I've added the support of advanced filtering in the API, it does no have first class support in xo-cli yet but it's usable anyway:
xo-cli xo.getAllObjects limit=json:10 filter='type:/^VM$/ snapshots:length:>2'
Okay so it's indeed a certificate issue on your side. Double check your certs. Sometimes, you need to have a cert file with the intermediate authority.