Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d0c81ffcb2c33196530a7adeea74bd988502b6c.cer
File:                     3d0c81ffcb2c33196530a7adeea74bd988502b6c.cer (raw, json)
Hash identifier:          6X27W9wDGJWBCv7tw0lkdGP+SQkRJFRX/Jd8U21OOiI=
Subject key identifier:   F6:71:79:4E:D7:DC:03:D4:43:3A:D6:DE:32:8B:5E:A9:DB:77:E6:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8C320
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/3d0c81ffcb2c33196530a7adeea74bd988502b6c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Sep 2021 14:59:33 +0000
Certificate not after:    Wed 03 Jan 2024 13:56:22 +0000
Subordinate resources:    AS: 269962
                          IP: 190.111.160.0/22
                          IP: 2803:a6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14205728 (0xd8c320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  9 14:59:33 2021 GMT
            Not After : Jan  3 13:56:22 2024 GMT
        Subject: CN=3d0c81ffcb2c33196530a7adeea74bd988502b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:c3:c7:08:49:3a:b4:50:d3:fb:72:23:99:
                    99:6a:5b:12:24:e9:32:d7:1f:90:32:8d:6a:72:30:
                    38:53:61:4d:5a:42:2e:41:42:e4:60:b3:55:aa:62:
                    3a:8d:36:4f:7d:a3:0f:74:de:bd:33:ae:5a:82:3a:
                    54:1d:b1:68:7e:62:f8:f1:cd:35:f7:8b:98:77:b7:
                    6f:33:65:d4:de:f9:54:f3:f8:e6:44:69:1a:f6:78:
                    c3:b5:87:3d:e9:8a:c9:21:cc:f0:7a:8a:04:6c:aa:
                    0e:0e:1f:e7:20:a8:ba:36:f4:59:70:23:df:54:27:
                    7a:5f:ed:19:42:2e:a6:38:b1:65:06:1c:e1:8b:c3:
                    5c:8b:ee:e6:9c:26:6b:26:63:a6:73:d0:a1:a9:75:
                    a7:b7:0f:ae:32:09:50:a8:14:e3:c4:b4:5a:94:9f:
                    de:d2:7a:0b:6c:c6:98:fc:eb:0d:01:4f:d9:80:0e:
                    e5:7f:ba:ff:8a:bc:20:33:e0:84:bd:f5:6f:84:ee:
                    c2:9f:7d:08:39:bb:34:93:42:4e:b2:ed:7d:68:1f:
                    de:52:02:4a:34:1d:69:f1:32:bd:51:97:75:4c:8d:
                    a5:18:55:34:c8:27:8f:b9:e4:7d:bc:92:f0:d9:d4:
                    23:47:c8:f1:9e:86:81:8f:d8:39:22:42:9f:c4:a6:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:71:79:4E:D7:DC:03:D4:43:3A:D6:DE:32:8B:5E:A9:DB:77:E6:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/3d0c81ffcb2c33196530a7adeea74bd988502b6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.160.0/22
                IPv6:
                  2803:a6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269962

    Signature Algorithm: sha256WithRSAEncryption
         79:99:a2:39:03:f0:32:07:02:c3:86:3c:74:02:f5:a2:35:7e:
         7d:6c:d0:92:72:d1:c2:c7:56:c3:5c:ca:bf:7e:18:30:75:df:
         30:e4:3e:1c:7a:d0:a1:e6:53:f9:e9:ac:37:b4:12:e5:87:e5:
         ff:c6:c3:fb:37:65:b4:06:1b:43:b9:87:ee:73:6d:9e:9b:e6:
         0a:2b:ad:d8:96:b7:8c:d7:bb:ee:94:a7:20:d7:c8:a7:b9:c1:
         11:2d:a7:a2:6a:44:df:c3:5a:24:ac:42:47:6e:10:4e:54:41:
         e7:54:08:7a:19:a3:b1:19:b2:e1:5c:aa:f1:e9:17:2e:f0:f2:
         1a:22:87:77:cc:98:63:9b:3c:d2:e8:20:aa:27:86:1b:26:be:
         27:e8:ab:3d:d3:e7:63:36:58:0d:2a:b9:ba:3a:c9:6c:72:0e:
         b7:74:16:a4:f9:db:67:ca:23:5d:9e:59:fc:08:3d:3e:af:3f:
         01:64:c9:75:37:b8:4e:3d:cb:8f:6c:b9:ed:31:18:93:72:93:
         30:b8:29:21:fd:48:a6:03:82:80:ba:9e:aa:39:2f:76:24:e9:
         f2:c2:99:ac:81:9d:3a:86:7f:20:50:81:36:bd:59:da:cf:49:
         aa:df:85:bc:00:34:b7:3e:3a:ff:fe:fd:37:61:27:12:a0:b0:
         a4:c7:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----