Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28420f8200dcb670f177aab28b17c8fceb40aee7.cer
File:                     28420f8200dcb670f177aab28b17c8fceb40aee7.cer (raw, json)
Hash identifier:          umTx77pgJp1uTXQRxd7/s/PZCl9SphoqbQ7dHZKJMbc=
Subject key identifier:   B5:A1:93:00:83:69:61:BB:24:FA:2B:2D:37:7F:60:84:B5:80:69:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100FF90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/28420f8200dcb670f177aab28b17c8fceb40aee7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Apr 2020 17:08:40 +0000
Certificate not after:    Fri 13 Dec 2024 00:27:02 +0000
Subordinate resources:    AS: 265623
                          IP: 201.46.92.0/22
                          IP: 2806:3a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16842640 (0x100ff90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 17:08:40 2020 GMT
            Not After : Dec 13 00:27:02 2024 GMT
        Subject: CN=28420f8200dcb670f177aab28b17c8fceb40aee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:32:a2:34:94:4e:10:8d:fa:50:eb:33:d6:
                    8a:d2:7e:3f:3b:61:ec:b6:eb:02:10:c3:63:83:21:
                    57:4a:7f:d4:93:d0:63:ed:74:16:1d:11:93:d7:54:
                    f2:04:db:f3:01:94:54:3f:cc:32:fb:6c:67:ac:0e:
                    aa:3e:6e:79:a2:ee:84:0d:3a:c5:18:ca:34:77:72:
                    f0:88:75:1c:46:77:90:34:24:82:79:0e:35:77:95:
                    51:c8:07:db:bf:9f:a7:88:e4:eb:12:a1:8e:a2:58:
                    65:02:ef:d9:2e:88:c9:85:05:59:01:62:40:cb:0f:
                    06:89:69:44:88:c8:99:f9:df:6b:5f:52:8a:9c:2d:
                    d1:6d:52:f0:31:cf:3d:be:bc:18:14:f5:3b:b7:84:
                    26:9d:15:a7:d4:00:c9:d4:92:a8:72:ae:6b:04:4f:
                    41:22:db:06:07:a7:50:54:2c:e5:04:c8:4d:3e:fb:
                    d1:35:77:04:05:6a:aa:1c:c7:ac:c2:1f:c1:dd:0c:
                    9d:27:d9:c4:f6:3f:a3:7f:1b:26:d0:c2:7b:03:fa:
                    c3:b0:21:b3:cc:ed:73:c7:f5:ac:85:eb:d4:0a:6c:
                    39:2c:2c:84:99:bc:16:0f:69:3c:80:76:88:17:80:
                    bd:f4:dd:32:24:e6:24:e5:5c:dd:43:24:ec:42:7e:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A1:93:00:83:69:61:BB:24:FA:2B:2D:37:7F:60:84:B5:80:69:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/28420f8200dcb670f177aab28b17c8fceb40aee7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.92.0/22
                IPv6:
                  2806:3a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265623

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:1f:f0:c3:e1:d0:a6:d2:db:fb:cf:96:dd:d8:9b:da:94:
         94:ed:3e:78:02:ff:23:9a:0d:b7:4f:af:8d:59:27:4d:28:93:
         c3:f5:2a:91:a8:5c:12:af:c3:f4:70:f5:1c:a5:c1:3e:6d:f8:
         8f:d6:90:bd:53:dd:3a:16:33:45:f4:bd:47:0e:20:53:56:fb:
         29:7b:f4:e5:87:44:63:03:31:db:d5:50:a2:f1:d4:05:9d:fc:
         b5:be:62:df:8e:c8:46:7b:5a:cd:b9:ba:2a:11:4b:35:4c:f9:
         0c:b9:e9:d2:d4:b2:1f:94:4a:11:68:fa:60:11:8f:17:94:24:
         f2:8c:e6:2d:df:89:a5:9b:88:eb:53:7f:0c:79:d3:ce:7a:f2:
         b3:24:d7:d7:8c:8d:db:02:30:e4:f3:98:33:3a:0d:a8:02:3c:
         82:24:19:fe:ce:cd:cd:62:42:5e:d4:be:98:95:93:90:58:98:
         5d:5e:e0:09:52:5c:00:70:bb:db:82:83:1c:21:e9:4e:2a:22:
         7c:ef:a2:e9:bf:e3:61:71:13:15:f4:44:48:9c:34:56:c5:d3:
         72:fe:a0:97:d3:db:91:3c:1d:9d:27:9b:fe:12:50:ff:c8:09:
         52:a1:e6:db:dc:28:9d:0d:bd:85:c1:55:2c:ca:33:5d:71:10:
         2f:92:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----