Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e074773f8d01bb1253672f7e07391dbeefd322f5.cer
File:                     e074773f8d01bb1253672f7e07391dbeefd322f5.cer (raw, json)
Hash identifier:          a/z6K6c/dWESJa8cpRzkp8mAEU4zpy8blqNpAcqFpJI=
Subject key identifier:   71:7F:64:00:C3:D1:0B:41:B6:B1:F7:D8:72:29:23:55:65:80:25:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D64B22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/e074773f8d01bb1253672f7e07391dbeefd322f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Feb 2021 12:14:17 +0000
Certificate not after:    Sat 02 Dec 2023 15:44:48 +0000
Subordinate resources:    AS: 271863
                          IP: 167.250.238.0/23
                          IP: 200.6.43.0/24
                          IP: 2803:5410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14043938 (0xd64b22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  3 12:14:17 2021 GMT
            Not After : Dec  2 15:44:48 2023 GMT
        Subject: CN=e074773f8d01bb1253672f7e07391dbeefd322f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:69:d1:0a:7d:9e:c1:20:ad:c1:48:c7:d6:
                    05:c0:1d:94:bd:b7:3e:7e:e7:5e:53:42:a1:c5:33:
                    d8:95:3b:f7:11:52:95:12:1f:c3:ce:55:fb:2c:91:
                    b4:0e:8e:a1:4e:df:f6:51:c7:55:c3:c0:f6:16:5c:
                    d6:7e:f8:5c:b2:e7:06:b2:0e:7d:e7:24:1d:53:34:
                    19:5a:86:00:15:3e:07:ba:5c:39:ff:14:0c:56:ab:
                    94:46:1c:48:0e:b9:d1:60:ec:2b:db:87:0f:d3:97:
                    4a:f8:b8:17:ae:51:55:0c:8a:87:04:29:f1:79:13:
                    20:82:83:0e:bb:d4:ba:9e:d9:f1:c8:3f:1d:b3:f7:
                    3a:0b:f0:8f:b7:22:aa:21:fc:4f:0b:43:32:2e:fb:
                    f3:29:9d:81:6c:63:f9:26:8b:89:1c:5e:d3:e7:7a:
                    81:5d:62:be:46:9f:30:a9:4b:de:b9:f2:6d:2d:b6:
                    4f:17:3a:bf:03:c8:67:c1:46:39:25:22:fe:10:25:
                    48:6c:e8:42:8d:e0:7d:7c:f3:11:e6:de:a0:0c:bd:
                    a5:47:e8:54:bc:a9:2f:37:d0:09:a2:c9:78:0b:58:
                    44:52:24:d7:ab:ad:a3:ff:67:15:c2:ee:43:d7:7a:
                    3b:9c:3b:ca:50:8b:fa:ea:e2:b9:2b:6a:f1:39:3c:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7F:64:00:C3:D1:0B:41:B6:B1:F7:D8:72:29:23:55:65:80:25:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fc192ec6-d788-4f99-91bc-45db5d65ade5/e074773f8d01bb1253672f7e07391dbeefd322f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.238.0/23
                  200.6.43.0/24
                IPv6:
                  2803:5410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271863

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:f2:ec:f3:33:52:04:22:18:05:d1:d2:c0:bc:87:df:a0:
         41:41:dc:d7:ae:94:9d:55:95:39:2c:ff:24:47:dd:00:3b:c2:
         4b:f5:fe:d7:6c:5d:66:d4:f2:a8:aa:a4:ee:c1:a5:8d:c0:63:
         c2:b7:6e:67:c5:70:11:a0:99:32:59:0d:cf:c5:7c:8d:a8:77:
         95:73:a8:98:e9:6e:ca:c1:b5:5e:c0:b3:c9:8d:a5:11:2b:07:
         8c:b6:33:10:7c:20:9c:e6:b8:89:22:02:3e:6b:cd:62:a8:a3:
         6c:19:20:d4:6d:a8:0e:33:a5:b8:de:77:25:4a:5c:26:a0:54:
         87:0e:36:25:dd:78:6d:ab:b1:e8:d4:f5:b8:63:da:d5:d5:6a:
         df:0a:12:26:40:e3:ad:c1:c0:78:99:55:0f:8d:46:ca:a9:41:
         4d:1e:00:69:ef:1c:9a:f5:f3:fa:8a:81:61:42:26:48:ad:03:
         29:b1:be:04:e4:0b:cf:9c:b4:83:87:eb:aa:97:e9:79:5e:b7:
         db:ab:7e:56:c9:b1:56:2f:09:50:53:ae:46:3d:90:4a:c2:0e:
         df:5c:47:05:f3:99:c2:a7:43:db:55:2b:e6:44:27:e4:f7:03:
         85:d3:c6:01:47:12:80:28:c3:00:31:b9:27:8f:04:d0:79:40:
         54:bd:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----