Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
File:                     8977e71e589f7dff93910384f64766de5bd105bb.cer (raw, json)
Hash identifier:          CrKhSHLJMnQWp0YyT3zIWpRd7AYl05x33cxuJQYZkfw=
Subject key identifier:   1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010431D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 28 Feb 2021 16:27:12 +0000
Certificate not after:    Fri 17 Jan 2025 16:47:12 +0000
Subordinate resources:    AS: 262929
                          IP: 191.102.60.0/22
                          IP: 2803:9a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17052116 (0x10431d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 16:27:12 2021 GMT
            Not After : Jan 17 16:47:12 2025 GMT
        Subject: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e7:f9:be:c6:c6:87:a9:5e:99:05:d0:4d:01:
                    88:fb:a6:9f:02:a1:b9:85:b9:28:75:f1:f3:fc:ed:
                    51:40:ea:d6:d2:7e:2b:df:a5:b8:83:98:50:08:b3:
                    93:14:e4:bf:91:96:e2:78:5b:fd:b3:92:49:a6:79:
                    d3:40:a1:66:14:a8:61:8c:fc:1a:13:1b:1b:e4:65:
                    ab:d8:00:e4:8a:eb:18:f4:ef:b6:af:0e:9e:d1:8f:
                    55:86:76:e5:b0:e7:0f:e3:e2:34:02:3d:07:d7:7b:
                    b1:27:a5:47:62:36:32:7b:dc:2d:01:95:4b:cd:43:
                    08:e6:85:18:52:3a:ca:97:74:a1:81:6f:6b:5f:4e:
                    16:c6:a5:d6:1e:b4:90:1a:5c:ef:33:7b:86:a1:bf:
                    6a:0f:3c:e3:39:51:4a:e4:e2:96:7d:2e:58:07:4f:
                    bd:50:99:ac:73:a2:3f:aa:0b:7f:37:09:26:f4:9f:
                    e9:be:5c:90:29:e1:21:06:bb:e6:06:f4:b6:76:1c:
                    72:e5:ba:af:02:70:66:4e:4d:5f:3f:e6:5c:02:e4:
                    f5:76:65:33:6a:93:0f:f6:97:69:58:2b:ae:2b:5c:
                    e8:d5:01:b6:0f:a8:3e:b2:d0:a3:4f:28:d7:c8:ef:
                    95:99:03:77:b9:73:13:8e:4e:48:6b:c0:6f:7d:37:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.60.0/22
                IPv6:
                  2803:9a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262929

    Signature Algorithm: sha256WithRSAEncryption
         89:ed:12:e1:7d:f2:e3:a9:93:29:7c:ec:69:1c:c1:08:6e:a5:
         66:85:7d:7a:30:68:18:93:1d:ea:a6:ac:01:43:c4:08:3f:19:
         47:9c:d5:ff:d2:1b:a6:0d:c6:01:45:50:13:b1:10:a0:06:4b:
         3a:be:38:d3:57:c6:62:89:b6:18:50:08:e4:63:8d:af:d7:dc:
         2b:2b:7b:2c:e0:fd:1f:02:e1:88:f7:dc:2e:eb:8a:32:64:35:
         89:ce:b3:55:75:5b:9e:5a:d2:c3:b4:a3:d0:d1:19:b3:b3:35:
         d7:52:f7:0f:ce:8d:50:53:86:11:2e:91:dd:f5:05:65:4a:ee:
         9a:e4:a5:94:e3:04:38:3b:0c:64:ba:fb:74:54:31:82:d0:a1:
         cb:59:bd:14:cc:a0:af:ae:26:61:d6:3a:98:8f:8b:a9:14:d5:
         d4:5a:07:b9:0e:9d:29:6f:d7:c0:01:d9:2b:77:f8:6d:ee:a8:
         e2:79:bb:3a:1f:6d:7e:ff:d6:36:70:09:61:bb:0f:31:46:dd:
         e3:a5:ce:9f:49:13:0a:e9:43:9b:9d:e0:ca:28:80:b1:9d:1d:
         2b:92:5e:32:e9:10:36:a7:03:86:6d:a4:60:72:0f:c1:4a:60:
         19:bd:4c:38:38:9b:eb:10:f7:37:9a:9b:d6:c4:f8:76:f1:67:
         4d:41:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----