Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b9774af5c616408dde6b7db17888523d3cf8fe.cer
File:                     32b9774af5c616408dde6b7db17888523d3cf8fe.cer (raw, json)
Hash identifier:          +MWzFCTvKzHaD4GQRB+2peD9j11HhkAoM1NRC2gP+XM=
Subject key identifier:   38:CF:3D:DC:66:87:CC:0E:46:68:FB:64:92:2E:FA:7C:06:D0:4C:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC33F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c0c5d5a-8d45-49f2-9c26-5b1d34ac60f6/32b9774af5c616408dde6b7db17888523d3cf8fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c0c5d5a-8d45-49f2-9c26-5b1d34ac60f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 May 2021 13:33:18 +0000
Certificate not after:    Fri 16 Feb 2024 16:40:41 +0000
Subordinate resources:    AS: 271902
                          IP: 190.113.62.0/24
                          IP: 2801:11:e800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14431225 (0xdc33f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  6 13:33:18 2021 GMT
            Not After : Feb 16 16:40:41 2024 GMT
        Subject: CN=32b9774af5c616408dde6b7db17888523d3cf8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:56:34:45:8b:1f:63:44:7d:1a:34:11:99:45:
                    a9:fa:40:17:45:2b:37:16:69:ae:58:c4:4e:54:d7:
                    2f:c2:c8:ec:c3:6a:64:12:b8:b8:b0:1a:cf:a7:f9:
                    33:97:de:13:b7:f9:40:1f:75:a2:a2:46:f1:81:17:
                    92:d2:86:18:92:26:01:1b:75:06:4a:58:55:95:58:
                    61:f5:1c:99:41:f5:02:21:f4:e9:d0:83:c2:f9:2b:
                    10:dc:fd:21:ca:77:4a:b9:bc:3a:d5:2b:8c:fb:ff:
                    ba:28:dd:ec:fd:57:9a:d7:f2:58:cd:4f:f5:a3:35:
                    49:07:a9:92:e5:a2:36:fe:93:5d:ad:08:89:a1:cd:
                    34:8d:e1:90:8f:7f:f4:e9:c5:63:cd:83:f3:0e:82:
                    0c:66:8a:e4:aa:a7:55:6f:c3:aa:78:dc:7c:ab:4c:
                    52:bc:88:12:fa:3e:b6:91:a4:c5:c1:5d:08:e3:c6:
                    cb:36:b2:7f:8a:54:1d:7b:d9:84:c7:51:1c:ea:59:
                    89:1e:d3:8d:9a:e9:50:d3:e8:e1:cf:92:ab:ec:7d:
                    da:1a:b9:8f:fb:0c:03:c9:1f:37:42:06:6f:68:fc:
                    0e:47:70:f5:e6:39:35:94:53:88:b2:93:21:0e:ea:
                    72:87:c7:b7:d8:ca:aa:56:ac:a8:69:cf:49:69:c3:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CF:3D:DC:66:87:CC:0E:46:68:FB:64:92:2E:FA:7C:06:D0:4C:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c0c5d5a-8d45-49f2-9c26-5b1d34ac60f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c0c5d5a-8d45-49f2-9c26-5b1d34ac60f6/32b9774af5c616408dde6b7db17888523d3cf8fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.62.0/24
                IPv6:
                  2801:11:e800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271902

    Signature Algorithm: sha256WithRSAEncryption
         63:98:d9:f3:73:b2:2f:74:0c:ab:d9:4b:ba:f6:a0:21:14:93:
         fe:b0:a7:f6:49:96:9d:34:4b:b6:12:91:df:98:37:dc:35:e4:
         f0:90:d9:58:c0:d1:eb:46:34:ee:25:e6:20:09:f0:ef:c2:2e:
         53:2d:0d:15:6f:1f:ee:96:38:71:58:d1:2d:db:1e:0b:1d:2e:
         58:16:d1:59:75:8f:f4:1d:d3:9d:bf:f9:c3:ce:98:78:9d:7f:
         54:41:da:42:f8:76:1c:63:b9:c6:44:09:0c:48:c8:91:2a:fc:
         6c:e8:e2:0d:11:6b:12:8b:de:9b:4f:c0:2a:51:67:87:ef:4a:
         f1:68:0b:a4:d1:5c:4c:17:a6:52:8f:a3:cb:73:f0:2c:47:ed:
         57:95:8f:74:3c:d6:19:14:e5:19:e7:d7:ad:6d:d5:d7:c5:03:
         0e:c8:75:97:cf:eb:9a:2e:5e:1d:e1:83:c5:e5:6e:d5:c4:2a:
         88:8a:e3:04:32:5f:3f:ba:b1:7a:36:b2:66:87:83:75:b0:95:
         2e:21:b8:ce:cd:25:3e:8a:20:6c:86:52:99:81:61:09:ff:70:
         2b:6e:12:40:54:92:8a:24:30:16:d0:c4:5f:53:f6:13:68:56:
         dc:8a:4a:1c:cf:18:07:35:9c:d1:56:0a:f8:e2:e7:d7:d8:c4:
         04:e3:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----