Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289859cc11d10ba9411ed4b13485469204a4b868.cer
File:                     289859cc11d10ba9411ed4b13485469204a4b868.cer (raw, json)
Hash identifier:          aOeCq9fZmRRKVXoaEk01RsOU4VIKyOw5gjfFqC9fZHs=
Subject key identifier:   E4:18:86:83:2A:FD:31:58:09:65:48:D6:88:76:49:93:35:5A:BF:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7BCCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/289859cc11d10ba9411ed4b13485469204a4b868.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 Mar 2021 23:33:11 +0000
Certificate not after:    Fri 22 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 27900
                          IP: 200.73.104.0/21
                          IP: 2803:1c10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14138571 (0xd7bccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 15 23:33:11 2021 GMT
            Not After : Dec 22 04:00:00 2023 GMT
        Subject: CN=289859cc11d10ba9411ed4b13485469204a4b868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:71:a2:2a:6f:6f:f7:92:52:61:ee:f8:24:
                    66:ca:54:eb:55:ae:3d:8a:e8:07:fc:9c:3f:b2:53:
                    37:d5:e5:f4:e4:02:f1:64:0b:10:aa:08:44:fa:8a:
                    d3:b9:09:5c:c6:e9:ee:78:a6:40:81:dd:ac:7d:e5:
                    ae:d5:03:5f:b6:64:8c:d3:e2:3e:0f:0d:e3:c7:d8:
                    a7:44:e4:65:cb:92:a8:60:79:9b:b4:54:b9:86:c9:
                    1d:cb:a4:2d:11:8c:5e:95:53:bd:de:d0:3c:2e:5e:
                    0c:9e:68:88:1e:28:78:e7:fd:ec:ae:8f:fa:55:26:
                    01:58:39:ff:59:59:2f:bd:ef:ec:c5:e7:2c:21:46:
                    12:7e:b2:42:f8:c8:53:74:0b:3e:0b:85:d6:45:41:
                    cc:6a:1e:64:f0:91:95:dc:16:c3:32:b9:f9:71:57:
                    cb:80:58:24:02:8e:1f:b1:17:da:c5:78:a8:df:c1:
                    be:21:ca:78:e4:32:07:c7:6f:12:0e:22:11:79:c6:
                    1d:38:41:1c:b6:3e:6b:22:d8:d8:89:2d:82:22:c6:
                    d3:30:81:e1:94:88:4d:5d:91:fe:36:9f:8c:0a:4c:
                    2a:83:ce:ef:86:23:90:cc:d6:a4:7d:9b:8b:2c:e2:
                    b1:08:07:8e:8e:61:97:80:1f:07:28:27:bf:c7:11:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:86:83:2A:FD:31:58:09:65:48:D6:88:76:49:93:35:5A:BF:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/289859cc11d10ba9411ed4b13485469204a4b868.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.104.0/21
                IPv6:
                  2803:1c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27900

    Signature Algorithm: sha256WithRSAEncryption
         3b:0f:98:8d:51:69:40:90:55:9e:b4:83:8d:b0:4f:c7:8f:4f:
         34:84:75:48:0c:6b:79:0e:1c:55:f7:39:97:d2:41:f1:77:a5:
         38:e9:91:fa:a9:6e:e2:d7:ff:2a:71:e1:1f:06:54:74:b4:62:
         86:d5:cb:e6:70:eb:8f:e4:eb:9d:a1:ea:3e:a7:ee:e3:8d:b1:
         f7:cf:28:96:49:b6:a0:8a:e5:f8:db:cd:ee:3e:d7:c0:1a:61:
         7e:fd:c5:49:4e:4c:25:28:d0:cb:a9:3d:78:94:32:a5:af:2a:
         4e:ca:3f:ef:18:ef:cd:b7:d3:9d:05:56:60:5d:12:91:5e:e5:
         03:74:6f:c0:04:ed:8d:a1:22:0f:47:66:2c:99:3b:e5:eb:b3:
         35:16:f9:35:fd:6d:3b:00:3f:a6:e3:10:fd:1a:6b:b9:b0:73:
         fa:14:25:c5:4c:8e:de:1f:b2:6b:d5:65:5b:12:94:c6:7a:f1:
         15:ee:cc:c5:0b:39:3c:89:b1:2f:56:a6:87:0e:24:1d:b6:36:
         fe:01:3d:d9:da:e7:16:a2:6f:5e:c1:f5:23:85:c9:09:21:45:
         d3:4a:fe:48:53:22:cb:18:d6:e2:df:60:d6:1b:fd:35:7b:c4:
         a7:b1:58:73:c7:7f:d9:a7:8e:ad:b5:61:aa:3a:28:f1:8a:fa:
         3b:e0:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----