Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91.cer
File:                     d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91.cer (raw, json)
Hash identifier:          GZ1OnqPLfBFcDxdgUxXJovHrUh5SEzBphxIz9fgou4M=
Subject key identifier:   10:6E:58:47:C0:25:1C:49:80:CF:0D:26:C8:7C:A0:A4:83:67:16:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB5FD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 26 Nov 2020 23:29:06 +0000
Certificate not after:    Wed 26 Jun 2024 08:21:01 +0000
Subordinate resources:    AS: 28440
                          IP: 201.131.216.0/22
                          IP: 2806:3cb::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15425494 (0xeb5fd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 26 23:29:06 2020 GMT
            Not After : Jun 26 08:21:01 2024 GMT
        Subject: CN=d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:e1:9d:f1:36:96:e5:00:7c:70:42:14:e5:
                    13:78:7d:18:6a:15:2d:43:36:3f:5f:42:53:d7:a8:
                    2c:a1:19:bb:a7:88:02:e7:98:2d:ee:15:42:39:f5:
                    28:d3:e5:43:c8:f9:98:b4:a1:74:b0:15:5c:ef:fa:
                    51:35:88:c0:55:58:0d:8e:e4:f9:f2:47:9e:cb:2e:
                    02:cb:85:92:9a:8b:87:3d:09:cb:a2:0a:d2:c0:d8:
                    6c:12:4d:40:a7:46:2f:d7:d8:c4:9d:d1:89:f8:a8:
                    ef:2b:f9:a6:38:57:5a:bb:8a:42:36:5b:f4:d5:82:
                    39:77:ab:14:af:d7:73:ea:75:8f:ca:2a:2b:27:0e:
                    c4:95:bf:2e:ea:8c:4b:f6:4c:c9:c9:38:94:81:1f:
                    57:27:cd:62:c2:19:ce:f4:a7:ed:69:c5:d2:f8:d6:
                    a0:93:fb:7c:d7:74:f6:2f:a7:68:8b:87:0c:6e:23:
                    98:f9:82:94:c7:39:03:67:e0:68:43:54:ee:5b:ec:
                    fc:69:9b:b5:9c:2b:48:bd:19:3d:28:09:3a:58:c3:
                    60:49:bf:3b:2e:6b:c8:5a:0b:16:23:68:cd:12:bd:
                    df:9c:4a:bf:e8:01:34:68:45:6e:d9:9f:52:53:d9:
                    ec:c9:0d:0a:ea:22:cd:2f:7f:6c:68:b1:57:10:d1:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6E:58:47:C0:25:1C:49:80:CF:0D:26:C8:7C:A0:A4:83:67:16:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.216.0/22
                IPv6:
                  2806:3cb::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28440

    Signature Algorithm: sha256WithRSAEncryption
         75:7a:44:cc:11:9c:0a:82:18:b2:eb:2b:16:16:39:27:68:9a:
         25:47:b1:cc:4a:26:4a:d8:ad:6b:77:b9:c9:61:b7:eb:c4:97:
         4c:a3:fd:b9:63:b1:1e:a9:fa:a2:55:66:b4:8d:4f:72:37:da:
         38:19:3c:b5:d1:e9:ce:b4:a3:ac:f0:29:7e:40:b7:4d:f6:7d:
         7d:42:95:ce:18:f2:95:de:90:93:f7:b8:81:51:14:f1:bb:37:
         64:14:0f:fc:90:24:ca:8a:32:65:53:bb:ad:4c:6c:94:be:fe:
         05:91:d2:34:a7:07:c1:9b:3b:32:8a:f3:19:4f:63:a8:75:10:
         26:af:55:79:6b:a1:46:29:1b:60:54:aa:5a:b1:32:1d:a5:e1:
         64:df:33:db:dc:98:40:70:57:3c:71:ed:43:cf:02:85:2b:48:
         f5:40:8e:d8:de:ed:16:9d:fd:93:06:ea:fc:2e:8c:25:6d:3f:
         7f:f1:13:8b:55:5a:2c:b9:fe:0c:44:38:a3:15:29:f2:4b:9e:
         59:fb:bd:83:d5:05:7d:ed:3a:f7:21:a5:84:ff:45:3d:73:0d:
         a8:ed:32:0c:7b:c9:2b:19:87:94:95:9c:d5:39:42:fa:e3:4d:
         b0:84:68:16:b9:a3:77:d5:a0:fe:ab:ba:85:9e:cd:a9:79:49:
         ff:a3:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----