Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
File:                     2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer (raw, json)
Hash identifier:          oGI9QL2NnnqEMImD9nDj65kRS3fzKAaSf59neNtKjao=
Subject key identifier:   BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDAEFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Feb 2021 20:05:35 +0000
Certificate not after:    Tue 05 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 263227
                          IP: 200.112.192.0/20
                          IP: 2803:e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14528253 (0xddaefd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  2 20:05:35 2021 GMT
            Not After : Mar  5 06:00:00 2024 GMT
        Subject: CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:8c:59:e3:10:f3:a1:f2:f5:61:ce:ae:68:
                    6a:3e:e3:25:3d:cb:e0:35:82:84:cf:eb:5d:af:d4:
                    75:2f:a2:44:93:cf:52:ff:dc:c8:f6:60:5e:5a:c2:
                    3c:47:c7:c0:48:ee:4a:dc:96:34:6e:ad:de:ec:94:
                    db:66:6c:a7:0a:2f:09:01:62:76:bf:a1:99:6e:c9:
                    94:7a:7b:04:8e:26:a8:f4:1e:6d:b0:57:94:38:0a:
                    17:14:39:8b:71:5e:a4:72:66:07:9f:3d:75:7a:78:
                    eb:73:a7:9b:51:94:9c:e6:57:7d:db:23:0c:51:9f:
                    7e:79:b1:d7:bc:f7:d6:a0:41:4a:7c:0a:4e:cb:c1:
                    c9:9b:ef:39:b8:e0:61:9f:91:5b:12:83:20:83:de:
                    f1:d3:39:f6:6c:f9:b1:e1:df:e0:f8:62:0a:d2:2a:
                    22:bb:4d:56:b7:63:31:0a:e5:03:ff:f8:35:d4:bd:
                    ed:6d:fb:32:10:51:36:b3:2e:97:11:fe:8b:8f:01:
                    d1:d3:df:42:92:06:44:df:e8:e7:af:22:b1:50:70:
                    ab:e1:a5:a9:4c:0f:46:85:37:2c:3e:d3:c5:86:3e:
                    0c:76:8c:64:63:82:50:20:17:71:5e:e2:e7:c9:06:
                    9e:2a:fa:14:f8:25:69:f1:c1:0d:72:ab:5f:ae:e5:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.192.0/20
                IPv6:
                  2803:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263227

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:21:f2:0f:a8:13:25:1c:e0:46:67:e2:36:1c:bb:12:58:
         61:94:5c:75:62:0c:1f:70:62:4f:ae:01:eb:09:fe:af:e7:50:
         a3:cd:a7:01:77:79:bc:46:6f:72:1b:66:c8:8f:ec:4b:ab:ac:
         cf:92:a6:48:b0:67:18:00:a3:10:fd:34:82:66:79:6a:5d:43:
         12:09:5c:45:88:8a:1f:05:ca:4e:3d:f1:1d:5d:e7:ed:48:f8:
         7c:4b:6f:6b:f0:da:3e:22:33:f9:8b:7a:c8:b2:55:b9:38:4f:
         21:85:28:d0:08:5c:79:a7:32:c3:44:eb:ad:1b:cb:a9:13:06:
         21:7e:b4:aa:50:65:c7:19:e3:90:97:ee:95:20:7c:b6:90:b6:
         ac:d1:9f:47:cd:07:09:4a:d8:d8:36:c6:96:74:0b:65:42:4d:
         aa:9c:38:c7:5e:e4:62:fc:3a:36:b1:22:ca:aa:2e:de:d4:32:
         d6:f8:45:8c:90:5a:7c:e9:1d:db:1b:65:79:e8:b8:6e:d8:c5:
         64:5e:85:42:3d:8d:16:4a:e5:ed:50:84:99:1f:9f:01:31:ca:
         e4:8d:fa:1c:75:49:6f:d5:2e:5f:8c:15:16:78:b9:b6:8d:9c:
         18:11:57:9c:39:cd:91:f3:3d:52:4f:11:6d:c1:e6:b2:74:30:
         9c:70:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----