Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer
File:                     2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer (raw, json)
Hash identifier:          6LUu0O0gdRLqKwHbpMmDJFy7oqEfXjrj36g1Am2S0lc=
Subject key identifier:   3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01041292
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Feb 2021 19:04:05 +0000
Certificate not after:    Wed 15 Jan 2025 21:03:52 +0000
Subordinate resources:    AS: 264685
                          IP: 168.227.96.0/22
                          IP: 2803:340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17044114 (0x1041292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 19:04:05 2021 GMT
            Not After : Jan 15 21:03:52 2025 GMT
        Subject: CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:cd:97:1c:93:a8:d4:b6:68:3e:7f:1e:6c:
                    17:a9:6f:e6:e4:58:40:29:2b:0a:a9:0c:3a:66:47:
                    29:25:91:26:be:00:66:da:62:b5:65:bd:d8:8f:a6:
                    66:7f:dd:29:54:9b:1b:b8:e7:9a:ec:0b:32:16:4b:
                    03:c6:5d:5b:fc:ff:3d:94:a1:9c:5d:30:fe:3e:21:
                    bc:e9:c8:20:aa:6f:89:98:c8:66:fc:49:74:8e:85:
                    17:73:19:d6:a4:bf:ed:87:da:cb:31:f8:e1:c3:31:
                    77:0e:4b:1e:de:de:41:f6:2f:f8:d0:02:bd:a4:85:
                    15:fd:0b:00:bf:ac:7a:72:ee:b8:4f:ef:67:ea:43:
                    ad:fe:63:cd:e9:cd:0f:3b:fd:2f:c0:80:9f:da:92:
                    3f:f1:55:d5:b0:b3:b9:4c:a4:d3:55:c5:a8:a9:09:
                    3d:f3:15:ea:2d:99:a0:d3:c3:8b:47:0b:a6:73:71:
                    f4:ae:22:1a:81:f8:88:6b:eb:ec:1f:2b:87:98:c5:
                    03:1e:69:f9:48:ef:08:71:22:a1:e8:6f:38:22:23:
                    c6:ea:47:eb:06:c2:87:91:4b:71:74:02:9e:81:83:
                    07:74:23:33:07:bc:9f:4e:67:43:46:98:05:6a:6d:
                    f1:5c:74:4c:70:56:a5:36:e2:05:87:52:ac:6d:f2:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/22
                IPv6:
                  2803:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264685

    Signature Algorithm: sha256WithRSAEncryption
         a5:f2:d2:dc:c6:c2:ed:7f:46:cc:fb:8b:b5:1f:ec:d3:c6:04:
         2e:99:55:6b:96:7a:e3:d5:f3:9f:04:84:2a:2e:54:8a:c8:ac:
         a7:36:b9:fb:22:d7:5f:f3:11:a5:61:4b:e2:82:4c:a8:93:70:
         a5:f3:0c:d6:05:f9:64:7e:32:02:f2:91:22:bf:c5:d8:2e:bb:
         ee:02:5d:95:ed:a5:c6:ce:8e:00:2f:a4:21:71:50:f5:eb:e0:
         4e:87:ad:b0:f5:0f:9c:9f:23:b6:eb:12:70:dc:c9:40:27:27:
         d7:6f:08:5b:ea:33:43:24:b5:dc:fd:24:16:24:c8:61:5f:00:
         8a:db:10:2a:a6:8f:40:a9:75:a7:81:c9:ff:46:75:1d:e5:fd:
         4f:8b:69:5e:83:cc:46:80:94:e3:ee:d9:3e:c5:db:f4:73:a4:
         e7:b3:22:70:5c:6d:ec:64:93:4c:23:ec:7d:c0:3b:25:3b:6e:
         6a:80:45:c9:2f:8d:86:d9:59:aa:35:5c:62:5b:1c:3f:e4:6f:
         4f:63:05:43:96:9d:f5:58:24:93:eb:8d:2b:f3:1b:be:dd:52:
         33:63:41:d6:1c:04:c7:97:13:cd:20:fa:e5:44:d5:17:50:57:
         5c:62:3d:f3:60:e2:d2:27:88:b6:56:ba:e7:2a:0c:7a:79:9e:
         de:b2:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----