Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
File:                     cfd77889f712db89177f6478b03af00c3bad37fa.cer (raw, json)
Hash identifier:          o7m4W+fHy+AewMuVNJCWP208td5PJQ9XMGFUHKC61b4=
Subject key identifier:   3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103538D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Jun 2020 15:15:47 +0000
Certificate not after:    Thu 09 Jan 2025 17:08:20 +0000
Subordinate resources:    AS: 269965
                          IP: 24.152.48.0/22
                          IP: 2803:56e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16995213 (0x103538d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 15:15:47 2020 GMT
            Not After : Jan  9 17:08:20 2025 GMT
        Subject: CN=cfd77889f712db89177f6478b03af00c3bad37fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:4e:e6:14:71:a0:ed:0e:35:b0:c9:74:f3:
                    d5:a7:a3:a9:57:09:8d:d6:0e:e0:57:36:e6:64:e8:
                    97:e8:f4:33:e7:21:1a:83:9f:af:d7:f3:a7:7a:4f:
                    c3:94:51:41:ba:51:e7:48:75:77:7e:69:57:5a:da:
                    76:92:e4:bf:e8:7c:3f:8d:f4:eb:b8:1c:97:32:0b:
                    72:2d:4d:a4:92:61:d2:41:a5:59:ba:fa:d5:db:44:
                    1a:b3:b6:49:c0:5a:3d:17:b3:fa:0a:75:71:db:5a:
                    58:c6:e1:00:51:5d:b8:e0:af:59:3d:90:ff:e5:5b:
                    12:05:a0:9d:14:55:9c:dd:f2:2b:2c:4c:a1:a8:a0:
                    fe:37:b1:ce:eb:2a:e9:9c:54:87:04:f9:7f:64:4a:
                    15:a9:04:08:0f:b4:97:46:16:74:28:26:bb:a6:6a:
                    6f:9e:41:17:ef:73:ba:59:b9:67:da:7b:ea:ec:f6:
                    a8:4a:db:73:8d:c5:53:7e:c2:e8:56:90:78:5c:6c:
                    7c:98:8b:a5:d2:4c:5d:c8:5b:8b:c6:00:8d:e6:fc:
                    a9:92:b2:5c:63:68:f0:14:e0:cf:ad:55:59:4b:19:
                    71:9b:c3:24:e3:43:08:2c:c5:4d:6f:e6:dc:22:1b:
                    52:23:5e:39:99:e5:83:13:10:0f:ee:98:1c:fe:e9:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.48.0/22
                IPv6:
                  2803:56e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269965

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:63:23:86:7b:06:64:06:b3:15:34:07:ed:03:e0:16:6f:
         8d:5d:da:ac:28:d0:21:5b:48:29:7c:01:22:4a:8e:31:14:3e:
         72:ff:bd:88:42:c1:1e:be:44:9f:ea:28:fe:7a:40:f2:19:87:
         d2:31:c1:cb:bf:1c:86:63:ec:40:8a:73:19:bc:41:9a:02:40:
         a5:7b:1c:30:19:2d:08:20:a4:9f:27:8a:8e:30:4f:bd:94:ca:
         c0:8d:ca:d8:11:c7:83:60:a5:83:8c:13:80:25:89:03:7d:df:
         10:64:3d:f0:db:2d:f0:05:c2:46:97:46:4d:f7:b1:db:28:da:
         7e:35:26:cb:eb:68:19:8b:54:8c:97:18:06:19:67:ee:f3:3c:
         4d:29:b5:b5:76:f9:ed:81:1c:4d:5f:d1:8a:51:12:3d:8a:bd:
         08:86:0b:ae:c2:1c:8c:94:cd:24:1f:30:c5:07:3f:fd:3a:ed:
         12:58:94:87:39:8f:cf:3e:ad:75:d4:be:6c:93:bd:fa:35:9d:
         7b:ef:e2:bb:79:50:82:d4:c8:69:78:a0:83:e1:13:0b:a2:79:
         42:38:d6:ab:7c:b7:39:b3:93:41:3a:7e:26:17:d0:3a:67:3c:
         b9:79:7a:bb:07:00:a7:51:be:a3:08:41:85:ae:5b:3b:4c:01:
         44:11:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----