Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
File:                     e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer (raw, json)
Hash identifier:          SJF5h55+awYNrkCeGjnq+yqoryall4ULQZ84cAxtNkM=
Subject key identifier:   3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF084D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Nov 2020 23:21:28 +0000
Certificate not after:    Tue 19 Mar 2024 01:29:36 +0000
Subordinate resources:    IP: 138.99.144.0/22
                          IP: 2803:d840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14616653 (0xdf084d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 19 23:21:28 2020 GMT
            Not After : Mar 19 01:29:36 2024 GMT
        Subject: CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:da:c7:be:a4:a6:72:d1:bf:18:98:ee:6d:
                    5e:e5:4b:48:7f:d6:36:4d:9b:a9:8a:ff:f8:7a:a6:
                    00:84:27:79:af:1d:ef:8f:1d:38:58:d3:85:55:6d:
                    d6:a1:58:a0:5d:e7:b3:5d:0f:4d:3a:98:77:24:b7:
                    40:62:a0:17:23:ee:2a:41:c3:3f:e1:9a:39:6d:12:
                    87:e6:2c:65:90:ba:99:dc:5b:3e:0c:84:8c:f9:46:
                    69:23:fe:4d:af:02:58:cb:4a:b2:9f:78:49:b3:16:
                    86:30:3f:5e:5e:bc:ab:79:13:eb:5a:61:9b:61:ee:
                    a7:33:67:46:fd:9a:23:d2:d9:79:08:db:81:7f:ef:
                    d1:09:15:80:9b:f2:0d:90:87:15:7d:21:1d:cb:ae:
                    8b:5e:d6:07:42:f8:22:19:2d:bb:d9:2d:50:f7:fd:
                    22:01:f0:3f:8f:4c:36:57:42:63:5f:5c:dc:e8:04:
                    16:df:a0:f4:e0:3e:68:ea:11:b8:3d:e4:59:37:25:
                    36:26:de:eb:80:b4:77:70:fe:4f:08:c2:8a:60:8f:
                    7d:99:c1:ad:08:94:e4:cf:17:c2:4e:0e:79:15:88:
                    a7:48:4f:55:c3:c0:bb:4d:30:95:d4:e0:71:11:53:
                    5a:2d:1f:06:88:80:86:8d:23:d0:e9:47:6f:a7:61:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/22
                IPv6:
                  2803:d840::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:96:85:d8:b2:c7:80:f5:e9:bf:6f:11:31:3f:29:c8:fd:dd:
         e8:db:c9:81:f3:04:3c:23:5b:a2:0a:5a:12:85:cf:1b:0d:de:
         d1:81:05:40:1d:07:de:63:0b:e2:ab:a1:e1:7a:fc:2e:8f:65:
         66:bb:cf:0e:8e:39:4d:f9:ef:66:06:73:d0:e1:22:4a:78:17:
         a0:25:51:06:13:cd:d9:c9:5c:e0:79:8a:27:00:34:d3:04:27:
         eb:6f:70:ed:7e:78:d7:e7:24:f0:52:a1:03:c2:65:fa:38:48:
         9b:e8:3d:cd:b5:bb:e8:95:89:54:03:d6:f6:b2:0c:11:00:2e:
         d2:af:01:10:38:d5:77:0d:14:41:6c:32:5e:76:43:c4:db:63:
         48:a6:54:dd:5f:b7:96:a2:ea:d6:3e:93:bd:3e:94:fa:53:9c:
         0a:f8:ed:5f:6c:0d:76:ae:56:60:97:bb:4e:19:9a:a3:97:9a:
         22:13:aa:6d:36:23:74:a9:43:10:07:6f:15:61:40:b8:4d:c1:
         66:4d:bf:36:e9:f4:b7:fe:57:31:d9:22:a8:b4:8c:12:dc:26:
         5c:3a:5a:d3:63:1f:78:23:bd:f7:6e:15:9b:95:02:09:82:53:
         f8:6c:ec:c4:81:8b:a5:41:33:01:c8:8c:4c:4f:79:d0:26:d0:
         1d:12:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----