Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer
File:                     2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer (raw, json)
Hash identifier:          koyjVeDhnT8jHQDkoidudaqSZFCAmFZkgJ8UgATmvxI=
Subject key identifier:   3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9A47B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Feb 2021 19:04:05 +0000
Certificate not after:    Mon 15 Jan 2024 21:03:52 +0000
Subordinate resources:    AS: 264685
                          IP: 168.227.96.0/22
                          IP: 2803:340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14263419 (0xd9a47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 19:04:05 2021 GMT
            Not After : Jan 15 21:03:52 2024 GMT
        Subject: CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:cd:97:1c:93:a8:d4:b6:68:3e:7f:1e:6c:
                    17:a9:6f:e6:e4:58:40:29:2b:0a:a9:0c:3a:66:47:
                    29:25:91:26:be:00:66:da:62:b5:65:bd:d8:8f:a6:
                    66:7f:dd:29:54:9b:1b:b8:e7:9a:ec:0b:32:16:4b:
                    03:c6:5d:5b:fc:ff:3d:94:a1:9c:5d:30:fe:3e:21:
                    bc:e9:c8:20:aa:6f:89:98:c8:66:fc:49:74:8e:85:
                    17:73:19:d6:a4:bf:ed:87:da:cb:31:f8:e1:c3:31:
                    77:0e:4b:1e:de:de:41:f6:2f:f8:d0:02:bd:a4:85:
                    15:fd:0b:00:bf:ac:7a:72:ee:b8:4f:ef:67:ea:43:
                    ad:fe:63:cd:e9:cd:0f:3b:fd:2f:c0:80:9f:da:92:
                    3f:f1:55:d5:b0:b3:b9:4c:a4:d3:55:c5:a8:a9:09:
                    3d:f3:15:ea:2d:99:a0:d3:c3:8b:47:0b:a6:73:71:
                    f4:ae:22:1a:81:f8:88:6b:eb:ec:1f:2b:87:98:c5:
                    03:1e:69:f9:48:ef:08:71:22:a1:e8:6f:38:22:23:
                    c6:ea:47:eb:06:c2:87:91:4b:71:74:02:9e:81:83:
                    07:74:23:33:07:bc:9f:4e:67:43:46:98:05:6a:6d:
                    f1:5c:74:4c:70:56:a5:36:e2:05:87:52:ac:6d:f2:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/22
                IPv6:
                  2803:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264685

    Signature Algorithm: sha256WithRSAEncryption
         07:85:5f:f1:59:99:ea:8c:98:a1:24:11:56:78:94:dc:7f:c0:
         9a:9a:3a:a6:27:bd:ca:58:d4:bc:56:c8:ff:69:ff:9c:f5:a8:
         4b:e8:51:c7:75:65:4f:a7:28:c6:8e:68:ba:50:b0:48:a9:ac:
         cd:1f:91:90:7f:41:89:4e:fd:fa:0b:b2:a4:89:6c:62:c3:6f:
         5e:64:5b:3c:8e:ea:37:71:b1:ff:86:d5:3b:1b:a9:d2:85:44:
         3f:67:fb:c9:fb:ad:8e:15:44:82:ef:6e:7a:24:9c:f0:66:82:
         dc:b9:75:df:fe:cd:7f:f6:ae:80:28:9f:38:c1:d2:6c:e4:c4:
         c4:d5:69:d1:c6:51:c3:d7:e7:ab:f1:94:2e:02:66:e1:14:57:
         22:10:9d:70:86:c9:35:66:3b:a0:da:09:1f:93:b4:58:84:7e:
         f1:08:b6:ec:a4:cf:8f:36:d7:23:c4:ed:a1:f7:ce:a9:f6:e2:
         20:e7:13:99:61:b1:80:e6:a1:57:6a:aa:98:f9:b6:e5:9a:bd:
         6f:f7:76:ec:f3:6f:08:a1:23:08:e5:8a:67:cb:f9:ca:d2:7a:
         ea:a2:a3:67:60:a0:58:ae:14:a7:dc:5a:fd:9c:b0:3d:73:ec:
         28:1c:12:9d:b3:ca:22:a1:63:6f:d7:59:46:35:38:5b:ab:c2:
         2d:f0:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----