Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22ec26b549a6629945d8d8d65e4f440b4a5bcbbe.cer
File:                     22ec26b549a6629945d8d8d65e4f440b4a5bcbbe.cer (raw, json)
Hash identifier:          b+cKaIPHbwWxqonw1zjy6/EuvwFShldZK9dZ6ZaQnV8=
Subject key identifier:   6E:F3:81:CB:72:09:7D:99:DC:34:51:84:98:0A:56:15:4A:23:C9:90
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01021332
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/660f4023-301e-4271-9da4-e46afc084eb9/22ec26b549a6629945d8d8d65e4f440b4a5bcbbe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/660f4023-301e-4271-9da4-e46afc084eb9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 17 May 2020 16:39:45 +0000
Certificate not after:    Tue 24 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 52400
                          IP: 181.233.192.0/18
                          IP: 190.114.248.0/22
                          IP: 2803:4800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16913202 (0x1021332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 16:39:45 2020 GMT
            Not After : Dec 24 04:00:00 2024 GMT
        Subject: CN=22ec26b549a6629945d8d8d65e4f440b4a5bcbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:89:d7:39:c7:ac:21:12:6b:a6:f1:7c:96:
                    4d:b6:80:21:18:a3:75:b4:83:68:96:82:a1:3d:bb:
                    8d:37:04:1c:34:c8:fa:c0:c4:a9:26:2c:42:c2:3e:
                    00:49:89:89:4d:38:30:6c:af:f9:24:0a:e5:87:38:
                    31:42:5e:6b:23:ae:99:09:00:32:31:2d:c2:2c:6a:
                    2f:a1:64:cb:33:82:ed:2d:40:9d:1c:55:b8:1a:3a:
                    6d:b0:2f:01:b0:aa:d4:6a:37:36:ff:87:ac:2d:9e:
                    b5:75:04:bf:8f:5f:eb:51:f9:41:9a:db:10:60:37:
                    4b:79:6e:87:37:0d:13:4a:71:c8:b2:57:70:3b:79:
                    b4:23:f4:bb:e2:21:7d:4a:c2:dd:4c:01:45:62:c8:
                    8d:38:ec:98:ee:0e:08:11:93:a7:41:7c:93:5b:43:
                    92:64:ff:56:79:6c:35:a6:12:d5:01:71:b8:62:85:
                    d4:cf:d1:a7:01:2e:79:68:de:9c:49:05:34:3d:8a:
                    47:87:44:97:21:ea:de:f8:79:a5:00:0c:a4:2c:46:
                    ac:c8:ac:01:74:a2:c9:90:70:19:66:ee:7a:03:db:
                    12:5d:6a:45:50:a9:73:58:43:2c:c2:33:db:02:1c:
                    ae:8e:a5:a9:95:37:52:ff:d1:51:9c:c5:77:64:5f:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F3:81:CB:72:09:7D:99:DC:34:51:84:98:0A:56:15:4A:23:C9:90
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/660f4023-301e-4271-9da4-e46afc084eb9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/660f4023-301e-4271-9da4-e46afc084eb9/22ec26b549a6629945d8d8d65e4f440b4a5bcbbe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.192.0/18
                  190.114.248.0/22
                IPv6:
                  2803:4800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52400

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:d2:3c:7a:7d:4e:f9:c9:85:6f:14:fc:c1:a6:fa:77:a4:
         3c:0b:b4:56:f4:db:08:c7:13:36:35:b6:a6:ef:6a:7d:87:f0:
         a3:c7:9e:28:41:ac:db:8a:28:7b:a2:b6:08:e4:3a:eb:a5:b7:
         44:ae:9b:99:8a:4a:1a:42:a3:37:4b:b8:a9:41:fc:b6:59:8c:
         9f:5b:95:8c:9d:d1:f1:2b:18:ea:0b:48:8f:42:ce:06:75:98:
         48:f5:ec:1b:06:10:b0:65:aa:c7:e1:7d:06:e9:3a:73:4c:87:
         2b:6b:e7:86:08:16:d5:9f:fe:0d:2f:69:65:32:78:b9:01:ad:
         29:55:a3:7e:58:91:77:51:50:32:22:e1:ee:0f:64:d2:21:e3:
         81:47:d3:95:ff:36:4a:71:8b:fc:1a:97:93:44:e1:65:77:f9:
         f9:fe:6e:83:69:fb:91:63:6a:83:41:3d:fb:d3:49:b3:0b:ab:
         41:ec:4b:b9:1c:0c:29:ff:e0:70:85:8a:09:90:1c:98:ec:d2:
         68:0c:c9:2d:eb:fe:4f:d1:5c:7e:fc:6e:74:fa:cc:dc:e1:ea:
         3d:2c:e9:dd:b8:14:2b:b6:11:60:4f:4e:8f:9e:2b:da:2c:de:
         79:5b:f2:75:3c:b9:07:a5:2f:f2:2c:8c:e9:63:6f:7a:9a:9e:
         45:d8:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----