Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.cer
File:                     1a3c62d3e6a06dadd310232029765bcd3db5ca3e.cer (raw, json)
Hash identifier:          4TW1MHYMiclqQV66O+fBDaA2HKpkSCqCTStVQxkQ++M=
Subject key identifier:   B8:97:74:5D:47:AA:91:0D:9E:52:5B:E5:B4:69:72:50:DE:E6:A2:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01010691
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 16 May 2020 16:15:40 +0000
Certificate not after:    Fri 13 Dec 2024 14:43:57 +0000
Subordinate resources:    AS: 269993
                          IP: 138.121.108.0/22
                          IP: 168.90.220.0/22
                          IP: 181.177.220.0/22
                          IP: 2803:4d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16844433 (0x1010691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 16:15:40 2020 GMT
            Not After : Dec 13 14:43:57 2024 GMT
        Subject: CN=1a3c62d3e6a06dadd310232029765bcd3db5ca3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:af:82:12:08:8c:a6:37:e7:40:ff:c3:12:
                    80:d1:7e:88:4d:ed:44:88:ba:35:a5:0d:6d:a8:a2:
                    31:6e:d9:d8:c9:a4:7c:70:b9:1b:d9:23:7f:09:78:
                    be:c7:65:9a:17:9e:2b:cf:68:2f:eb:83:08:75:32:
                    0e:50:ba:20:56:31:fc:25:37:a0:79:10:a0:81:ff:
                    50:98:7e:69:f7:20:2b:1f:00:0b:93:6c:bf:ad:89:
                    66:6f:01:4d:28:2f:f8:ff:b0:f1:3b:3c:91:7b:da:
                    0b:d1:44:46:a6:4f:9c:39:d2:06:e7:d7:e0:ac:44:
                    5d:14:7f:52:89:49:5a:ed:69:1a:20:d1:89:2d:a3:
                    5f:3b:14:1a:9c:4f:f7:ab:24:71:85:73:f2:bb:b6:
                    e2:a6:67:8e:ee:4d:2e:85:60:31:a7:a0:c5:c7:de:
                    74:c3:3e:66:2f:c0:c5:ab:09:38:79:1c:f5:49:6f:
                    bf:c8:1a:f0:74:68:75:98:62:87:ca:d8:4e:91:36:
                    f4:85:df:6d:5d:30:4b:ce:1c:a0:9c:d8:7d:e4:59:
                    95:2a:85:5e:86:7d:6c:ba:66:cf:65:f0:9b:61:3c:
                    ad:6a:e4:ca:54:04:79:96:3d:0f:ff:90:d5:ec:d3:
                    cc:39:92:0d:ce:7b:7a:39:b9:28:35:08:fe:46:1f:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:74:5D:47:AA:91:0D:9E:52:5B:E5:B4:69:72:50:DE:E6:A2:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.108.0/22
                  168.90.220.0/22
                  181.177.220.0/22
                IPv6:
                  2803:4d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269993

    Signature Algorithm: sha256WithRSAEncryption
         87:86:63:ab:b9:6a:45:8e:30:3c:91:3d:24:8b:49:4a:fa:15:
         9e:86:01:c5:87:1b:2f:50:36:6a:fa:fd:03:0f:74:34:62:19:
         cd:e9:d6:9a:62:09:23:c3:3d:df:10:1d:ea:fc:83:61:92:cf:
         b7:60:b8:ec:a2:2d:dc:fa:7f:93:74:70:a4:f2:49:78:65:48:
         7a:03:71:5b:46:a9:eb:24:b2:7d:bf:dd:4d:4e:58:1f:ee:c8:
         f7:9c:f4:0b:0c:81:f3:6f:c7:5c:5f:ab:11:6b:1b:5c:f7:cc:
         49:57:f0:c1:7f:04:30:a1:d6:a7:28:b1:85:69:82:03:5c:2d:
         e3:16:1f:2b:66:f9:2e:18:fb:cf:61:94:95:f7:c5:29:25:84:
         32:93:a6:c6:f5:3e:93:90:35:2d:d0:ce:5b:62:03:d7:d6:01:
         c0:c4:ca:ef:fe:58:ab:9c:0d:ce:93:14:a3:15:02:2f:bd:d8:
         81:8e:de:76:c5:30:c0:e0:9a:6f:42:a7:3d:e1:0b:64:c3:f7:
         41:5f:e3:bd:88:35:48:9c:c9:b5:7d:dd:1b:e5:bb:0f:57:00:
         79:59:e8:a8:3b:ce:09:83:da:ef:5c:71:09:3e:12:16:0b:af:
         d5:03:df:4d:83:71:2d:ff:a8:93:c5:54:64:e9:bf:60:f8:7c:
         06:b1:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----