Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9a783da1aeb3cae7aede602a40423c90e2036c2.cer
File:                     e9a783da1aeb3cae7aede602a40423c90e2036c2.cer (raw, json)
Hash identifier:          35EAkW2VYBuYmPw3T2qKbdJTPWWUbOc866EJapkEp/4=
Subject key identifier:   EC:B9:87:2D:66:22:F7:0B:84:27:A8:9B:15:84:A3:D0:68:14:0D:5C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED66CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/e9a783da1aeb3cae7aede602a40423c90e2036c2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 26 Jun 2021 22:54:45 +0000
Certificate not after:    Thu 11 Jul 2024 14:56:29 +0000
Subordinate resources:    AS: 271793
                          IP: 201.131.65.0/24
                          IP: 2803:10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15558349 (0xed66cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 22:54:45 2021 GMT
            Not After : Jul 11 14:56:29 2024 GMT
        Subject: CN=e9a783da1aeb3cae7aede602a40423c90e2036c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:c7:6b:e3:11:9f:c0:e0:e6:0d:53:74:27:
                    16:2d:be:b6:bf:a7:f0:6e:45:91:67:6e:8b:38:5d:
                    9f:4d:1f:59:60:f7:8c:58:b2:ee:b8:7d:7c:b7:f4:
                    56:ca:7a:30:a2:8e:44:57:8c:cb:66:8e:f3:bb:83:
                    03:b7:5d:66:f4:25:3f:76:76:eb:07:0e:cf:92:4a:
                    8d:77:52:3f:a0:6e:e5:6f:16:3c:69:f5:e7:d7:2a:
                    46:35:75:c8:c4:3d:b0:ad:f9:a3:a3:91:72:ee:09:
                    d8:df:52:f4:e5:ff:c0:a8:73:58:a6:53:ef:fe:d8:
                    8f:35:9d:8c:b3:92:25:42:fd:35:c9:b5:13:3a:91:
                    c6:2d:e4:1e:9b:8b:5d:08:b6:bd:c4:11:09:d0:3d:
                    1f:33:6c:92:39:7f:b9:4d:6d:0f:fc:17:e9:2d:66:
                    4d:4f:c8:1b:90:c6:3f:34:56:03:f4:03:22:d8:fc:
                    79:14:76:b0:f1:3c:6e:ef:2b:4e:a0:2f:02:db:8b:
                    3c:19:85:7e:fa:9c:d4:dd:03:27:da:de:b2:c8:12:
                    f1:66:4e:0e:bd:09:a3:cd:d3:e2:55:5e:28:bc:b9:
                    15:46:8e:63:68:7b:57:be:c5:7f:14:65:18:3f:94:
                    c3:dd:11:69:6b:98:67:64:9d:91:89:9f:61:ab:9b:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B9:87:2D:66:22:F7:0B:84:27:A8:9B:15:84:A3:D0:68:14:0D:5C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/e9a783da1aeb3cae7aede602a40423c90e2036c2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.65.0/24
                IPv6:
                  2803:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271793

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:6e:31:0b:1c:68:58:5f:f6:fd:19:62:12:fe:f8:00:9e:
         85:68:b6:d0:62:4f:4b:ac:0b:de:38:83:38:55:d7:3c:2f:e9:
         b2:7f:67:ed:e5:7a:d2:f9:bc:07:ec:8c:1e:66:3b:f5:4a:8e:
         a8:1b:73:f7:49:4a:17:6c:63:4c:2b:e9:a0:29:88:49:a1:09:
         76:34:50:2f:05:26:79:22:a3:ca:69:6f:1b:17:98:40:c5:57:
         40:eb:f9:da:a0:ae:8c:37:9b:6c:7c:97:de:84:12:93:15:9b:
         d9:a1:a9:db:c9:18:eb:12:da:31:f9:e5:a7:60:b3:89:2b:ff:
         f0:59:77:b1:6b:a0:76:2d:65:86:aa:f3:fb:a3:1b:32:d3:51:
         e6:e3:98:66:fa:65:5e:07:8a:78:fe:e6:12:fc:14:79:11:16:
         52:45:a3:7b:b8:2b:09:d3:75:bf:58:f8:dc:8d:e2:6b:bb:05:
         fd:fe:3a:58:27:a0:24:e0:56:2a:dd:ed:8f:60:c7:49:2a:68:
         27:bc:9d:ac:c6:9c:4d:49:c6:25:15:43:71:91:46:a5:3c:bd:
         e6:4a:1a:0b:70:93:d6:f4:da:ac:01:6d:5a:db:ab:6c:84:32:
         2b:d2:0b:6c:d9:32:49:c5:92:ac:08:e2:a3:92:34:8f:d5:bc:
         57:a1:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----