Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/664b556b2476504fc3632f03883c37447d34bf39.cer
File:                     664b556b2476504fc3632f03883c37447d34bf39.cer (raw, json)
Hash identifier:          m5FuX7EAlM+8qd4zCFGHWX0qEJTASuuC2dxYi40FG8g=
Subject key identifier:   5B:08:A7:2D:9D:2A:98:87:3F:F2:59:96:A0:70:0E:36:C1:E4:6D:41
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDE975
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/664b556b2476504fc3632f03883c37447d34bf39.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 May 2021 20:50:35 +0000
Certificate not after:    Wed 17 Jul 2024 16:02:54 +0000
Subordinate resources:    AS: 271801
                          IP: 45.68.0.0/22
                          IP: 2801:11:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15591797 (0xede975)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 20:50:35 2021 GMT
            Not After : Jul 17 16:02:54 2024 GMT
        Subject: CN=664b556b2476504fc3632f03883c37447d34bf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4f:07:6a:ff:0c:25:b1:96:e4:fe:5d:fc:43:
                    0e:a1:57:b8:2d:dd:e4:7a:54:21:e9:56:78:5c:45:
                    4a:f8:93:e3:6d:07:b7:01:5a:42:53:7e:c0:a1:1a:
                    0e:bd:d2:5b:97:45:80:26:1c:6d:92:5e:47:9f:fd:
                    dd:56:f4:16:f5:dc:03:3c:51:ae:c9:75:1c:f4:19:
                    b4:c5:37:cd:b6:26:cc:ad:c8:2f:6b:da:e3:93:87:
                    8a:87:6e:b4:af:b5:89:7f:27:55:98:e4:34:f7:82:
                    f5:7a:e3:40:47:4e:77:41:42:34:00:1f:fd:8c:d4:
                    aa:b0:5c:db:a1:b8:2c:63:c6:06:06:42:ed:2e:e3:
                    8d:78:e6:e0:ab:36:49:e8:1d:06:bf:f2:b9:d3:25:
                    6f:f5:0e:02:d2:55:5a:22:f1:e7:ca:be:e1:e4:b5:
                    09:93:4d:5f:2a:12:80:cd:b9:c9:cc:70:38:8c:56:
                    6c:3b:0e:18:dd:5e:30:e6:05:0b:d8:90:fd:2e:ef:
                    90:3f:2c:8e:07:35:df:11:a9:7d:3b:67:1d:dd:9c:
                    b3:4a:c6:a4:7a:5a:61:75:cc:6b:d2:e6:8b:35:40:
                    a2:e0:45:35:71:ee:56:10:19:08:c4:50:7a:e9:32:
                    8e:47:4e:63:d9:77:6a:6f:4a:ab:27:d3:71:29:02:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:08:A7:2D:9D:2A:98:87:3F:F2:59:96:A0:70:0E:36:C1:E4:6D:41
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/664b556b2476504fc3632f03883c37447d34bf39.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.0.0/22
                IPv6:
                  2801:11:a800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271801

    Signature Algorithm: sha256WithRSAEncryption
         33:ae:a4:09:9b:24:ae:8b:67:9a:f3:d9:f3:8a:ad:76:67:aa:
         1a:cc:77:16:da:77:3e:1c:f4:a0:40:e8:70:2a:27:6e:fe:2a:
         2f:75:ec:c8:86:d6:c2:5c:59:a1:c5:f1:c9:64:d6:9c:2d:6f:
         8b:32:a7:85:3f:27:3f:96:3e:5d:63:16:d0:9c:bf:06:79:72:
         b5:28:a6:ba:0e:81:06:3b:a2:8a:7b:56:10:3d:09:a0:a3:7e:
         80:37:05:d3:2b:b5:2c:78:3a:f9:53:46:16:4a:28:79:8e:d4:
         47:86:e2:c9:e8:49:4d:cb:c7:c8:e6:d8:0b:cb:c2:db:07:b6:
         30:a9:d0:17:1b:80:01:11:c1:3c:07:e9:ca:7d:4d:d6:1d:fa:
         9a:20:f9:2f:d3:6b:5f:7f:23:2f:cd:de:70:39:ed:cb:90:8a:
         28:29:d0:89:27:7a:d9:0a:03:e5:ac:88:75:a6:de:af:37:94:
         3c:8e:3e:c2:6f:ea:ba:dd:f5:5b:82:4b:bf:53:c2:4c:23:e1:
         d9:93:c7:12:ce:ed:99:f4:4a:6f:ce:2c:b2:3f:80:76:e4:3b:
         70:56:14:4e:d5:c1:56:09:80:70:d0:e7:7f:8d:1b:9f:e4:2c:
         c6:1b:bd:d5:53:0e:7b:c8:43:b9:e5:96:be:5a:2c:e9:11:8d:
         64:07:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----