Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
File:                     8977e71e589f7dff93910384f64766de5bd105bb.cer (raw, json)
Hash identifier:          Vnzbi99aHC/xCtbYX5dAAb+F/ZJ5oOvBnwnu2JHSBdQ=
Subject key identifier:   1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D31B55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 28 Feb 2021 16:27:12 +0000
Certificate not after:    Wed 17 Jan 2024 16:47:12 +0000
Subordinate resources:    AS: 262929
                          IP: 191.102.60.0/22
                          IP: 2803:9a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13835093 (0xd31b55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 16:27:12 2021 GMT
            Not After : Jan 17 16:47:12 2024 GMT
        Subject: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e7:f9:be:c6:c6:87:a9:5e:99:05:d0:4d:01:
                    88:fb:a6:9f:02:a1:b9:85:b9:28:75:f1:f3:fc:ed:
                    51:40:ea:d6:d2:7e:2b:df:a5:b8:83:98:50:08:b3:
                    93:14:e4:bf:91:96:e2:78:5b:fd:b3:92:49:a6:79:
                    d3:40:a1:66:14:a8:61:8c:fc:1a:13:1b:1b:e4:65:
                    ab:d8:00:e4:8a:eb:18:f4:ef:b6:af:0e:9e:d1:8f:
                    55:86:76:e5:b0:e7:0f:e3:e2:34:02:3d:07:d7:7b:
                    b1:27:a5:47:62:36:32:7b:dc:2d:01:95:4b:cd:43:
                    08:e6:85:18:52:3a:ca:97:74:a1:81:6f:6b:5f:4e:
                    16:c6:a5:d6:1e:b4:90:1a:5c:ef:33:7b:86:a1:bf:
                    6a:0f:3c:e3:39:51:4a:e4:e2:96:7d:2e:58:07:4f:
                    bd:50:99:ac:73:a2:3f:aa:0b:7f:37:09:26:f4:9f:
                    e9:be:5c:90:29:e1:21:06:bb:e6:06:f4:b6:76:1c:
                    72:e5:ba:af:02:70:66:4e:4d:5f:3f:e6:5c:02:e4:
                    f5:76:65:33:6a:93:0f:f6:97:69:58:2b:ae:2b:5c:
                    e8:d5:01:b6:0f:a8:3e:b2:d0:a3:4f:28:d7:c8:ef:
                    95:99:03:77:b9:73:13:8e:4e:48:6b:c0:6f:7d:37:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.60.0/22
                IPv6:
                  2803:9a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262929

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:32:8b:c1:49:14:72:b4:b0:f9:07:bc:58:32:b5:a5:5f:
         6a:86:56:f2:98:b6:5f:80:57:5c:7e:31:15:c1:4a:9c:c8:9e:
         8b:66:7d:fb:99:b8:65:df:6f:51:6e:33:ed:4a:42:8a:32:b6:
         8b:38:74:8e:53:0d:35:c6:24:28:57:cf:0f:48:9e:dd:50:77:
         21:6a:65:03:c0:03:38:85:86:fc:6b:29:19:02:d8:eb:e4:96:
         2f:d9:f8:f8:78:77:e5:e6:82:c7:4b:09:16:eb:7f:f3:04:dc:
         62:09:53:ae:d8:1b:0d:3f:8c:f0:db:c5:47:63:02:77:d4:2e:
         9b:7e:1c:98:18:2b:08:72:45:41:2b:ea:ae:ba:04:58:53:04:
         e7:58:5c:14:25:74:f4:1f:d5:9a:f3:b3:e1:24:ca:03:72:ae:
         c9:70:bf:06:fd:0b:70:5f:d9:cc:38:47:5f:0c:42:68:cc:d4:
         62:bf:52:c1:fd:b5:40:17:c8:f0:9e:0e:e2:e2:f0:85:c9:b0:
         ea:a4:e6:7c:2a:70:bb:90:20:ce:83:a9:c6:c0:5e:63:b5:b6:
         bd:9b:f9:45:bb:95:62:57:8a:3a:80:87:b2:e0:88:a4:f0:b6:
         8c:9b:2a:71:81:9b:9c:e3:53:98:e6:f3:d5:bd:d1:16:3f:73:
         03:c8:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----