Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer
File:                     5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer (raw, json)
Hash identifier:          O+QliiGSSRJgySPP44WACsrDly53YVFR2C/xQTCSncU=
Subject key identifier:   61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7D5BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Mar 2021 06:28:44 +0000
Certificate not after:    Fri 31 May 2024 16:32:43 +0000
Subordinate resources:    AS: 270076
                          IP: 138.186.76.0/22
                          IP: 2803:b3e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15193534 (0xe7d5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  5 06:28:44 2021 GMT
            Not After : May 31 16:32:43 2024 GMT
        Subject: CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:fa:52:6f:c1:ac:d1:4f:87:53:8f:13:de:
                    40:15:ff:88:76:97:2d:54:5f:05:87:95:ee:d0:93:
                    dc:c7:19:94:06:e1:f1:0c:08:0e:0e:5a:5b:19:0b:
                    51:45:2b:02:3c:e6:d6:16:5f:3e:56:36:aa:e2:30:
                    59:5c:aa:2e:7f:45:00:8f:e8:e3:87:b9:22:b9:f0:
                    ec:2e:5f:86:5e:8d:22:e5:79:ce:c7:e6:6a:44:8b:
                    c1:d0:9f:d6:90:79:29:68:9f:4e:c2:0d:7b:cc:d3:
                    80:43:39:a6:22:3a:d6:84:6c:5a:06:27:12:80:6f:
                    b7:48:17:08:36:03:57:80:ac:1b:64:b1:d2:71:79:
                    36:6c:68:05:c1:c7:06:29:ae:be:90:b7:dc:d5:9f:
                    bf:22:cc:61:6f:01:91:38:44:04:10:d1:e1:70:dd:
                    13:b8:0e:d9:50:3e:ef:1d:f5:a2:cf:5f:c0:70:d8:
                    2b:16:35:a0:5b:b2:7e:58:42:cf:23:c1:4d:46:9d:
                    bc:59:13:d4:a5:ec:9d:5f:51:ab:28:b2:ef:89:7f:
                    3d:79:e0:4d:44:59:1c:6e:42:41:06:d7:c3:15:d3:
                    c8:00:87:34:12:48:e2:58:ab:47:cf:82:f2:f5:0e:
                    eb:a1:cd:b1:a7:b5:a1:e4:62:d3:99:4e:fa:e7:cf:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.76.0/22
                IPv6:
                  2803:b3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270076

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:ad:cc:56:89:a6:13:25:bb:29:06:14:67:a8:7b:01:69:
         22:b8:18:f7:8c:75:20:78:2f:7b:89:0c:bd:4d:fa:d3:22:1a:
         dc:1f:01:b5:ed:d1:ed:45:af:19:a9:18:fa:68:69:f1:2b:42:
         36:df:66:e6:7a:1c:12:84:eb:b4:f2:f1:3a:64:d0:44:05:d6:
         b3:b5:f4:dd:05:fc:e7:68:9c:28:99:ed:a8:a4:29:31:00:24:
         ba:14:89:f6:d8:9a:9a:a9:1d:ef:d5:bb:89:b8:05:11:9a:90:
         57:71:d6:2c:1f:f1:57:f4:42:64:e3:58:67:e8:74:77:20:26:
         37:9f:d5:04:9f:22:1d:71:12:47:05:45:95:09:76:ea:97:3f:
         0c:f7:5c:1f:9c:40:d5:47:7c:88:ea:32:cf:0a:ad:44:3f:61:
         ab:6b:9f:a0:e2:6b:c5:16:83:32:60:25:df:e4:ba:88:02:ea:
         af:e5:a9:cd:1f:80:8b:79:7a:51:ed:e2:a5:2e:01:9b:36:a7:
         18:ab:16:92:a4:c0:ba:89:0d:f8:d4:58:d2:b1:18:50:03:fc:
         7c:d8:df:ef:68:62:94:8e:d0:d6:52:3c:1e:11:b2:14:b0:d1:
         c6:a2:aa:4d:fa:c9:a0:1e:e5:5b:c6:ca:0d:c5:11:31:53:47:
         e2:a0:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----