Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer
File:                     064899b606f78a681c0fd0649043cb728d259f11.cer (raw, json)
Hash identifier:          /HxWPeimR+Cjo+0d54hTO6LKtF2jGhYtilUsmsUX9Xk=
Subject key identifier:   CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101A19B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Apr 2021 04:08:12 +0000
Certificate not after:    Thu 19 Dec 2024 16:38:55 +0000
Subordinate resources:    AS: 267904
                          IP: 45.230.248.0/22
                          IP: 2803:f320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16884123 (0x101a19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 04:08:12 2021 GMT
            Not After : Dec 19 16:38:55 2024 GMT
        Subject: CN=064899b606f78a681c0fd0649043cb728d259f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:60:39:41:25:ea:b3:a4:9e:49:05:d2:c9:
                    a2:96:68:96:92:e8:9b:c1:04:25:fd:03:65:13:07:
                    6f:37:c0:0d:32:58:6d:c1:38:a5:52:16:45:38:9b:
                    a1:a2:58:e5:f3:42:a3:35:92:6c:ed:1b:1d:36:b5:
                    90:fb:1a:1f:a1:f6:16:c1:28:cd:20:b5:a5:20:72:
                    81:1e:43:3f:ed:52:c4:10:3d:ba:62:d5:79:bb:c1:
                    da:f8:8b:09:1c:f6:cb:8c:1d:18:e7:32:ed:72:91:
                    33:d6:dc:28:db:c0:cd:af:bc:29:af:4b:37:aa:82:
                    14:bc:09:3f:ee:62:8a:c3:30:f6:56:af:66:ab:04:
                    dd:95:9e:b8:72:fd:c7:27:0c:17:8b:35:31:b5:d6:
                    d4:c7:00:5f:7c:bd:9c:94:09:9b:84:fb:49:98:d2:
                    89:29:62:c8:b8:c4:95:14:33:ec:c8:0d:79:62:2b:
                    f3:cf:43:2a:ac:3e:fe:eb:12:88:12:3e:88:07:10:
                    57:ae:80:10:75:0b:94:2c:43:3f:01:d1:09:7c:7f:
                    ba:fe:90:2f:79:03:64:7a:df:26:ed:49:e3:81:41:
                    10:d6:e6:27:d3:8d:cb:e5:2c:9a:e7:fc:06:04:b9:
                    4a:bf:1a:9a:da:bb:f8:24:5d:cb:89:c0:e9:f4:34:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.248.0/22
                IPv6:
                  2803:f320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267904

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:b3:6b:73:20:a8:91:e0:76:dc:61:88:73:43:ee:eb:a7:
         54:16:a3:f1:a0:5b:62:80:bf:e3:9f:4b:3c:ba:31:01:55:e7:
         95:58:ad:d6:0c:75:89:99:0f:f7:94:8f:27:cf:1d:c8:1f:33:
         4a:cf:fc:fe:6f:0b:53:07:76:d3:76:57:2e:33:ac:77:e1:52:
         d7:35:a1:81:c6:42:e1:5d:04:98:8d:0b:9e:e4:d4:56:d5:8d:
         89:c9:66:0e:cb:a1:5a:4c:4a:f2:db:46:d5:1d:2d:8b:29:7e:
         6d:43:08:bf:66:72:90:72:f5:65:96:d5:43:cf:a8:46:80:f6:
         24:60:61:d8:f6:43:b8:b7:d6:8f:eb:76:0b:04:d3:ff:d9:65:
         4c:ae:91:79:b3:d3:42:71:e8:8a:47:ca:34:6f:24:25:be:2c:
         d9:39:75:98:2e:34:eb:4b:1b:15:f6:97:d5:03:a2:d4:a6:df:
         da:3e:53:8b:d9:d9:88:63:73:dd:97:af:b5:40:ac:87:77:a3:
         fc:da:64:5d:f0:37:eb:a9:89:d3:b9:a7:2c:14:ab:87:c2:b6:
         ef:01:bb:cc:35:28:ab:a0:32:7b:7d:1e:96:25:93:9a:c8:72:
         93:8a:19:a1:cc:0c:c6:80:d5:3a:05:21:85:40:f1:f1:dc:8b:
         41:e4:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----