Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a016a5c461a1f289e43e8833d657227c9b30df0c.cer
File:                     a016a5c461a1f289e43e8833d657227c9b30df0c.cer (raw, json)
Hash identifier:          R6UwoWWUZZ0DZqWFxnw6S8ytRcXfkFObHlg+X7XPdbc=
Subject key identifier:   DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB21D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/a016a5c461a1f289e43e8833d657227c9b30df0c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Jan 2021 16:52:23 +0000
Certificate not after:    Sat 03 Feb 2024 13:11:54 +0000
Subordinate resources:    AS: 269979
                          IP: 187.0.40.0/22
                          IP: 2803:8ee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14361044 (0xdb21d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 29 16:52:23 2021 GMT
            Not After : Feb  3 13:11:54 2024 GMT
        Subject: CN=a016a5c461a1f289e43e8833d657227c9b30df0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:71:4e:dc:c2:3b:a6:7e:25:81:56:78:b0:
                    66:79:e7:3d:d6:78:e2:96:01:b9:49:f3:4d:16:2b:
                    8d:a0:27:fc:4e:2c:db:6e:35:d9:89:33:44:ca:0c:
                    5d:d7:90:ab:4d:9a:cf:35:b0:86:3b:52:ba:e2:0f:
                    65:6f:0a:93:95:72:1b:11:2b:d2:0a:16:7e:f1:d0:
                    8d:79:30:f2:3f:a5:e2:d4:21:69:34:0f:19:a9:14:
                    39:48:77:56:e3:32:82:65:f0:d8:02:aa:fd:ad:a0:
                    1a:05:af:16:0d:0f:00:4c:f2:32:71:bb:65:bc:4c:
                    52:6e:e9:1a:8a:40:3d:20:7f:08:31:a7:9d:8e:2b:
                    b5:88:61:cc:e7:73:83:2a:a6:2a:f1:5a:35:c6:a8:
                    6b:0d:01:7f:eb:24:47:d9:ef:b7:55:f9:3c:30:fa:
                    48:8e:a0:48:a0:ab:2f:a3:34:bf:ae:46:25:ea:48:
                    2b:ab:2d:f7:14:0f:86:c0:25:3a:69:94:a9:cf:fe:
                    82:da:db:2f:b6:d8:c4:02:ac:4b:c0:50:ab:ac:07:
                    8f:d4:b2:86:dc:fc:b9:13:fe:87:99:88:0d:a4:23:
                    ff:57:dd:02:f9:b0:27:7a:4e:9a:6c:d5:f1:74:fd:
                    06:af:40:d4:de:31:dc:2a:c3:32:78:2a:9a:08:81:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/a016a5c461a1f289e43e8833d657227c9b30df0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.40.0/22
                IPv6:
                  2803:8ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269979

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:03:6a:52:0c:40:e8:fe:8e:e7:42:36:7e:cb:e8:53:79:
         a4:b4:61:9b:84:50:20:53:55:94:1e:04:b1:40:c7:e8:58:b6:
         07:db:19:87:b5:b2:1f:4b:8a:26:54:f5:eb:43:96:26:47:51:
         93:55:0c:94:40:6c:a0:de:41:17:5d:0e:fc:18:34:d4:aa:79:
         e0:e0:e4:a2:ef:8e:5a:49:20:d7:24:3e:99:d5:ac:86:da:b3:
         f0:42:8f:40:86:53:c9:ac:7e:3d:7c:ba:dc:2c:0f:c5:9b:19:
         25:c8:ae:a6:ea:94:0c:49:2c:86:3b:97:d9:ed:1c:33:aa:bf:
         f5:ba:39:15:2b:fa:00:53:9d:ad:55:66:c0:ae:31:08:52:74:
         d0:51:4a:8a:85:87:a1:b5:3e:49:c2:e7:77:3d:82:e2:77:23:
         82:22:89:09:a3:76:44:f8:f6:be:b8:f4:22:7f:7b:f9:46:ee:
         c8:3b:ea:43:04:70:b8:8c:d9:87:ba:f2:b1:bd:57:21:7d:69:
         f4:f7:f0:c5:11:24:3e:6c:a1:93:28:8d:9c:61:c8:8a:d1:9e:
         69:6a:08:09:2e:28:2b:cd:56:e8:ab:fd:b6:23:cd:75:9c:2a:
         f1:e7:82:0e:b0:96:f9:b5:4c:da:85:86:39:4b:ed:a3:67:6c:
         8b:eb:f8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----