Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9025adc86618d4b13c3405def7aff69985eb16.cer
File:                     cc9025adc86618d4b13c3405def7aff69985eb16.cer (raw, json)
Hash identifier:          NRxloIEq57IC0pi/CMyHzT4Rjzr8EkzxmmP43IGU6Hs=
Subject key identifier:   E2:10:16:11:62:21:C8:F1:BE:A2:D9:38:6D:1A:7B:EA:B2:AA:F1:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2A793
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/cc9025adc86618d4b13c3405def7aff69985eb16.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Oct 2021 18:30:19 +0000
Certificate not after:    Thu 22 Aug 2024 18:28:53 +0000
Subordinate resources:    AS: 52413
                          IP: 201.220.16.0/21
                          IP: 2803:8900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15902611 (0xf2a793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 18:30:19 2021 GMT
            Not After : Aug 22 18:28:53 2024 GMT
        Subject: CN=cc9025adc86618d4b13c3405def7aff69985eb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:f9:97:3d:f4:9b:c2:fe:82:3f:5d:6b:0a:
                    2c:be:f9:66:b3:ca:e9:68:40:85:c4:31:db:6b:3c:
                    a0:8a:26:b4:3d:21:9c:03:38:af:57:17:de:36:db:
                    71:bb:58:23:7f:ff:68:91:92:9f:1d:38:51:c5:20:
                    72:36:a6:36:3f:31:35:6b:cb:12:a9:59:fc:a7:0a:
                    13:bc:3e:97:39:6a:17:fc:71:c6:69:c8:01:3d:38:
                    ba:f7:45:fd:1d:d2:8a:38:6d:6b:99:e7:a3:94:7f:
                    a9:5b:88:94:8a:3f:92:71:fb:f2:7d:db:2b:9b:5a:
                    7d:14:e4:73:42:3c:a4:1a:5e:78:90:b7:60:9a:99:
                    4c:c7:f9:4f:4b:2f:db:28:71:2d:44:f5:a7:e7:6b:
                    1d:0c:a5:32:66:77:73:bb:1f:82:ae:f4:70:46:78:
                    9b:52:a2:e1:05:b4:14:14:5c:f9:ff:75:fd:4b:ea:
                    90:ec:28:c3:0d:a7:c4:b6:46:70:1f:bb:21:c9:6b:
                    03:b4:c4:d5:f8:de:9b:e9:5a:2b:36:05:6a:a4:d9:
                    67:6e:71:5c:85:f8:a9:cf:81:f6:44:c5:b4:4a:27:
                    bf:9f:b9:5f:55:c7:89:ff:10:c7:7e:87:6c:63:ce:
                    e3:7f:51:ef:6e:52:d0:d9:c6:3a:62:b4:d0:e7:41:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:16:11:62:21:C8:F1:BE:A2:D9:38:6D:1A:7B:EA:B2:AA:F1:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/cc9025adc86618d4b13c3405def7aff69985eb16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.16.0/21
                IPv6:
                  2803:8900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52413

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:c7:f4:dd:d0:99:f3:d5:39:f1:ab:fc:b3:29:3f:20:6b:
         73:7c:04:99:42:d4:32:1d:e6:f2:be:da:e6:ab:f1:44:e3:b9:
         b7:e9:c0:81:97:47:1d:9b:c4:d4:74:ef:3d:2d:0c:a6:69:b8:
         4c:f1:2c:5f:a8:8e:fd:ca:e5:a3:e6:9b:67:c3:30:7f:40:40:
         09:a7:11:6d:b2:85:11:e0:fa:64:0c:05:f3:8d:ff:bb:49:77:
         e4:d5:d4:d4:7c:19:67:01:6f:97:cb:2c:c8:e4:fc:d4:b7:e0:
         91:b3:5b:4f:29:29:8c:c2:3d:1a:02:89:d7:6f:e1:68:ab:4c:
         02:d9:4d:aa:31:50:c8:4c:fb:9e:76:e6:bf:c7:01:a9:3e:af:
         71:6f:02:55:6d:a2:7d:41:7d:fb:ae:2c:4c:65:f0:64:69:8b:
         5c:81:e5:73:db:d7:69:b6:13:a9:4d:95:54:d6:ae:eb:dc:c8:
         69:4a:96:32:a4:7c:d4:96:40:47:59:42:fc:d3:ca:f1:f8:47:
         ca:bd:77:f2:d2:61:24:38:cf:d2:1a:68:d4:54:fe:12:34:81:
         e9:a9:2e:95:8d:2e:37:b3:3a:31:35:78:50:32:80:58:3e:60:
         cd:ee:b3:7f:6c:fa:c0:da:c0:a7:ae:85:56:a3:0a:8b:12:b5:
         f8:6a:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----