Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97fa08408a8541db6c54279772f066050e91b323.cer
File:                     97fa08408a8541db6c54279772f066050e91b323.cer (raw, json)
Hash identifier:          JRb/pFRp7wO4UU53a9imtbPscsYgyUJan+F57iysDaE=
Subject key identifier:   6C:E5:64:5A:A0:3B:0C:9B:29:07:15:15:53:8E:36:4A:FF:51:72:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB7006
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/97fa08408a8541db6c54279772f066050e91b323.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Aug 2020 15:55:06 +0000
Certificate not after:    Tue 06 Feb 2024 18:27:47 +0000
Subordinate resources:    IP: 138.97.236.0/22
                          IP: 2803:e040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14381062 (0xdb7006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 15:55:06 2020 GMT
            Not After : Feb  6 18:27:47 2024 GMT
        Subject: CN=97fa08408a8541db6c54279772f066050e91b323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:d8:91:d5:be:df:35:2b:f8:0d:84:60:6e:
                    d8:0d:37:da:0e:84:6b:c6:af:d7:b6:9c:4f:7c:6a:
                    c1:87:5a:61:97:3a:73:da:89:95:28:9f:16:fb:99:
                    d3:51:7b:5c:28:2c:00:e4:7e:c3:fe:cf:09:ec:d2:
                    57:b6:4e:97:46:1d:7b:23:a4:a9:89:e9:ce:d1:65:
                    e5:ee:d0:96:4e:51:ee:dc:a2:7f:b1:af:1f:6e:ac:
                    40:97:18:08:9f:e0:0b:59:a3:6e:77:a9:a0:0e:e3:
                    b3:e1:93:f4:9f:f2:1d:72:e4:09:94:c8:fe:fb:a2:
                    79:15:c7:34:90:8c:70:c3:86:fb:17:d6:20:46:f9:
                    fb:d5:73:42:d3:39:2f:90:54:3f:1e:62:3e:95:59:
                    2e:24:fd:fc:79:68:a6:f6:99:51:b1:58:42:2f:83:
                    c9:5a:92:72:3e:c2:15:cb:36:77:00:c8:b4:96:15:
                    e2:dc:8d:97:34:fe:d2:a6:1f:62:17:9c:83:ab:c5:
                    53:94:26:f8:cf:be:07:f4:9b:47:92:ba:11:3f:e3:
                    53:1b:40:33:46:b4:8c:ba:e0:6e:cd:a1:61:40:08:
                    69:12:c8:35:14:41:7a:8b:11:7f:45:76:2d:01:7b:
                    ad:0f:40:db:5d:92:20:b9:85:3b:20:d1:da:51:e5:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:64:5A:A0:3B:0C:9B:29:07:15:15:53:8E:36:4A:FF:51:72:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/97fa08408a8541db6c54279772f066050e91b323.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.236.0/22
                IPv6:
                  2803:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:bd:72:fc:ce:e9:a3:c2:4f:4e:3c:84:db:8f:70:7d:06:4a:
         35:db:34:e7:e7:ce:42:37:de:3e:c3:a0:66:8f:c0:64:f8:1c:
         6a:0b:fd:92:4a:ad:3e:b6:80:be:0a:b0:73:c9:58:4d:11:9a:
         3d:ab:58:bb:60:91:d9:6b:d8:d9:78:01:cd:a1:cd:eb:cc:bd:
         75:33:89:b5:9f:4e:73:f0:af:b8:c9:05:51:71:09:9f:33:04:
         59:53:08:57:b4:74:85:fb:50:f3:57:ac:cb:15:87:0d:82:dc:
         f9:fa:e7:4a:43:5e:9c:3d:a4:e9:f8:af:5e:9e:45:21:24:7e:
         f2:59:7e:be:23:ae:54:bd:1a:ef:ed:d4:cd:9e:66:e6:6a:41:
         36:55:09:fa:d7:7a:71:72:83:a7:42:b3:a4:77:80:3f:b0:c9:
         8b:1a:8b:10:70:86:18:d6:9e:96:7b:e1:9f:e1:fc:82:25:05:
         9d:88:eb:e7:9c:40:38:9f:ab:58:4e:8a:41:e3:36:82:f3:c5:
         b8:1f:43:2a:a3:8a:c5:d9:fc:b8:b2:a2:38:95:db:ff:a6:cc:
         86:a0:0b:94:b6:34:07:47:bb:19:44:34:5f:0a:0b:d8:09:c5:
         5e:a0:76:74:38:f5:14:f7:08:c9:13:28:04:4e:ef:54:93:3a:
         39:0c:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----