Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
File:                     bf01c8b5c661e4a83900b9cf88863f17432603dd.cer (raw, json)
Hash identifier:          dakddLqAaXkhT0QGxmLZo7atK2D8rA8t2rrmD4I+8U8=
Subject key identifier:   F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7A300
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Oct 2021 21:58:01 +0000
Certificate not after:    Sat 15 Jun 2024 17:05:21 +0000
Subordinate resources:    AS: 272991
                          IP: 45.182.20.0/22
                          IP: 2803:2560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15180544 (0xe7a300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 25 21:58:01 2021 GMT
            Not After : Jun 15 17:05:21 2024 GMT
        Subject: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:fd:6a:2f:cf:54:14:cb:63:0a:75:5b:ac:
                    e2:e2:2b:8f:b7:78:06:42:4a:08:21:df:3b:b7:82:
                    ba:74:aa:c8:25:46:0e:68:3f:d6:77:23:94:78:dd:
                    5a:88:98:97:45:f4:38:86:60:8e:4e:9a:21:81:60:
                    38:29:ac:5c:67:8d:fa:45:a1:88:94:fe:04:d1:03:
                    13:0e:5a:94:90:dd:2b:07:4d:c5:53:4c:78:92:cc:
                    88:d7:a2:50:df:5a:39:61:34:13:92:71:a7:6a:6b:
                    8d:a1:94:e8:36:16:1d:50:f7:a3:2c:db:33:88:48:
                    f0:5d:3f:a4:33:a6:0c:68:5c:8f:03:8d:88:60:13:
                    d2:55:c9:8f:f6:49:cb:c4:ad:0c:4d:9b:a1:90:10:
                    29:b3:47:6d:ba:df:4d:da:4d:81:93:a0:c3:ac:7d:
                    a5:b2:e3:51:a3:32:49:35:0b:9e:4f:c8:38:bf:c6:
                    96:d3:e7:c7:45:fc:b3:69:29:09:d3:1c:5c:c0:10:
                    8c:a5:c6:b0:98:8a:4e:d0:e4:18:86:88:9b:65:2c:
                    ca:6c:dc:00:e7:50:36:01:1c:d4:ad:00:51:32:41:
                    6c:80:03:aa:66:e8:bf:76:b6:14:60:34:e6:51:8b:
                    91:33:de:2c:df:d9:66:d9:84:dd:30:cd:20:70:b5:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.20.0/22
                IPv6:
                  2803:2560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272991

    Signature Algorithm: sha256WithRSAEncryption
         72:74:52:98:71:0b:2d:5e:2f:60:c7:35:c8:e4:7c:49:ad:50:
         01:42:52:9a:d3:bd:15:01:32:d7:8f:38:27:fe:32:47:79:50:
         2d:ed:ce:79:f7:0e:e6:2b:94:05:39:b4:1c:7d:c7:1e:3c:15:
         fd:43:65:9d:41:8a:61:d5:ae:ce:74:7e:3b:ae:7a:55:6a:a1:
         fe:dd:37:f9:39:97:25:dd:67:29:37:82:10:f7:53:b0:b8:2a:
         06:1f:07:dc:ad:1e:fa:23:39:c2:01:ef:5c:f7:0b:f2:70:2b:
         9d:06:3f:4d:5f:0f:11:53:53:45:f6:2e:81:e3:28:a7:74:d3:
         38:22:fa:b5:92:f6:69:ac:43:f4:57:e4:be:93:a9:65:60:5f:
         16:17:e4:38:64:03:99:6f:dd:b9:c7:70:ec:a8:dc:d7:ef:e8:
         98:8b:0f:3e:37:7a:ae:10:db:99:5a:b2:02:82:8b:13:3d:80:
         54:1c:d4:2c:e7:32:e2:50:fc:a0:96:01:fa:b5:b3:57:89:db:
         90:d4:69:f8:f7:80:b4:fe:eb:ae:12:42:bb:4d:ee:e0:f7:55:
         e7:31:a9:89:24:e9:a4:7f:f3:64:e6:77:06:ea:91:81:8a:79:
         bd:9c:c9:e5:ce:fe:fd:ac:82:8b:d7:57:5d:45:66:34:b8:cf:
         19:3c:e2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----