Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
File:                     c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer (raw, json)
Hash identifier:          bDHWRcoDnO6MIuHeoxRBS75nawNjxcZmVGI379nFJu0=
Subject key identifier:   6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFC4A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 May 2021 21:13:29 +0000
Certificate not after:    Sun 01 Dec 2024 03:07:23 +0000
Subordinate resources:    AS: 28409
                          IP: 168.121.60.0/22
                          IP: 2806:21e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16762017 (0xffc4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 21:13:29 2021 GMT
            Not After : Dec  1 03:07:23 2024 GMT
        Subject: CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:03:bf:33:d4:2e:a4:e7:f5:75:cd:88:d2:
                    19:61:f9:16:f8:cb:dd:65:b2:d4:db:b2:df:49:41:
                    1b:2e:3b:3e:4a:98:44:8c:8f:8a:ad:30:74:fe:a9:
                    1a:8a:89:42:17:30:29:97:f4:ee:31:40:84:6f:f2:
                    45:da:6d:b0:55:7c:9f:e5:38:e7:87:19:c2:db:06:
                    56:95:fd:f7:fd:a7:e8:bd:3d:5c:1d:94:7d:d5:93:
                    41:93:a0:09:23:25:6b:e2:2d:8e:51:14:ef:13:2d:
                    18:24:7f:39:aa:70:51:a6:b2:b3:e4:25:b6:5f:4f:
                    3e:56:e3:04:37:20:8e:e3:83:dc:bd:ab:bc:af:54:
                    64:25:ab:1d:e0:b7:06:2c:17:6a:e4:82:e1:7a:e7:
                    a7:6b:2d:1b:71:b0:90:5e:b6:ec:87:37:dd:85:da:
                    78:de:20:02:8c:d4:dc:27:3f:f0:1c:d5:f5:c4:3f:
                    f5:b9:c8:a4:94:7b:8e:bb:d4:8c:c0:40:7d:60:41:
                    18:7e:8c:fb:6b:81:c5:07:9a:90:18:26:e9:89:49:
                    76:d1:5b:32:dc:91:72:08:27:1b:a0:1b:6f:0a:83:
                    65:b1:d6:ee:1d:48:ae:7a:a6:41:4a:99:94:5b:71:
                    56:ac:54:2a:79:23:22:ee:12:55:96:d1:a2:3e:7e:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/22
                IPv6:
                  2806:21e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28409

    Signature Algorithm: sha256WithRSAEncryption
         50:ec:a3:0e:a8:66:94:b9:3a:f6:60:0c:cd:fd:f0:41:eb:75:
         86:f1:8a:13:4a:33:32:a1:99:20:88:91:13:89:48:fe:a1:ad:
         56:2f:d1:3c:84:35:3a:6e:86:4d:99:6c:24:84:31:68:f8:f4:
         eb:bc:63:54:a5:ae:9e:bd:5c:fe:b2:d7:4c:a1:c9:f9:8a:fb:
         58:57:4b:bf:5e:0d:e1:b2:30:8c:d4:4e:53:a1:de:ee:93:c5:
         1c:1c:1c:77:58:43:a8:a4:3f:da:37:b2:83:20:e8:fc:af:8f:
         08:7b:04:89:e8:0f:4a:7c:b2:94:97:23:63:58:4f:5f:7c:d4:
         4f:2a:d7:81:31:5b:68:99:0a:72:00:6e:89:9e:64:2d:96:b6:
         92:cb:2b:b6:5e:b0:83:31:d8:84:48:21:d5:02:59:19:c3:50:
         32:26:fc:85:9c:f1:1f:ff:cb:16:de:65:34:76:fd:4e:e5:90:
         b9:ee:3f:52:db:59:e4:5f:a5:9b:8c:48:11:1a:83:1f:c9:ed:
         8a:5f:c6:18:a3:30:af:51:19:36:90:27:63:d2:b4:56:c5:91:
         4c:d0:78:14:8e:45:d7:89:92:50:9e:6f:68:96:e9:7d:54:5e:
         9d:57:fe:b6:09:2e:77:1a:de:5e:72:0c:59:61:9e:3a:08:82:
         88:7f:db:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----