Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df6777c83b4a4a37f042b28ecdd7c8deadefd729.cer
File:                     df6777c83b4a4a37f042b28ecdd7c8deadefd729.cer (raw, json)
Hash identifier:          J3IfelT1ErqnkJMF7rVe73l6UxKh4WdmigKZe53Pjfs=
Subject key identifier:   D1:46:18:6D:FD:86:FF:1E:39:B4:EA:7B:D0:8E:B1:C6:14:A3:D4:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DABDBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/df6777c83b4a4a37f042b28ecdd7c8deadefd729.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Oct 2020 02:39:24 +0000
Certificate not after:    Mon 29 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 27817
                          IP: 167.249.40.0/22
                          IP: 190.15.0.0/19
                          IP: 2001:13f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14335423 (0xdabdbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 02:39:24 2020 GMT
            Not After : Jan 29 05:00:00 2024 GMT
        Subject: CN=df6777c83b4a4a37f042b28ecdd7c8deadefd729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:a5:cc:81:25:18:7f:ca:82:f8:e1:15:22:
                    a5:45:35:f2:49:4c:d8:92:06:5e:75:5e:05:29:60:
                    cf:f0:f5:51:1e:90:6a:a1:20:17:99:c8:65:75:f2:
                    63:0e:a0:4e:77:33:48:4b:29:4e:8d:d3:dd:ee:3d:
                    2c:40:f6:df:73:be:96:b8:f0:65:e6:ce:58:cd:61:
                    9f:e4:33:f7:04:b2:7d:d8:ab:41:55:30:87:e0:1d:
                    6e:06:04:37:ad:74:e8:26:a2:14:40:e0:d7:9e:5e:
                    c6:7e:47:86:c5:2a:24:f7:46:ae:9c:6f:74:04:6e:
                    e9:69:0f:c4:49:0f:83:ca:70:f3:8c:c8:d2:ea:c2:
                    27:bf:3e:be:86:a4:a9:14:ec:b5:40:8c:fc:3e:a4:
                    b9:30:bd:91:e7:70:6a:f8:85:27:1e:4a:74:64:07:
                    bb:37:9e:e3:70:06:4c:ac:ab:af:38:29:87:14:26:
                    14:13:e9:ce:f9:50:dd:49:59:ae:98:20:e7:23:dc:
                    af:77:c2:b6:0d:b8:fd:e7:50:ec:cc:36:32:86:6d:
                    eb:69:52:be:ca:bd:8c:7e:49:1c:09:67:52:bf:5d:
                    3a:e3:40:e2:75:5f:61:35:3c:40:98:2c:72:c9:11:
                    72:e6:01:fc:06:56:85:09:a8:5c:7c:bf:c5:71:45:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:46:18:6D:FD:86:FF:1E:39:B4:EA:7B:D0:8E:B1:C6:14:A3:D4:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/df6777c83b4a4a37f042b28ecdd7c8deadefd729.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.40.0/22
                  190.15.0.0/19
                IPv6:
                  2001:13f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27817

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:d1:64:36:cc:66:9a:de:da:e3:3e:d2:37:9c:8b:81:a1:
         05:84:f7:2a:bf:19:6d:9c:e4:7d:6c:1d:65:d4:db:cf:cd:b3:
         75:60:02:1b:d6:8b:26:5e:3b:a0:dd:ad:ef:f3:52:13:4a:ad:
         ef:53:36:e6:0b:df:49:1b:27:c3:71:78:f3:4c:e6:97:c1:69:
         32:6a:07:cc:0f:ff:75:ca:6c:66:56:2a:03:fa:c2:56:57:9f:
         a0:25:13:34:4f:97:88:71:e1:91:a4:c6:78:47:26:c4:19:2c:
         6d:f0:e2:5e:e0:06:33:4b:b8:15:ae:5b:1a:4d:e9:87:c7:9c:
         b5:6b:ab:e3:42:70:03:2e:2f:72:b0:80:62:0d:00:f2:e3:d5:
         9c:3e:f8:25:a5:51:8c:dc:00:8c:87:8e:51:ac:75:b6:cc:70:
         bd:25:3b:98:77:b3:21:c8:c5:8a:36:3a:75:b6:b6:23:9e:85:
         c3:d4:ca:d9:f2:71:bd:ac:6c:ac:13:cb:72:41:21:f8:1d:24:
         68:be:bb:c8:81:7a:ed:da:f7:7d:68:7e:53:ef:b9:f2:c4:5b:
         56:1b:b9:9b:7f:18:f9:04:b6:2c:15:85:e8:4d:97:b9:30:49:
         cd:74:66:96:e5:2a:50:65:56:be:fb:4c:12:f6:63:a9:79:2a:
         b9:9d:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----