Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0d7f94bc9ee9469d5005478bbd95979d65c8543.cer
File:                     c0d7f94bc9ee9469d5005478bbd95979d65c8543.cer (raw, json)
Hash identifier:          6syfR/lz8UkrTXkIjGR+xe+bOKEfw8OH83WAdXOY3sk=
Subject key identifier:   DB:DB:F7:BF:49:A9:B9:DE:18:A4:81:59:AA:A2:3D:F4:AE:24:5B:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D29A33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/c0d7f94bc9ee9469d5005478bbd95979d65c8543.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 May 2021 21:41:37 +0000
Certificate not after:    Mon 08 Jan 2024 14:15:01 +0000
Subordinate resources:    AS: 271873
                          IP: 179.63.148.0/22
                          IP: 2803:cc10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13802035 (0xd29a33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 21:41:37 2021 GMT
            Not After : Jan  8 14:15:01 2024 GMT
        Subject: CN=c0d7f94bc9ee9469d5005478bbd95979d65c8543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:80:f2:62:f0:c7:fb:cb:5e:06:b0:5c:1f:
                    1b:c6:ec:b2:f0:c5:c2:8b:5c:7a:83:00:4f:d8:e0:
                    ce:24:b0:f7:18:f5:36:af:5d:ed:e9:a5:d8:64:65:
                    07:5f:cf:19:51:26:de:41:7c:b2:c4:93:cb:93:c5:
                    09:20:44:0c:da:ff:d4:72:a9:f2:10:86:be:d4:cd:
                    0c:5b:21:63:e1:63:77:09:13:23:73:ab:bc:af:fa:
                    7c:0d:11:d8:6a:d1:3d:c3:17:76:17:f0:48:dc:ef:
                    4e:a1:ac:b3:04:09:27:73:10:9e:2f:cf:1e:95:1f:
                    d2:c6:d8:50:d3:b1:92:94:f0:f0:10:e0:29:0a:bb:
                    5c:cb:51:7e:72:40:8f:c8:4d:25:06:24:c1:2e:d5:
                    59:dc:73:dd:d1:56:19:7e:01:9a:0d:dc:3d:0e:e2:
                    89:21:ed:37:13:24:11:49:ae:b1:ac:ea:2f:78:24:
                    77:3b:d2:ea:51:0a:55:7c:85:56:8f:6c:37:77:d9:
                    d4:b8:07:fc:66:8d:20:92:ca:fa:f1:e1:06:20:92:
                    57:fa:02:b4:03:a3:69:db:bf:af:78:46:a1:de:7f:
                    97:56:b6:e3:ef:10:6a:a6:7f:a9:7b:b0:93:d5:19:
                    f9:82:a6:57:dc:cc:c2:7e:3e:1e:c0:67:8f:cc:e7:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DB:F7:BF:49:A9:B9:DE:18:A4:81:59:AA:A2:3D:F4:AE:24:5B:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/c0d7f94bc9ee9469d5005478bbd95979d65c8543.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.148.0/22
                IPv6:
                  2803:cc10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271873

    Signature Algorithm: sha256WithRSAEncryption
         7a:60:1d:ea:20:eb:d1:9a:cb:da:4a:3f:ee:b2:22:c8:47:62:
         c3:48:db:88:25:d6:54:53:d2:d8:e1:6c:f9:f7:ae:60:08:b2:
         10:f0:1e:ea:0e:35:e3:53:14:62:94:80:87:25:72:d0:09:44:
         88:ab:21:14:32:40:8a:a8:43:a7:33:28:a7:ff:b6:eb:fa:43:
         d2:0a:9b:89:7d:a2:d0:9b:ba:37:e5:1c:11:67:95:64:e3:f0:
         b4:18:0d:75:ef:03:32:96:08:a7:79:32:11:8a:61:c8:73:d9:
         e1:31:c4:44:24:69:e8:60:54:25:23:70:45:b1:33:2a:d2:dd:
         85:62:48:9e:b6:2d:1b:44:12:24:2d:b2:03:86:b2:92:df:34:
         95:b2:22:1d:56:26:02:4f:ec:2c:fc:69:18:7e:f3:f4:e3:42:
         af:1f:55:e9:29:3a:b9:85:56:44:aa:1b:e3:34:0c:84:63:57:
         96:71:34:cc:78:e6:88:cf:2d:ca:77:9a:86:3b:1a:63:e8:a0:
         36:92:1d:42:c9:cb:65:38:a5:3d:d6:80:ad:fe:9c:c3:f4:50:
         f7:aa:c1:c2:ba:37:66:d0:5d:56:ed:4a:cf:e6:e6:1c:5f:3e:
         b8:3a:a8:b4:61:3b:08:40:79:34:e8:93:21:e0:18:6a:34:c7:
         cb:5d:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----