Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f699f3525b39056b0d16e9f4fb58026a19a277.cer
File:                     d8f699f3525b39056b0d16e9f4fb58026a19a277.cer (raw, json)
Hash identifier:          y0+cIxs78oBBUkhddCFq8tuTzSRTDCRnNt2l+joa/gw=
Subject key identifier:   69:38:49:00:80:EB:4C:0E:1A:D8:53:F7:3F:ED:A5:8C:98:62:CF:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF55CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/d8f699f3525b39056b0d16e9f4fb58026a19a277.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 May 2021 20:12:49 +0000
Certificate not after:    Fri 26 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 265828
                          IP: 45.71.196.0/22
                          IP: 2803:4c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15685070 (0xef55ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 18 20:12:49 2021 GMT
            Not After : Jul 26 06:00:00 2024 GMT
        Subject: CN=d8f699f3525b39056b0d16e9f4fb58026a19a277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:16:41:51:d1:8c:a5:08:fe:f5:b6:c8:d4:
                    b5:af:0e:3b:d6:7d:0b:8f:18:5b:96:cf:53:61:4a:
                    7b:ef:4b:ce:a3:03:fb:a3:4f:75:fb:50:c8:cd:82:
                    2c:0a:6b:15:e6:8f:ad:36:ed:eb:ba:b0:a6:0e:af:
                    f4:a5:b6:8c:d2:0a:4d:0a:0c:2d:34:8f:6e:46:30:
                    81:5d:1b:b6:1b:45:7c:5f:6c:f3:30:8c:a0:8f:0e:
                    21:80:8f:22:6e:9c:7e:c0:e7:78:2e:04:c2:34:a5:
                    94:25:68:ca:e4:15:75:9a:be:21:63:5a:d5:5f:70:
                    12:dc:1d:d6:9f:92:56:1f:53:be:35:c6:32:8f:4c:
                    8d:32:60:4a:7f:fe:df:b2:f1:0f:93:6e:4a:90:21:
                    de:0a:52:f3:bb:ff:25:a3:d8:ac:93:13:04:13:49:
                    c9:c8:33:1c:b0:f3:f7:8a:28:13:3f:3b:77:d9:c7:
                    b6:f2:ff:87:9d:df:98:c8:a3:4b:21:e1:59:1e:47:
                    91:f5:80:5e:08:72:ab:68:02:5b:47:aa:c3:1c:c3:
                    b0:a8:5e:d1:56:a6:0e:54:67:b9:e7:88:4f:14:3f:
                    d3:e1:fe:7c:15:33:7f:19:39:ff:cc:4c:52:d1:f3:
                    c6:2f:aa:1d:1f:2c:a2:ac:e6:d2:af:1c:98:23:15:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:38:49:00:80:EB:4C:0E:1A:D8:53:F7:3F:ED:A5:8C:98:62:CF:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/d8f699f3525b39056b0d16e9f4fb58026a19a277.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.196.0/22
                IPv6:
                  2803:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265828

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:0a:4b:2b:ab:61:3f:60:07:e3:cf:fc:f3:09:54:11:a7:
         d2:f5:55:71:97:14:18:0f:e6:99:a8:b4:72:e9:c6:56:6d:35:
         01:68:0e:8c:48:b4:65:d6:23:09:8e:c1:2d:94:3b:9d:50:8d:
         cb:11:1f:00:73:6c:52:f8:3c:5f:4c:87:6f:8e:e6:23:d8:73:
         03:21:89:26:b7:c7:b8:b3:ba:67:35:cf:5b:58:bb:d7:ea:3d:
         d0:51:b0:85:95:53:c0:16:73:fd:ae:6c:cd:e6:b8:af:bd:c0:
         04:e0:3b:da:5c:a4:09:e6:14:90:e2:49:1e:f1:37:18:40:5f:
         a6:6a:1e:98:02:af:c4:f5:d9:16:60:1a:1b:d4:af:33:78:22:
         9f:8a:98:48:2f:a5:27:f8:91:05:57:99:58:5c:d6:18:40:9f:
         47:fb:84:41:d8:89:6e:33:ca:60:7f:50:c7:b8:8c:90:1a:eb:
         3c:de:40:26:80:21:9d:2f:98:24:c8:12:db:db:fe:68:94:b9:
         4d:58:32:78:72:77:2b:2f:bb:dc:aa:09:c6:7a:97:f5:cb:d4:
         71:4a:1a:50:b3:cc:f5:0b:a7:11:77:c3:2f:cb:0c:46:70:2b:
         7d:5b:38:e5:89:98:40:9d:72:7c:50:17:89:a8:b9:15:d6:0c:
         08:f8:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----