Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e03528add95459ad882223f3d7897c8534b198e.cer
File:                     9e03528add95459ad882223f3d7897c8534b198e.cer (raw, json)
Hash identifier:          E3jkgyiS6dkB93uxNoU6sXuU5ryKLGfJOWJPvfvsX9M=
Subject key identifier:   A8:38:FC:0D:A6:2F:78:36:9A:B2:ED:34:58:A3:74:04:52:D9:14:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCF069
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/9e03528add95459ad882223f3d7897c8534b198e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Oct 2021 13:21:46 +0000
Certificate not after:    Sat 16 Nov 2024 16:15:06 +0000
Subordinate resources:    AS: 263736
                          IP: 138.0.184.0/22
                          IP: 143.137.20.0/22
                          IP: 170.239.128.0/22
                          IP: 2803:3780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16576617 (0xfcf069)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 13:21:46 2021 GMT
            Not After : Nov 16 16:15:06 2024 GMT
        Subject: CN=9e03528add95459ad882223f3d7897c8534b198e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:3e:90:ff:c8:0f:d3:61:ae:ca:d3:87:69:
                    15:63:da:58:02:81:e2:c4:94:b2:61:6c:02:86:7c:
                    54:3b:47:d7:1b:8f:01:df:bb:d9:f4:39:97:71:48:
                    80:d8:2e:c3:ee:af:18:6a:71:fd:a5:20:28:c1:a5:
                    c3:91:42:32:b2:54:eb:71:ed:fb:b8:f1:31:35:ba:
                    30:04:bc:b8:a3:73:8d:b4:d6:ae:71:f8:64:c4:e3:
                    0d:be:5c:76:b7:46:c1:d2:b6:c8:fa:bc:97:3c:c6:
                    80:db:6a:77:a1:0a:a5:a5:ff:22:29:12:1c:c9:c8:
                    9a:30:53:7b:2f:56:ac:17:dc:9d:86:d7:2c:6a:ff:
                    ce:c8:98:a0:1a:f8:17:66:97:33:9b:07:12:f6:68:
                    4b:52:3c:2c:9e:37:d0:f4:8a:ed:0a:40:10:23:1b:
                    96:4e:fd:bf:7a:0a:e6:79:00:68:c4:8f:6d:7e:0d:
                    b7:8a:9c:56:75:49:f2:0f:f9:bd:59:71:89:ac:14:
                    74:3b:75:8a:6d:83:e1:12:17:b1:c2:4d:5f:cc:39:
                    f4:91:4d:7b:34:24:12:38:d4:f2:6d:16:31:54:5a:
                    0d:06:14:8c:6d:2e:b8:0d:0a:d9:40:55:dc:da:65:
                    93:1f:0d:d5:80:32:91:53:d6:a0:af:50:27:3b:93:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:FC:0D:A6:2F:78:36:9A:B2:ED:34:58:A3:74:04:52:D9:14:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/9e03528add95459ad882223f3d7897c8534b198e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.184.0/22
                  143.137.20.0/22
                  170.239.128.0/22
                IPv6:
                  2803:3780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263736

    Signature Algorithm: sha256WithRSAEncryption
         6c:c6:b2:f5:99:86:e7:15:84:c6:e0:f1:cd:1b:b1:63:1e:78:
         99:39:86:6d:7b:33:bf:40:c9:ef:c2:2e:69:64:11:be:2f:be:
         30:85:3f:5b:34:f4:10:ac:c0:48:48:ce:01:b2:68:cc:9c:8b:
         23:3b:4a:84:55:8c:82:35:ff:49:f9:0d:eb:e5:a1:9b:cc:20:
         da:4a:99:c2:31:92:b2:61:fd:f1:8b:b4:ea:74:f7:64:64:7c:
         de:97:53:d8:dc:0e:5b:9d:54:65:39:1f:33:c2:57:a3:56:fb:
         b6:56:e2:ed:1c:64:00:d3:1c:67:f9:c2:a8:51:c3:ab:f1:97:
         01:d5:51:3d:31:cf:8a:26:2f:ae:df:8a:a7:48:16:db:36:40:
         68:95:3b:ff:70:3a:0f:dc:83:7e:bd:05:5e:94:28:90:fe:36:
         92:52:6b:ab:d9:a1:0b:3c:73:c5:63:d6:cb:3a:ae:e9:cc:f6:
         6c:8a:7b:42:66:51:84:9a:4a:1a:8e:d8:8a:32:62:93:40:ba:
         08:a4:27:ef:9b:29:81:7f:04:51:9e:05:00:c2:03:00:45:11:
         b6:aa:4e:21:11:e2:69:0c:5f:f9:0e:9f:89:57:39:aa:f5:57:
         bd:6c:f0:ea:65:2f:03:ad:dc:db:3f:9a:b3:47:d1:d0:0e:5e:
         5d:7e:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----