Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfca89703c0988a82ca303cfa33eb77e44a31714.cer
File:                     dfca89703c0988a82ca303cfa33eb77e44a31714.cer (raw, json)
Hash identifier:          dFA1BA/dekmnDCb58WP1dNrCbN78WhNpkh8DS4v/F04=
Subject key identifier:   A5:FE:89:6F:11:B7:8F:FD:C7:01:E4:F0:2A:9E:9B:76:52:E6:AD:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD6F7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/dfca89703c0988a82ca303cfa33eb77e44a31714.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 08 May 2021 01:13:45 +0000
Certificate not after:    Sat 02 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 19077
                          IP: 190.4.96.0/20
                          IP: 200.0.148.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14511996 (0xdd6f7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 01:13:45 2021 GMT
            Not After : Mar  2 06:00:00 2024 GMT
        Subject: CN=dfca89703c0988a82ca303cfa33eb77e44a31714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:15:b2:ec:9f:60:da:d5:4e:5d:4b:95:21:
                    5c:57:1c:02:cf:bc:3d:4d:16:d6:68:74:80:2a:58:
                    00:1b:93:01:ab:6b:43:10:71:0b:85:f9:d1:b4:94:
                    bf:a2:18:e2:fe:9d:17:33:80:d6:27:48:75:44:1e:
                    29:24:4b:82:4f:19:96:6e:d5:e9:58:74:d4:1a:22:
                    c0:00:b5:01:7d:54:a6:d6:ea:2d:65:24:e8:57:b5:
                    e7:93:3c:f5:e7:a9:49:43:de:9d:b8:3e:df:fb:69:
                    e0:a5:ff:52:2e:c5:d4:a7:c9:e8:c4:fb:e5:8b:e9:
                    6d:75:de:52:dd:0b:bc:93:5f:d4:c1:27:34:cb:a2:
                    70:b5:8f:47:ae:f2:31:d7:bc:25:bd:5f:5f:a3:9e:
                    9a:27:af:1f:ce:f4:36:93:e1:7a:65:8e:b1:fa:2d:
                    d7:dc:1c:e9:fe:01:0d:2b:df:07:9b:bd:17:2b:f6:
                    7c:38:c4:d1:f8:f0:39:cb:98:c1:05:1e:1d:10:49:
                    e4:0b:64:43:72:78:3d:32:76:a8:26:13:5e:b9:de:
                    81:96:ae:07:85:06:cf:d6:96:dd:cc:5e:ad:fe:38:
                    94:0d:94:73:34:ed:a0:54:7c:72:8b:fb:32:8a:51:
                    51:7b:c0:ef:1f:a2:2f:b4:e5:b5:bf:a4:49:90:d2:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FE:89:6F:11:B7:8F:FD:C7:01:E4:F0:2A:9E:9B:76:52:E6:AD:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/dfca89703c0988a82ca303cfa33eb77e44a31714.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.96.0/20
                  200.0.148.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19077

    Signature Algorithm: sha256WithRSAEncryption
         02:43:34:f3:b2:5c:90:c9:00:ac:7e:b7:7f:a5:08:e2:3f:37:
         de:b2:20:c8:1f:11:99:13:58:6e:10:09:20:2f:fa:bd:23:a5:
         be:d8:6a:c7:aa:8f:0a:a8:54:5c:7a:e3:54:fd:bc:7c:2d:11:
         16:3f:86:05:e0:ed:57:61:b8:dd:bd:90:e5:4c:d0:70:d9:14:
         47:2a:10:f8:52:fd:4e:83:2b:0b:e6:b7:ca:42:23:34:e7:09:
         53:56:62:e0:3e:66:81:29:8b:70:71:48:86:89:4c:c4:6b:40:
         3a:3c:04:a1:59:87:1c:f5:7a:81:ec:ee:ea:4f:2e:bc:41:87:
         0a:f9:55:89:9c:97:8a:c1:1f:50:79:1f:bc:0c:72:d8:c2:9c:
         96:02:f9:4b:5c:b7:4d:e2:74:c6:8c:bc:a0:ed:ba:b6:05:a9:
         9d:70:7f:ed:da:8f:02:a4:9c:21:75:f5:d5:87:ed:87:17:62:
         5d:4e:1a:af:3e:60:79:1c:94:8a:1f:e1:86:f6:a8:0b:b6:e8:
         7c:06:25:52:7e:5a:09:c5:ba:b5:6a:9c:6c:a8:d8:eb:0d:f7:
         78:dc:f0:bf:d1:df:6d:09:43:20:e5:a2:3c:81:44:4c:28:68:
         b9:fe:e0:f8:0b:52:4d:34:c4:bd:4d:57:35:db:71:86:f1:f7:
         38:a0:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----