Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
File:                     c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer (raw, json)
Hash identifier:          Ob4os2yOZslmdInm5KM9Ie078Me4aP2E/l7VjL2UrIw=
Subject key identifier:   6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D61FEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 May 2021 21:13:29 +0000
Certificate not after:    Fri 01 Dec 2023 03:07:23 +0000
Subordinate resources:    AS: 28409
                          IP: 168.121.60.0/22
                          IP: 2806:21e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14032875 (0xd61feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 21:13:29 2021 GMT
            Not After : Dec  1 03:07:23 2023 GMT
        Subject: CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:03:bf:33:d4:2e:a4:e7:f5:75:cd:88:d2:
                    19:61:f9:16:f8:cb:dd:65:b2:d4:db:b2:df:49:41:
                    1b:2e:3b:3e:4a:98:44:8c:8f:8a:ad:30:74:fe:a9:
                    1a:8a:89:42:17:30:29:97:f4:ee:31:40:84:6f:f2:
                    45:da:6d:b0:55:7c:9f:e5:38:e7:87:19:c2:db:06:
                    56:95:fd:f7:fd:a7:e8:bd:3d:5c:1d:94:7d:d5:93:
                    41:93:a0:09:23:25:6b:e2:2d:8e:51:14:ef:13:2d:
                    18:24:7f:39:aa:70:51:a6:b2:b3:e4:25:b6:5f:4f:
                    3e:56:e3:04:37:20:8e:e3:83:dc:bd:ab:bc:af:54:
                    64:25:ab:1d:e0:b7:06:2c:17:6a:e4:82:e1:7a:e7:
                    a7:6b:2d:1b:71:b0:90:5e:b6:ec:87:37:dd:85:da:
                    78:de:20:02:8c:d4:dc:27:3f:f0:1c:d5:f5:c4:3f:
                    f5:b9:c8:a4:94:7b:8e:bb:d4:8c:c0:40:7d:60:41:
                    18:7e:8c:fb:6b:81:c5:07:9a:90:18:26:e9:89:49:
                    76:d1:5b:32:dc:91:72:08:27:1b:a0:1b:6f:0a:83:
                    65:b1:d6:ee:1d:48:ae:7a:a6:41:4a:99:94:5b:71:
                    56:ac:54:2a:79:23:22:ee:12:55:96:d1:a2:3e:7e:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/22
                IPv6:
                  2806:21e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28409

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:0c:60:fc:7b:c9:ab:aa:10:20:3c:bb:7c:09:ee:e5:38:
         44:ee:51:53:2f:f3:e8:ca:fc:06:bf:2f:ef:22:58:5c:61:5d:
         a0:e2:d3:70:35:84:04:22:17:c9:b0:61:f0:46:b2:f0:43:66:
         01:08:c3:43:8b:10:fd:d8:b3:ad:a6:b8:bd:be:76:e6:95:1a:
         13:7f:bf:9d:95:a8:45:f1:45:2c:61:70:3e:37:b0:17:90:aa:
         98:5d:68:7e:8d:f2:e9:3a:4c:db:29:34:6d:a2:c7:45:65:75:
         02:58:8c:63:73:d7:00:9a:1a:df:f5:5b:73:92:d3:78:08:9c:
         53:5a:d3:4d:ee:4f:2e:79:b7:92:98:46:ad:54:f7:41:ad:44:
         cd:82:3e:da:b2:52:43:2d:2a:7e:cf:d8:24:88:db:15:6b:d1:
         8d:9d:03:14:93:ee:50:05:30:70:bb:3f:37:db:4d:82:f5:33:
         33:d9:3f:9e:0e:19:17:11:a9:bb:60:12:82:98:97:37:c7:79:
         1e:80:e4:76:fa:d7:70:9c:3c:fe:4e:30:a3:ad:f9:d1:0c:81:
         a5:92:62:54:f6:b2:b7:9e:ef:67:c1:91:f1:c7:34:06:22:a9:
         23:12:d0:b0:8a:88:c5:12:d4:e1:11:7b:ce:a3:51:fc:92:9e:
         b6:a1:bc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----