Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.cer
File:                     47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.cer (raw, json)
Hash identifier:          NcUZxFgEEPxkh7NMrbjHe7pDGwo5PYHCaDRnCEgdjyk=
Subject key identifier:   49:EF:4B:91:69:AA:53:FD:39:08:98:AC:33:76:C6:A2:AE:3B:E8:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104A09D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jul 2021 17:49:00 +0000
Certificate not after:    Tue 21 Jan 2025 17:39:46 +0000
Subordinate resources:    AS: 263764
                          IP: 167.249.216.0/22
                          IP: 190.106.80.0/21
                          IP: 2803:2400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17080477 (0x104a09d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 26 17:49:00 2021 GMT
            Not After : Jan 21 17:39:46 2025 GMT
        Subject: CN=47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:d7:bf:1a:86:87:13:81:1a:d2:bb:a2:81:
                    b1:66:6a:fd:61:df:bc:c4:de:f8:a2:0d:44:2e:52:
                    28:67:0c:84:1b:c8:8d:e3:77:5c:2f:87:57:6c:a0:
                    0b:f9:8a:8d:d6:68:dc:d8:19:0b:80:ce:28:c3:d8:
                    63:6a:d0:1a:db:d5:66:7c:01:46:82:12:ad:82:f5:
                    d5:22:02:cc:54:a3:b1:e4:97:71:17:cf:89:58:a4:
                    7e:ee:a1:13:ce:e3:c6:c6:86:cb:33:b1:dc:75:41:
                    a8:4e:d5:0b:38:c8:50:ab:b8:65:6c:c8:dc:9e:25:
                    f4:1c:b5:c9:fc:bf:45:c5:c2:20:bd:2e:07:ae:67:
                    18:3e:0c:be:4a:83:3b:d3:41:6e:30:86:6d:3e:66:
                    37:05:8a:1e:ba:dd:89:57:17:d7:3a:b8:8f:51:f5:
                    11:54:ef:5e:a3:aa:dc:b1:5c:f4:df:09:fe:7f:7e:
                    51:ba:3e:8a:d1:8c:16:e1:4d:37:5e:b1:fa:06:de:
                    aa:b0:96:f3:84:b1:fe:51:b4:17:b4:40:2c:e7:f5:
                    46:31:5c:43:c1:b6:21:99:4c:0f:c9:b2:17:2b:c7:
                    b1:62:8e:d2:a4:17:1e:ce:21:55:ca:de:86:67:89:
                    6d:11:37:a2:f8:d2:31:87:75:48:22:18:dc:f7:d2:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:4B:91:69:AA:53:FD:39:08:98:AC:33:76:C6:A2:AE:3B:E8:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30f78253-2545-487a-8286-59bd4427086e/47bde08e140e1a5d085d4fb2cb0550bfa8d5d19f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.216.0/22
                  190.106.80.0/21
                IPv6:
                  2803:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263764

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:61:5a:53:f7:fd:27:b6:78:2c:81:60:0d:e8:dc:39:cd:
         33:49:1b:b9:b6:f9:f0:d1:28:dd:85:cc:99:b2:b5:d0:14:28:
         7a:6a:e8:d3:95:79:27:52:67:80:5e:6a:21:39:2d:e2:86:38:
         2a:44:93:d4:03:83:83:b5:11:1c:11:f8:ba:17:10:2d:f7:60:
         e3:95:9f:a9:66:2e:0c:04:c4:34:6c:27:41:d5:54:a6:6d:06:
         ea:e7:30:bd:cb:24:3e:22:82:70:05:74:76:52:20:50:d1:c2:
         99:02:b1:71:07:31:ef:e2:4c:d0:fd:f3:15:ac:dc:cc:57:97:
         1a:53:36:b7:0e:9d:bd:63:3d:a3:a1:10:08:9a:0e:da:b1:fc:
         3d:2c:bc:0b:d0:5f:8f:06:a1:02:26:6f:84:9e:67:35:28:eb:
         ed:e1:c3:9d:9b:49:37:14:e5:e7:45:f2:ab:75:32:03:11:2d:
         4e:a4:b3:8e:4d:e3:0f:17:bd:30:48:bb:f8:56:72:a0:e5:33:
         6c:2d:06:81:b3:53:1a:2c:51:a4:43:0c:32:8e:ff:79:d6:9e:
         27:46:83:1e:a1:2d:db:23:49:47:eb:05:26:46:9e:d0:16:89:
         b1:db:b9:26:9a:de:ab:7b:60:b4:af:09:9a:75:e5:33:85:80:
         9b:a9:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----