Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer
File:                     950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer (raw, json)
Hash identifier:          c6T94Vb7I9Zx23gECAaK4SF2hh+z6GbozF7K8G/lJrg=
Subject key identifier:   83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01069F35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 15 May 2021 19:28:57 +0000
Certificate not after:    Thu 30 Oct 2025 19:46:40 +0000
Subordinate resources:    AS: 264658
                          IP: 167.250.212.0/22
                          IP: 170.83.236.0/22
                          IP: 170.231.248.0/22
                          IP: 2803:4540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17211189 (0x1069f35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 19:28:57 2021 GMT
            Not After : Oct 30 19:46:40 2025 GMT
        Subject: CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:e9:23:78:b4:57:ab:f5:8b:e5:9b:1f:d0:
                    72:4d:46:ef:00:2b:33:e4:01:28:db:00:56:c9:67:
                    96:ce:c1:4b:3e:dd:cc:86:84:17:41:36:45:39:9e:
                    04:61:d2:c2:28:34:a3:ea:dc:05:0f:dc:10:0c:ad:
                    44:2a:5c:8d:6b:a8:28:c8:f6:b4:7d:7d:6c:85:b7:
                    ab:75:65:52:39:7a:4b:fd:13:e4:f5:46:09:02:bd:
                    08:9a:f9:61:32:ee:5a:33:e7:2a:43:69:b7:58:5a:
                    85:7f:6d:65:57:9f:d1:53:ca:62:23:df:f1:f0:56:
                    f8:9e:1f:e5:70:73:ed:f2:c8:a7:03:33:34:8e:55:
                    fd:ab:e7:dc:73:58:b4:c6:bf:56:c2:f1:01:b3:28:
                    6b:2a:cf:c3:cf:8d:33:4d:1c:33:29:74:0c:a6:cf:
                    3b:c7:ce:b9:84:62:9f:d4:96:a1:89:cc:f6:14:8b:
                    4e:bb:32:1b:da:b5:ad:ab:40:13:0e:10:34:93:4d:
                    9b:49:e7:f7:f1:67:07:68:6c:d0:25:51:42:ba:e9:
                    af:0b:20:1f:bd:81:29:87:5f:a7:f9:37:37:34:40:
                    73:09:24:b5:6a:f9:82:fa:9f:ae:ff:5f:13:86:38:
                    89:a2:db:bf:81:ad:77:1b:fd:c8:fc:16:9c:01:cb:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.212.0/22
                  170.83.236.0/22
                  170.231.248.0/22
                IPv6:
                  2803:4540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264658

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:f3:36:1d:65:dc:fb:8f:0f:45:35:7f:5a:62:b3:ea:e3:
         d4:ed:8e:bc:c6:62:08:18:c4:b0:10:b5:9b:7c:c9:a9:20:e9:
         b8:18:9d:f6:36:f7:02:ce:68:0d:3c:f7:59:57:c6:65:5c:db:
         b3:f4:e4:35:98:54:67:c7:39:94:2e:23:0c:ba:6b:67:25:6e:
         e6:60:ff:29:b7:83:fa:56:9c:ab:39:9e:dc:1d:41:44:14:62:
         88:eb:28:e8:41:7f:90:c6:49:cf:b8:e0:ac:89:f3:57:7a:02:
         88:6b:52:60:ce:06:e0:57:90:9f:6c:b5:d8:fe:96:0b:03:5a:
         21:7d:2d:4c:d3:48:28:79:bc:b1:29:01:d9:1b:64:82:66:41:
         a4:30:2a:6c:50:c3:1c:fb:1e:c1:bb:c8:46:92:a1:71:f6:2c:
         aa:a6:77:52:f2:7a:25:21:8a:94:1f:5e:8b:17:62:65:60:79:
         93:1d:61:f7:6f:c8:ba:38:09:bf:cf:71:e4:c0:3e:61:a2:64:
         f3:df:14:65:71:db:f9:40:f6:75:da:0f:14:0a:82:0e:54:81:
         b6:e1:b8:50:c9:5b:ec:f7:e7:a1:4e:ed:26:97:d1:b4:85:c5:
         28:b7:3e:f4:68:0d:5e:56:9f:f2:7e:11:6a:2f:21:1d:30:06:
         70:f1:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----