacb959d0de2a27539e8124836c0ca6f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.92.0/22
                IPv6:
                  2803:d740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264736

    Signature Algorithm: sha256WithRSAEncryption
         35:16:d8:e8:46:f6:a6:6f:8c:a1:ab:cc:b6:b3:b4:26:7d:dc:
         3f:ec:05:bb:85:37:2c:5f:ed:ef:20:f0:4d:2d:10:06:8f:12:
         c8:61:bd:01:e8:6f:65:13:64:98:dd:56:ea:f3:93:fc:a8:f2:
         cb:f9:32:1e:c0:ed:58:a2:e4:57:c6:78:ee:7c:d8:7e:e6:55:
         20:2a:1a:06:75:5d:74:f9:6e:3b:bb:b7:c4:42:9b:57:e2:0b:
         fe:f6:a5:f9:cf:07:62:bf:81:1e:dc:ee:e0:bc:62:4e:52:51:
         c1:c9:01:99:14:df:05:2b:5a:60:f5:54:ed:50:34:0a:d7:87:
         9b:e3:d4:0b:a8:5d:24:bb:c9:6b:1b:1b:b2:9d:ef:9d:a2:16:
         ac:18:9e:b8:05:cc:67:89:20:2c:e6:be:ca:e9:51:93:f5:0e:
         16:f1:49:55:5d:cb:54:89:1b:27:6c:74:d8:50:55:5b:b0:75:
         d1:ec:f4:73:45:3e:38:2b:8b:a5:9b:d5:b5:7e:db:ae:a0:42:
         06:d6:01:5e:d5:ce:a9:a5:3e:4c:a1:38:9c:7f:31:bc:e2:bf:
         6d:07:79:3d:e2:32:30:99:3b:47:3c:4a:6b:14:88:38:49:0f:
         a4:68:74:7f:52:1f:ee:1e:0f:75:d2:8f:c2:65:84:6a:b4:96:
         f4:6b:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----