Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677db86dc5cabd969eaef4cdc324bf546bf6044b.cer
File:                     677db86dc5cabd969eaef4cdc324bf546bf6044b.cer (raw, json)
Hash identifier:          agmssAcH5Fz9nc99XNBfb/i9bmsI5pUwz1r81p/xKX4=
Subject key identifier:   B4:74:AE:59:44:F0:FB:14:5E:80:E1:2C:37:D2:E6:07:15:60:A5:F0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBEA2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/677db86dc5cabd969eaef4cdc324bf546bf6044b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 Oct 2021 22:32:04 +0000
Certificate not after:    Mon 04 Nov 2024 18:27:13 +0000
Subordinate resources:    AS: 266693
                          IP: 45.229.60.0/22
                          IP: 2803:b520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16509486 (0xfbea2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 26 22:32:04 2021 GMT
            Not After : Nov  4 18:27:13 2024 GMT
        Subject: CN=677db86dc5cabd969eaef4cdc324bf546bf6044b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:2d:d8:36:2a:56:a3:4a:3d:91:dc:ea:a9:
                    ff:a1:b4:02:da:50:c1:f1:07:7b:99:18:97:52:3e:
                    ce:06:d3:00:b8:55:0b:0f:e6:7d:d6:f3:46:1f:8a:
                    dd:8d:20:92:61:67:b1:1b:9c:0b:a3:dc:7e:0b:90:
                    ab:57:63:10:1a:dd:22:8e:f3:ce:b9:74:d3:70:6c:
                    79:59:c6:c0:81:a8:27:69:4f:6a:32:30:0d:45:01:
                    61:f9:ef:db:65:39:e1:27:ab:c2:4c:da:8c:51:40:
                    92:39:58:01:5d:79:b8:a8:7d:99:38:32:3c:f1:58:
                    4d:07:5a:55:63:92:e2:2b:60:f3:66:db:7d:de:5a:
                    6c:9e:c0:10:46:57:c2:b9:f3:fb:c3:bf:35:80:31:
                    12:a9:19:f8:a9:d9:ef:b0:e4:43:a4:ab:11:71:9d:
                    25:ae:fd:bb:49:15:38:c7:e5:53:d5:67:26:6b:92:
                    19:19:36:e7:31:55:27:59:04:81:8b:d7:b2:1f:3a:
                    47:c9:d2:a0:00:ef:3c:58:0d:d9:9e:f4:8f:ad:eb:
                    3b:0a:d8:c7:77:9f:05:ee:fb:21:3d:c4:ab:2a:69:
                    7d:97:f6:93:83:76:48:bc:69:79:8b:88:f0:bd:23:
                    1f:2f:f8:95:ed:25:54:0d:5b:63:3b:fc:51:60:8a:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:74:AE:59:44:F0:FB:14:5E:80:E1:2C:37:D2:E6:07:15:60:A5:F0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/677db86dc5cabd969eaef4cdc324bf546bf6044b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.60.0/22
                IPv6:
                  2803:b520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266693

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:0d:0c:35:cd:6b:cd:de:67:b1:b2:e8:e2:29:e5:ae:5d:
         37:96:47:c8:79:7d:44:4f:63:8a:9a:5e:ce:1f:8c:ed:5d:4e:
         87:16:7f:d4:5f:38:e1:d8:40:ba:c3:b4:f3:22:fa:e9:f2:c9:
         42:1e:db:7e:ef:8b:5a:8c:79:eb:35:a5:1d:bc:ad:b4:f1:73:
         7b:8a:44:cd:93:bd:6b:cc:66:29:23:9b:4f:3a:eb:89:67:5f:
         6c:51:11:95:c0:be:a0:86:41:ea:52:27:4b:02:91:58:2f:76:
         bf:e5:4c:3c:00:6c:b9:8d:aa:17:41:1c:a6:8a:2c:37:c1:c5:
         9c:cc:ab:ef:3b:26:4f:d5:be:36:b0:9a:23:85:5a:29:b6:45:
         2c:7f:57:e6:af:9f:65:22:04:a6:69:a3:4c:e2:63:16:07:3e:
         8b:48:62:fe:d7:cf:68:73:d1:1b:db:e8:da:d6:47:09:b1:f3:
         10:c2:b3:4b:c2:3e:7a:4a:8b:d1:10:e4:b2:19:d6:6e:e3:71:
         a4:5d:09:57:f0:91:38:57:5f:73:03:82:b4:3b:ad:eb:b7:02:
         09:3c:5f:3d:a1:e9:f7:8f:92:d0:05:d1:76:db:8c:97:e4:ac:
         3d:d4:ff:34:9b:d9:e8:ba:41:da:e9:0f:30:d4:f4:02:20:f7:
         27:53:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----