Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
File:                     e8fb249d4f9466e3a1a3e886e27e824279d45530.cer (raw, json)
Hash identifier:          SeQf97BlucFPVkGmsRjIm3XWASh/ecqZUWYZDHr8Tuk=
Subject key identifier:   0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFFED3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Aug 2021 17:30:09 +0000
Certificate not after:    Fri 29 Mar 2024 20:43:13 +0000
Subordinate resources:    AS: 264850
                          IP: 138.0.240.0/22
                          IP: 138.186.136.0/22
                          IP: 168.90.196.0/22
                          IP: 170.83.176.0/22
                          IP: 200.10.32.0/20
                          IP: 2803:6180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14679763 (0xdffed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 17:30:09 2021 GMT
            Not After : Mar 29 20:43:13 2024 GMT
        Subject: CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:d5:d0:0c:1f:dd:32:d8:a1:4b:1a:52:e8:
                    4e:fa:e6:39:01:ac:52:0c:53:7e:35:40:fd:b8:b8:
                    e7:79:0a:5c:30:4c:db:bb:2b:38:bc:da:17:f3:e8:
                    8b:81:2b:45:dd:3c:f9:0f:84:a8:ce:e1:2e:2e:77:
                    fd:78:99:89:83:9f:9d:32:93:30:61:e8:6f:4c:af:
                    c1:f7:38:18:ba:49:60:a6:d3:eb:2b:e2:76:d6:28:
                    59:78:35:64:5c:eb:fb:b5:dd:50:24:fc:1c:67:7b:
                    10:4c:f9:78:a6:5e:b3:a4:54:2a:5c:a5:81:24:0c:
                    13:ac:ee:36:63:86:cc:53:b7:c8:83:35:62:92:dc:
                    2f:ff:1c:4b:78:2f:74:0f:30:68:51:4c:34:5d:15:
                    31:61:4e:27:8b:8c:fc:9b:f6:4c:d5:f7:8f:f4:df:
                    45:df:06:29:40:ff:d0:b6:04:c0:3d:0b:f3:47:4f:
                    ca:49:55:e1:0f:0d:46:40:bd:35:b7:8a:44:ba:20:
                    65:cc:ff:56:b7:2d:09:bb:97:92:5e:a4:f0:43:fd:
                    38:f6:bf:5c:2a:cb:19:99:09:6b:95:b4:93:e1:bd:
                    62:a9:65:ca:bc:36:58:81:af:74:ac:73:c6:2b:f7:
                    18:63:5d:66:3e:1e:46:c9:ea:83:1b:07:ee:c5:36:
                    5f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.240.0/22
                  138.186.136.0/22
                  168.90.196.0/22
                  170.83.176.0/22
                  200.10.32.0/20
                IPv6:
                  2803:6180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264850

    Signature Algorithm: sha256WithRSAEncryption
         84:28:55:60:98:d2:d9:9d:47:e0:91:06:9c:d3:b1:18:3a:99:
         d8:b6:21:f3:13:82:49:8f:79:10:f0:9d:88:e6:fd:d9:cf:ca:
         96:4b:53:29:d0:3d:1b:7b:60:85:31:bc:d5:27:f5:88:1a:1f:
         e2:8d:3f:55:d7:a4:1a:af:bc:38:bd:0f:1e:b7:0e:bc:7c:91:
         66:e0:23:60:3c:8b:a0:cb:64:fd:0e:fa:99:29:41:7c:22:31:
         7a:e9:79:de:0d:01:07:56:00:2b:27:4a:85:95:f5:f5:a1:fa:
         13:96:80:40:d9:32:1c:aa:39:a2:60:be:4e:7d:9a:08:91:30:
         60:2e:32:2a:30:59:4d:00:8a:13:7f:07:26:bc:71:5a:55:fd:
         3d:c7:4d:0f:df:5a:bd:3f:43:52:e5:be:cf:5d:b6:ee:dc:89:
         c7:d3:67:57:e7:ab:54:67:4b:a3:f9:53:e2:f2:2c:eb:08:68:
         47:48:65:ee:d9:3b:eb:5d:d4:34:34:a6:d0:52:29:51:e4:e8:
         c6:06:a4:89:a0:a8:35:11:bf:b5:c1:51:a8:bb:89:73:ba:fc:
         9a:f6:88:d0:c9:e5:2f:cc:79:1b:7a:a0:b8:11:1c:93:c2:72:
         4f:94:e2:2a:b9:6c:35:99:52:4f:41:b2:83:80:8f:a2:ef:8a:
         31:64:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----