Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c5528b3d2ee9a091cb246cc46b890ef78d4c756.cer
File:                     3c5528b3d2ee9a091cb246cc46b890ef78d4c756.cer (raw, json)
Hash identifier:          OvTIzKJLBHw/lKG2ozk8wfWr/a8ywN/LBCb3S6cWh+Q=
Subject key identifier:   0D:F3:20:B3:D9:BE:36:F0:AD:E3:67:47:9C:BD:C1:CA:AA:EA:D5:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA7F8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fd8164d3-a8ab-452c-8542-426e6abd2cb6/3c5528b3d2ee9a091cb246cc46b890ef78d4c756.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fd8164d3-a8ab-452c-8542-426e6abd2cb6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Aug 2021 00:35:52 +0000
Certificate not after:    Fri 26 Jan 2024 14:31:58 +0000
Subordinate resources:    AS: 263748
                          IP: 200.14.36.0/24
                          IP: 201.131.107.0/24
                          IP: 2801:1a:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14319499 (0xda7f8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 27 00:35:52 2021 GMT
            Not After : Jan 26 14:31:58 2024 GMT
        Subject: CN=3c5528b3d2ee9a091cb246cc46b890ef78d4c756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f6:38:8c:4f:f4:2b:dd:db:33:1b:11:79:14:
                    f0:c8:14:3b:c1:f0:9c:74:51:f7:63:0a:4c:90:fe:
                    52:ab:63:2e:9c:85:12:cd:10:28:2b:4e:45:b7:d4:
                    6a:22:23:1a:34:e3:8d:62:cf:dd:6c:a3:cd:32:40:
                    d9:13:56:2f:68:ca:10:fd:7d:23:c2:46:e2:9a:b6:
                    cd:1a:73:5a:ff:7d:f5:d4:d4:60:1a:8e:c5:37:59:
                    0e:3b:71:d2:07:1c:66:1f:da:88:cd:76:92:b3:03:
                    9a:7a:52:45:bb:8d:5e:6c:2e:11:86:37:9a:e9:8b:
                    71:c5:e6:44:c0:c5:24:9f:73:f0:fc:cd:60:fb:e0:
                    ad:74:71:a5:61:62:6b:0a:e4:d7:da:48:07:bd:75:
                    0e:84:cc:dd:0b:65:66:ea:58:4e:f0:a8:87:ef:d7:
                    10:41:1c:55:96:5a:c0:95:ac:ea:c9:f5:29:a1:b9:
                    e5:52:cc:5d:22:9c:ed:09:a9:43:4b:8c:09:96:08:
                    77:14:ab:6e:7b:48:22:12:03:3b:c6:3f:fb:07:ff:
                    fd:df:16:70:36:a3:aa:d2:04:05:39:74:53:e3:99:
                    8d:c6:fe:df:68:a0:15:c4:10:bc:f3:ae:e6:a7:60:
                    05:ee:dd:b2:ed:ba:69:49:c7:b3:ad:91:46:bd:cf:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F3:20:B3:D9:BE:36:F0:AD:E3:67:47:9C:BD:C1:CA:AA:EA:D5:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fd8164d3-a8ab-452c-8542-426e6abd2cb6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fd8164d3-a8ab-452c-8542-426e6abd2cb6/3c5528b3d2ee9a091cb246cc46b890ef78d4c756.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.36.0/24
                  201.131.107.0/24
                IPv6:
                  2801:1a:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263748

    Signature Algorithm: sha256WithRSAEncryption
         09:38:22:98:3a:e0:8d:26:3f:08:51:4a:02:96:a1:60:1a:87:
         5d:45:54:85:12:93:be:f0:89:0f:61:24:7a:0a:83:1f:7f:55:
         b7:41:7a:64:b9:2e:bb:ff:fc:c4:40:e6:70:3d:47:c5:74:c7:
         b5:d8:0a:82:bf:58:4a:b7:7f:7d:18:c0:1a:57:7c:3b:28:11:
         4c:b4:d9:8a:64:fc:24:9d:62:b0:65:35:9d:b7:f4:be:d4:07:
         83:20:54:57:7c:07:b6:20:3d:89:c1:38:be:6b:bb:f4:82:e8:
         4b:fd:d7:e6:ac:cb:53:78:e9:0b:81:ff:72:3a:fd:71:f1:6f:
         8f:b2:bb:b7:d7:13:57:85:e1:06:dc:1b:d4:13:ca:73:7e:ee:
         dc:47:75:1e:8d:96:90:5f:a8:10:f8:86:09:ba:5a:65:bf:cf:
         75:ab:15:56:b6:56:95:23:b4:b3:c8:63:c6:2f:3f:de:6e:a7:
         51:c5:ce:8b:d2:97:20:79:14:48:2f:ba:9f:cd:7f:33:38:15:
         cf:94:5f:59:44:42:20:01:01:b1:c7:bf:11:85:28:af:71:28:
         a2:91:27:33:0c:c8:42:04:66:65:60:49:ad:3e:70:d6:81:16:
         c9:01:fc:a5:f3:6e:5a:fa:34:8e:76:dd:e6:6b:72:86:77:2a:
         f9:b2:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----