Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb3ed35e9c7f82f766f3029905af8e66e5bd89b7.cer
File:                     fb3ed35e9c7f82f766f3029905af8e66e5bd89b7.cer (raw, json)
Hash identifier:          aLkO9CAF/U/l83jf4j1MedF+FsZjoMDPDtShxN2uXX0=
Subject key identifier:   76:9F:9F:9C:0E:43:42:5E:0C:66:47:CB:AB:4E:85:42:12:97:FB:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104A1FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a824f94c-e7d7-4e3b-91b5-21a6e8e2d3bc/fb3ed35e9c7f82f766f3029905af8e66e5bd89b7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a824f94c-e7d7-4e3b-91b5-21a6e8e2d3bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 18 Dec 2020 15:06:05 +0000
Certificate not after:    Tue 21 Jan 2025 18:25:56 +0000
Subordinate resources:    AS: 267749
                          IP: 45.232.192.0/22
                          IP: 2803:6720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17080830 (0x104a1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 18 15:06:05 2020 GMT
            Not After : Jan 21 18:25:56 2025 GMT
        Subject: CN=fb3ed35e9c7f82f766f3029905af8e66e5bd89b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:55:90:f0:a8:1d:ad:16:d7:cc:db:64:de:c4:
                    78:6d:e4:8b:c2:40:e2:1f:c4:2c:62:1f:cb:40:a7:
                    30:b2:40:0d:4f:5f:41:e4:42:32:fe:16:0e:fb:62:
                    a1:b3:cc:53:5e:44:bb:dd:30:f1:01:b9:f1:27:dc:
                    eb:3a:0e:8b:c2:98:a9:25:2c:48:c8:29:eb:52:3f:
                    dc:ea:42:48:80:6a:81:14:c9:fb:8a:6a:bb:94:0e:
                    35:99:8b:29:6d:6f:a9:25:0f:62:19:be:3b:8d:fc:
                    33:f2:ad:0c:4b:30:e9:93:67:73:74:e1:4d:d9:44:
                    74:bc:7e:85:dd:ff:0e:60:6a:76:96:39:64:c8:14:
                    e2:78:22:18:58:78:60:fa:f9:51:fe:59:d7:54:3b:
                    e0:64:58:b9:9b:ce:96:37:5f:3b:6e:d8:99:b5:9e:
                    cd:6e:3b:42:a4:fa:83:5c:bc:f3:a7:0d:f4:84:78:
                    9a:9f:d4:e4:8b:4e:c9:4f:cb:df:51:67:3d:8e:d0:
                    5e:69:0f:12:d5:fa:4c:80:74:50:79:9e:f9:3f:19:
                    13:45:88:fa:8d:64:4e:18:48:4b:e5:a7:ba:b4:9b:
                    9a:86:08:ab:53:d7:49:61:35:3c:a0:2e:ac:c5:86:
                    f2:a5:81:2f:b8:16:8d:c4:c6:a9:30:67:91:f5:ed:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9F:9F:9C:0E:43:42:5E:0C:66:47:CB:AB:4E:85:42:12:97:FB:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a824f94c-e7d7-4e3b-91b5-21a6e8e2d3bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a824f94c-e7d7-4e3b-91b5-21a6e8e2d3bc/fb3ed35e9c7f82f766f3029905af8e66e5bd89b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.192.0/22
                IPv6:
                  2803:6720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267749

    Signature Algorithm: sha256WithRSAEncryption
         85:00:ce:d1:71:df:c4:92:3e:1b:85:cf:51:6f:b8:81:94:7c:
         23:bf:d5:62:48:a3:0a:d9:38:82:18:f2:95:7a:97:59:42:4c:
         54:90:1c:25:9f:2b:c3:50:24:4a:c1:13:7e:3b:af:9f:c1:a8:
         40:eb:19:55:9b:f1:9b:96:1f:ac:4d:d3:ea:a8:5e:0a:5a:12:
         8f:56:42:52:0b:e3:6a:94:21:78:bb:00:be:87:05:f3:fc:7f:
         4b:fc:a9:30:18:a0:45:ca:56:e6:e2:0b:bb:3e:e8:3b:22:97:
         63:72:dc:52:9c:40:2b:3f:86:ff:44:7e:76:07:fb:2a:f2:99:
         31:5f:85:c9:4f:ae:ef:fc:94:75:59:1e:54:07:90:37:de:ff:
         81:4b:d2:d2:c2:5e:b5:4d:6a:de:a5:a8:37:84:02:53:ce:71:
         86:fa:53:fe:e9:b5:aa:2e:fb:89:81:f8:8e:f2:f7:79:65:c5:
         e4:5c:e6:89:bc:c1:dd:bc:be:7a:04:29:41:6e:ea:94:0f:05:
         af:46:bb:26:7c:35:b1:ea:bf:97:43:69:34:d2:df:f2:18:51:
         cf:4f:4e:63:ca:b5:0c:38:82:84:db:d8:4b:f2:a6:cb:b9:9f:
         df:6f:57:3d:89:1a:b4:64:4c:f9:cb:c7:4a:46:a1:02:62:74:
         32:79:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----