Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer
File:                     8fed3a03fcdc18750a4ae5c970d165b993a49009.cer (raw, json)
Hash identifier:          nyIIdILBUOXko+yYfjlFDuhQ9/tDHnOTsjtHlCCgp2g=
Subject key identifier:   7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C5C976
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/8fed3a03fcdc18750a4ae5c970d165b993a49009.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Apr 2021 14:19:17 +0000
Certificate not after:    Sat 02 Dec 2023 14:06:08 +0000
Subordinate resources:    AS: 271862
                          IP: 177.126.48.0/22
                          IP: 2803:1410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12962166 (0xc5c976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 15 14:19:17 2021 GMT
            Not After : Dec  2 14:06:08 2023 GMT
        Subject: CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:71:43:76:7d:43:c0:c2:65:36:ca:71:47:
                    31:47:fb:2c:bb:19:a7:7e:ca:3c:7a:b3:6f:84:ac:
                    8a:24:ff:fa:60:e9:db:5a:b9:b0:a1:2c:3e:c3:25:
                    ff:e9:95:16:8a:04:e0:a4:a5:48:cf:43:7a:85:34:
                    da:a2:56:e8:8a:f6:1d:f3:01:af:bd:d6:b6:77:e7:
                    7e:4a:c8:52:fe:ae:37:15:48:01:0b:25:1a:e0:a8:
                    87:f5:ae:29:5d:e6:32:f5:82:19:50:3d:33:f0:19:
                    23:8c:55:c9:45:1c:42:28:9c:07:5e:7a:44:be:39:
                    02:61:3b:e5:8b:72:b9:b3:e1:22:7c:2d:20:1e:e1:
                    25:5d:37:4d:b0:5c:af:e2:27:87:e2:a6:de:ff:23:
                    e6:00:09:60:cf:7e:9b:37:66:26:37:35:be:6c:9f:
                    eb:0f:31:06:32:f9:2c:20:fe:e3:14:ce:32:8b:2b:
                    ff:93:63:be:bc:33:42:71:3f:29:74:0f:3e:c3:4b:
                    19:70:34:d1:1e:a5:c1:a5:75:ce:35:4a:82:85:5d:
                    67:f8:0d:19:fa:c4:9e:b1:5a:fd:08:97:79:e3:4b:
                    64:8f:21:c7:0b:3d:d3:e9:a9:35:e5:86:89:41:8d:
                    9b:c8:96:ba:49:4c:ee:f1:2e:b0:eb:c9:e9:16:db:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/8fed3a03fcdc18750a4ae5c970d165b993a49009.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22
                IPv6:
                  2803:1410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271862

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:d1:3d:f4:a6:4c:85:25:dc:d4:29:c0:9c:6a:a4:26:64:
         57:61:63:d3:bc:d8:6c:05:4c:a6:e2:59:cd:6a:ae:40:0c:fb:
         c4:6d:73:a5:af:c9:62:99:09:97:b2:66:69:d4:50:68:62:7f:
         e4:95:7d:a7:b7:03:3c:65:77:89:7e:48:7d:0d:ca:9a:d7:a0:
         d5:ae:4c:80:66:da:71:8a:bf:be:15:4a:a7:8f:cd:d3:66:31:
         23:e0:98:41:0c:5e:9d:57:04:b9:e2:40:11:58:95:98:64:86:
         14:f9:95:0e:76:62:5b:15:08:49:5e:ed:8a:cf:78:74:b5:6f:
         84:6f:bb:d4:b8:40:df:9a:90:5d:aa:a6:a4:ab:f1:f3:00:3a:
         0a:24:3a:24:a2:76:db:9f:92:61:21:27:d9:4b:a0:c3:8a:bb:
         50:62:96:c4:87:f8:7f:d0:0f:5c:43:d0:14:93:cd:54:0e:e0:
         d1:ea:51:af:0b:f0:ac:49:ff:c2:ca:7b:42:4a:eb:43:04:35:
         f2:f5:4d:fb:7e:ab:42:66:f7:47:f3:4c:c3:8b:d7:37:ec:7e:
         e3:c1:b5:65:6c:ae:ea:af:31:7c:93:9b:27:28:29:7a:16:d1:
         df:5e:0f:c9:a7:b3:16:b3:3b:1e:a7:32:9d:81:24:e1:2f:3d:
         7b:ec:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----