Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/537307c075d8d19969e93b7703e676d8aa7741e1.cer
File:                     537307c075d8d19969e93b7703e676d8aa7741e1.cer (raw, json)
Hash identifier:          tsLHp3DEAqCy2w/WiaiGBD3Dlnb9rKjRKxFevzyZKF0=
Subject key identifier:   03:6A:1E:0A:77:6D:CD:4E:EE:71:5B:ED:40:EC:36:83:D9:91:7A:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F43EC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ea971ad2-1bd8-42de-9ce9-f331ef1a4ce1/537307c075d8d19969e93b7703e676d8aa7741e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ea971ad2-1bd8-42de-9ce9-f331ef1a4ce1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jul 2021 15:20:53 +0000
Certificate not after:    Sat 07 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 27795
                          IP: 200.1.200.0/21
                          IP: 2803:5a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16006852 (0xf43ec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 27 15:20:53 2021 GMT
            Not After : Sep  7 15:00:00 2024 GMT
        Subject: CN=537307c075d8d19969e93b7703e676d8aa7741e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:7a:f5:99:6f:6b:96:ef:20:fa:f0:93:c7:
                    02:e8:e1:fa:1e:05:47:f7:d0:4d:50:5b:7a:7c:03:
                    01:5e:cf:4b:0a:0a:5e:c6:0e:cc:53:0a:fb:29:4f:
                    16:bc:f5:d3:37:63:c3:d1:28:46:3f:f6:a9:03:4c:
                    a0:64:34:ce:2f:cb:88:a7:da:22:35:f9:4f:71:46:
                    d2:5f:ae:3f:17:22:fe:4c:d5:ce:b4:13:56:be:86:
                    4b:a5:b0:1a:d0:9d:f5:4a:d0:87:c8:07:1e:1c:f0:
                    e6:49:6c:d1:f4:99:19:58:99:68:a9:af:6d:e9:7f:
                    0c:61:46:00:97:2c:e5:46:9d:09:b0:b5:44:e7:8f:
                    e9:c2:e3:74:68:82:a3:0d:09:e8:89:58:a4:c5:67:
                    84:09:b8:03:e5:d6:62:18:87:de:14:fd:43:a2:69:
                    ae:89:57:4b:6e:fb:3d:1c:59:eb:b9:d8:1a:39:6b:
                    4d:d1:9f:e1:04:c8:e8:fd:ac:54:ea:ab:c6:7e:2f:
                    2e:97:60:65:fe:05:4e:9e:e0:1c:c0:ab:aa:d1:33:
                    85:3f:37:60:7e:f8:a2:40:0f:33:de:72:d5:77:23:
                    a4:9c:f8:66:db:5f:bd:42:40:52:f8:73:2f:7f:d4:
                    33:83:79:23:3c:40:b3:e7:6b:04:c1:b9:6b:1b:04:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6A:1E:0A:77:6D:CD:4E:EE:71:5B:ED:40:EC:36:83:D9:91:7A:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ea971ad2-1bd8-42de-9ce9-f331ef1a4ce1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ea971ad2-1bd8-42de-9ce9-f331ef1a4ce1/537307c075d8d19969e93b7703e676d8aa7741e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.200.0/21
                IPv6:
                  2803:5a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27795

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:4b:78:1d:ac:4e:e0:b9:85:7a:2c:2b:39:bb:55:9c:e8:
         93:f9:12:c5:a1:bd:f7:57:f1:85:4a:c8:34:d4:d9:d7:cb:76:
         9c:83:c7:2e:52:47:7f:01:e7:12:1f:60:2a:45:a5:33:b0:37:
         ac:78:41:5d:ef:bc:12:97:70:71:6e:78:1b:e4:7b:30:6c:95:
         c5:43:8c:46:7f:9b:c7:a6:05:06:54:d1:92:d6:4c:bc:7e:33:
         94:80:f6:d3:f7:e5:ba:f3:ba:70:2e:32:4b:d0:e8:0b:27:7f:
         01:6d:5a:77:b5:54:75:6a:b4:4b:ad:9c:1b:03:55:10:90:7e:
         1f:9f:4f:35:b5:a6:c4:a5:86:d3:5a:be:71:8e:b4:3f:88:cc:
         e8:a3:47:a5:e9:6e:77:14:8b:3e:5b:4f:51:29:fb:54:de:32:
         2e:88:f6:9b:3f:e4:20:2e:53:06:cc:c1:fa:a1:aa:7f:c7:02:
         c9:0c:02:63:d8:8f:4b:ee:fd:5a:51:fa:58:0b:83:f5:6c:12:
         ac:14:a2:25:d9:76:27:32:db:f6:ce:32:61:59:f9:f0:ee:b9:
         e8:9f:67:a2:d8:14:e5:47:1b:33:97:f8:ee:aa:ef:f7:59:33:
         e7:0e:d0:97:8b:12:8d:a0:5b:14:7a:9f:b7:97:93:8b:98:79:
         84:19:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----