Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ed2ee59fa34382a76dd796aa7b7fc99001fa7e1.cer
File:                     3ed2ee59fa34382a76dd796aa7b7fc99001fa7e1.cer (raw, json)
Hash identifier:          7B3NxPrk1SwRnYna6ztKcURPRYPC9uOd+1stdPWrGko=
Subject key identifier:   92:0F:9A:DA:5C:C6:FB:F3:24:5B:71:4B:EE:90:6A:D0:0D:10:E1:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01037336
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fba46198-74ab-4b74-9f61-21ec81bd9296/3ed2ee59fa34382a76dd796aa7b7fc99001fa7e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fba46198-74ab-4b74-9f61-21ec81bd9296/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 May 2021 16:45:53 +0000
Certificate not after:    Sat 11 Jan 2025 13:54:49 +0000
Subordinate resources:    AS: 271877
                          IP: 2801:14:e800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17003318 (0x1037336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 18 16:45:53 2021 GMT
            Not After : Jan 11 13:54:49 2025 GMT
        Subject: CN=3ed2ee59fa34382a76dd796aa7b7fc99001fa7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:5e:93:5d:45:cf:ea:ca:4f:a1:96:98:8d:
                    38:e8:a8:1b:23:09:89:19:ce:1f:0f:e4:5d:39:bb:
                    00:5c:9f:0c:70:ae:21:bf:45:1a:ba:25:e6:2b:dc:
                    54:ef:d6:5f:5f:f7:20:1e:81:b8:f0:d0:69:e6:1f:
                    5b:c0:ad:69:b5:c9:9d:c9:75:83:7e:64:1f:23:57:
                    ad:bd:76:c3:49:e6:4f:8f:21:84:9a:f0:20:00:78:
                    8c:21:ad:0e:de:72:27:5a:5d:69:3f:a1:2b:51:77:
                    f8:74:7d:70:b2:b1:00:8b:ea:10:ed:24:7a:55:25:
                    c6:41:55:e2:dd:7c:e3:42:fa:5a:61:2c:cd:c1:58:
                    e0:91:57:6d:a3:93:6b:ca:4e:f7:cb:c9:ef:dc:41:
                    97:0c:e0:92:78:e0:64:15:00:59:72:bd:67:c1:f2:
                    be:e0:75:6d:c8:de:2c:36:62:0d:ae:28:23:59:b0:
                    91:56:c3:49:e4:3b:04:fc:42:f3:44:ee:d1:16:6a:
                    d2:95:7e:96:b6:c7:f9:89:41:83:61:1f:95:d0:9d:
                    66:74:58:d2:1a:34:de:77:c1:fa:21:1b:c7:79:86:
                    fa:25:85:1e:f3:05:2a:3b:b2:34:9e:cf:df:b7:0d:
                    82:a5:ad:39:cc:ff:f3:c1:a6:b7:14:24:7e:16:df:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:9A:DA:5C:C6:FB:F3:24:5B:71:4B:EE:90:6A:D0:0D:10:E1:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fba46198-74ab-4b74-9f61-21ec81bd9296/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fba46198-74ab-4b74-9f61-21ec81bd9296/3ed2ee59fa34382a76dd796aa7b7fc99001fa7e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:e800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271877

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:19:7a:16:90:23:c5:2e:a2:2f:8c:3f:e4:bf:c1:1b:d0:
         5c:3e:ff:33:96:c9:9d:ec:8b:38:70:97:6b:86:7b:99:16:e3:
         d6:7a:37:a3:ce:22:ee:63:28:d6:e4:22:9b:63:1e:5f:bd:a6:
         ea:ce:d1:dd:e5:00:58:4d:e2:35:17:af:70:ff:77:d4:ae:7d:
         6c:3b:b9:b0:76:8b:90:31:27:7e:33:52:74:55:fd:24:ce:e4:
         e6:21:8f:9f:19:ec:47:7f:76:f7:d0:24:e8:cc:42:ef:e8:4c:
         8c:10:5c:19:1d:ea:93:50:36:16:dc:8f:30:0b:a0:60:68:bb:
         c4:07:97:4b:00:a9:87:98:a7:68:b3:29:3a:7a:26:2c:98:56:
         ba:46:24:34:a8:8d:48:fa:e2:5c:14:9f:1f:6c:66:e2:a2:16:
         87:fe:47:69:24:07:6b:09:bc:8d:b1:f3:73:0e:be:f8:ee:80:
         47:63:4c:b1:a8:08:f4:c3:ea:56:d8:a1:2c:ec:5e:6b:9d:84:
         ac:6e:2f:50:75:35:2c:15:8a:26:3d:fb:e3:4e:82:2a:28:63:
         4a:a5:aa:72:ab:51:c7:7d:b6:81:dc:e3:88:3b:ea:5e:32:1a:
         97:ba:b0:cc:fc:e4:7a:16:85:41:86:19:dd:3c:a5:1c:9b:00:
         b7:1d:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----