Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d32ebe916009a3fc3780b7e96e2b0141d847585.cer
File:                     2d32ebe916009a3fc3780b7e96e2b0141d847585.cer (raw, json)
Hash identifier:          BrvHucbDMfE6zY65Gs/tTWNyRYEldZXozrv4h/7EZZk=
Subject key identifier:   54:3E:24:9D:BD:D5:AB:0F:65:A8:44:B7:B6:AE:CB:85:73:2B:1E:AD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101497C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/2d32ebe916009a3fc3780b7e96e2b0141d847585.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Aug 2020 16:16:04 +0000
Certificate not after:    Sun 15 Dec 2024 20:15:30 +0000
Subordinate resources:    AS: 264675
                          IP: 168.121.56.0/22
                          IP: 2803:cd40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16861564 (0x101497c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  5 16:16:04 2020 GMT
            Not After : Dec 15 20:15:30 2024 GMT
        Subject: CN=2d32ebe916009a3fc3780b7e96e2b0141d847585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:16:09:0f:d9:5b:dc:4d:39:b9:95:3b:17:
                    72:dd:a1:fe:a1:84:58:ce:26:8e:12:c9:3a:f6:24:
                    d3:28:a5:92:bd:a9:35:db:0d:4f:94:36:e8:79:53:
                    84:ea:8c:07:15:a7:e0:cb:43:9a:72:08:6a:fd:3c:
                    b0:52:e0:bf:5e:89:88:24:89:a0:cd:fc:97:4b:be:
                    00:aa:0d:fe:15:c8:41:ab:4d:c9:c1:01:06:7d:90:
                    f2:d2:5b:09:7a:4d:46:26:09:6c:e6:f2:0b:3c:ef:
                    bc:73:ec:d6:b1:b7:1e:89:e5:b4:29:a6:ed:cc:00:
                    2e:22:0e:02:84:f7:f2:7e:42:a2:9e:09:bb:3d:d2:
                    dc:59:0c:4a:9f:c7:ee:fd:e6:69:7c:7f:60:39:ad:
                    8b:28:9b:34:a9:76:4b:2a:83:43:23:88:0c:ad:e9:
                    3d:35:48:47:e2:31:75:93:c1:5f:d4:1c:c4:d9:00:
                    53:7f:50:45:39:26:91:20:50:06:5e:c5:69:8d:28:
                    87:41:d3:23:22:7d:6b:29:f0:5f:69:ae:1d:06:5e:
                    03:bd:91:75:de:fa:d0:bf:a2:32:a5:cb:4a:e5:a3:
                    f3:60:6a:34:fa:f3:fc:06:d3:0d:03:d4:bd:fd:f6:
                    97:35:ac:6e:35:0a:7c:7e:f2:bc:37:9b:82:b3:6d:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3E:24:9D:BD:D5:AB:0F:65:A8:44:B7:B6:AE:CB:85:73:2B:1E:AD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/2d32ebe916009a3fc3780b7e96e2b0141d847585.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.56.0/22
                IPv6:
                  2803:cd40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264675

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:7d:6b:e3:1a:36:57:ce:0a:b4:b1:2f:c9:ea:14:01:76:
         52:b9:48:8a:cf:f8:c4:62:8f:93:13:8d:2a:68:4f:85:1c:96:
         24:3d:d5:b8:ea:d3:37:04:ba:15:eb:8d:80:6f:58:d2:03:17:
         e1:01:3b:75:0a:20:6d:41:87:19:d4:e8:61:c9:b0:d5:09:c4:
         e3:2d:e6:a2:c8:b8:49:82:4b:fb:b7:35:6b:99:27:23:1d:93:
         a9:39:12:46:b0:09:1a:c9:ef:3a:30:ee:f5:79:34:72:d6:c0:
         ef:77:09:8d:b0:f3:04:4e:29:bd:98:45:62:fe:c6:e9:a3:c0:
         e9:8b:1e:2e:e6:4c:67:a9:21:7e:0b:f1:1b:83:39:92:20:e4:
         6f:3a:77:15:6c:59:f7:4a:ce:f6:46:47:51:aa:0a:33:c2:95:
         0e:f4:80:cd:e1:f7:8f:fd:84:24:30:d5:d2:39:f2:2e:57:71:
         80:44:62:33:d3:1f:70:2d:c3:7b:92:be:cf:d2:95:98:cf:47:
         a2:75:13:de:38:ea:cd:a5:47:9e:a1:b2:e3:02:07:01:a1:0f:
         d9:cc:31:0d:c3:50:4e:8d:1f:09:33:bf:b2:c9:a4:1c:d2:96:
         09:f1:90:97:db:b4:2a:00:91:27:9d:0e:88:49:ba:5c:16:94:
         af:ae:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----