Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce135892fe8714b9faa36d773ec601408e44fc03.cer
File:                     ce135892fe8714b9faa36d773ec601408e44fc03.cer (raw, json)
Hash identifier:          0cVH48kY2QkdP1uI4GuxYiJGezB4Z4H7383+GoqJkks=
Subject key identifier:   60:A9:BE:19:00:DE:53:7D:6D:B0:8A:B7:DC:9C:1C:BD:C6:E3:85:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA0909
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/ce135892fe8714b9faa36d773ec601408e44fc03.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Aug 2021 16:50:05 +0000
Certificate not after:    Sat 19 Oct 2024 22:10:37 +0000
Subordinate resources:    AS: 269880
                          IP: 45.190.64.0/22
                          IP: 2803:38e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16386313 (0xfa0909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  3 16:50:05 2021 GMT
            Not After : Oct 19 22:10:37 2024 GMT
        Subject: CN=ce135892fe8714b9faa36d773ec601408e44fc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:b1:11:6a:06:81:5e:91:ef:a0:9c:97:66:
                    6c:de:7b:4c:b7:52:c4:16:6f:88:3c:08:c1:65:1a:
                    a5:17:80:cd:36:7b:d8:25:d6:a0:78:d5:92:90:0c:
                    b2:e7:8e:ad:2c:66:c4:fc:13:05:a0:ca:65:98:f0:
                    b6:07:31:eb:23:f9:53:00:0a:94:6b:8a:60:a0:45:
                    5d:5a:6f:a3:ea:5c:ab:3e:ce:c7:76:4e:db:aa:07:
                    0d:5b:49:31:70:93:f6:d0:5f:14:a6:13:67:8c:8e:
                    31:7d:62:64:47:10:6f:34:67:7c:fa:38:68:d9:fa:
                    1b:02:0e:51:1e:7c:af:88:a1:0a:88:f8:f3:c1:3d:
                    cd:ed:9d:18:45:72:e4:41:de:18:74:32:3f:40:42:
                    d3:7a:9c:5a:a4:74:87:6d:8e:ab:b4:03:9c:83:ff:
                    02:9b:b0:48:89:b2:48:fa:b1:dd:4f:c6:ff:bd:2e:
                    0f:1d:ea:c5:67:86:fd:08:9f:78:06:91:30:bb:b4:
                    d3:30:6d:36:30:b2:f3:4c:3f:85:e9:f6:b9:e6:ea:
                    88:f7:7c:03:4c:b2:fe:88:2e:b5:08:a7:58:a3:dc:
                    31:5f:f4:68:11:d9:b0:c9:c3:27:6d:13:53:00:ad:
                    a4:66:c3:40:a7:ee:b1:82:d3:e9:06:b1:d4:d7:b8:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A9:BE:19:00:DE:53:7D:6D:B0:8A:B7:DC:9C:1C:BD:C6:E3:85:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/ce135892fe8714b9faa36d773ec601408e44fc03.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.64.0/22
                IPv6:
                  2803:38e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269880

    Signature Algorithm: sha256WithRSAEncryption
         bb:21:c1:15:cb:df:3f:4e:6a:40:bc:25:ca:a2:66:99:e3:cd:
         1f:9f:52:66:33:aa:93:41:68:f0:85:47:9f:60:20:c0:0e:ce:
         4a:d3:06:f4:cf:97:09:90:fe:e6:83:eb:c8:60:b6:e3:d6:fa:
         77:e4:a8:56:24:f0:1a:f1:db:a6:f5:a4:f7:0e:67:b3:12:96:
         83:62:0e:f8:23:18:61:cf:64:d6:77:a3:22:0a:f8:09:54:07:
         cc:9c:13:81:d7:4c:42:9a:cd:0f:3a:08:d2:33:4f:f0:19:e0:
         c1:1d:25:bf:92:31:47:53:df:54:71:3e:8c:25:2d:8d:51:c0:
         ed:6b:6c:85:2a:94:64:ef:3b:5f:e0:0d:48:92:1a:6d:8d:ea:
         38:89:b1:68:8b:18:2f:e8:ce:30:06:15:19:fd:b4:5c:d8:1a:
         f5:4e:87:17:f2:97:e6:71:a4:1c:c9:f3:c8:e7:6a:2e:c2:8e:
         35:76:22:76:85:9f:9d:93:9b:f0:7d:6e:35:c5:28:3b:4d:c0:
         3b:39:3d:78:62:89:d0:3e:21:6a:0d:11:e4:11:4d:24:a7:15:
         5e:7c:b4:c1:0a:2e:8b:12:1e:aa:a4:ba:70:80:6f:22:5e:4c:
         13:46:e6:2a:1a:da:f6:a2:da:38:06:0c:ac:4d:11:d1:37:71:
         f3:1d:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----