Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063d4a430e1b8102fe7591e1753e1647cdad13d9.cer
File:                     063d4a430e1b8102fe7591e1753e1647cdad13d9.cer (raw, json)
Hash identifier:          9VLyrSXqoXa+hnXtYUDJrQpidsSh7amrv4sXeWHaQ1I=
Subject key identifier:   8F:34:D0:A6:B0:F4:2A:6B:5A:76:81:B1:F7:4F:32:09:7B:9F:20:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01002FD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/063d4a430e1b8102fe7591e1753e1647cdad13d9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2020 15:47:58 +0000
Certificate not after:    Sat 07 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 263218
                          IP: 191.98.192.0/22
                          IP: 2803:3280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16789459 (0x1002fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 29 15:47:58 2020 GMT
            Not After : Dec  7 04:00:00 2024 GMT
        Subject: CN=063d4a430e1b8102fe7591e1753e1647cdad13d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:cc:0e:de:03:fc:1a:3f:34:a1:7b:59:52:
                    33:c0:07:d3:11:14:a5:cc:02:f1:35:f5:11:ac:53:
                    05:87:5a:bb:cd:41:f5:6c:ea:da:04:a2:66:d7:f2:
                    63:c1:20:b0:14:30:f5:77:89:30:94:03:c7:16:1f:
                    36:e1:ad:47:39:84:ab:14:af:f4:52:7b:9e:fb:7e:
                    e0:03:36:20:d2:77:bf:7b:38:32:9d:a3:af:11:4c:
                    30:be:9d:cd:3e:1d:6d:d5:b7:e4:c7:85:5e:57:f3:
                    c0:c7:de:97:da:0b:39:34:c9:41:b0:5e:7b:87:0a:
                    a4:8a:2c:fe:50:b8:86:1a:24:74:20:38:d0:a2:30:
                    64:2e:b7:2f:03:76:4d:73:15:67:e5:af:e6:90:33:
                    33:2f:c2:c2:f3:74:25:11:36:54:3d:58:37:54:60:
                    4c:17:fa:a0:45:29:ff:81:bd:35:47:4b:59:7b:2d:
                    86:49:3e:ba:53:db:0c:7c:2d:c2:e2:13:c0:e1:5e:
                    12:22:ef:26:d3:34:ce:3f:8a:4d:d6:30:d6:30:15:
                    5d:07:5e:b0:6b:48:93:b2:1d:fc:7c:9c:45:b0:9c:
                    40:40:2f:6f:51:16:65:9d:ab:45:e3:d6:6c:ab:7c:
                    9b:89:ee:d9:05:79:36:d7:da:4b:1a:1f:36:32:ea:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:34:D0:A6:B0:F4:2A:6B:5A:76:81:B1:F7:4F:32:09:7B:9F:20:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/62525ebf-d08d-4307-b196-c60b48f306a4/063d4a430e1b8102fe7591e1753e1647cdad13d9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.192.0/22
                IPv6:
                  2803:3280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263218

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:a4:b7:92:83:71:f3:d9:ed:93:e7:46:94:95:44:1b:9d:
         9f:64:8c:18:aa:70:4a:51:16:ff:83:b7:e7:1b:6a:87:32:fb:
         b6:79:e1:0b:a5:3e:67:7c:19:1a:fa:24:58:3c:a9:3e:f3:b4:
         17:f4:38:36:4d:3d:0e:70:05:e5:9b:20:2d:18:db:61:a0:4b:
         9b:a0:93:45:7d:8e:a8:f5:88:0d:1e:85:b8:47:5c:72:70:02:
         d8:81:87:67:de:b4:39:00:3a:4e:c1:b6:19:f3:76:50:88:e6:
         4b:fe:76:a7:98:33:ff:5d:b1:3f:fa:20:9b:2f:67:07:65:3c:
         00:d5:12:f8:a1:76:f5:bc:09:db:47:a7:73:28:7e:46:53:ee:
         7b:b9:01:6a:cb:41:e3:f4:20:33:e3:6f:a1:b4:ac:3d:4b:6e:
         93:77:ea:29:57:3f:12:2c:da:08:89:5e:0b:18:d0:a2:3a:f5:
         9c:45:91:be:6f:87:59:0a:21:ce:af:2f:92:d5:d5:19:99:d6:
         3a:aa:c2:dd:26:2d:d1:54:99:57:52:61:d0:09:73:a0:ee:c1:
         e7:1a:91:28:7f:a6:37:2b:63:be:d7:2b:8a:2e:ba:9d:2d:0b:
         eb:20:75:0d:2b:d7:6f:73:71:ed:f9:90:dc:40:9b:51:1a:c4:
         bc:f6:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----