Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer
File:                     5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer (raw, json)
Hash identifier:          Lp+JXTcCldSbyDerXJ9DFCZjSacwfRXRfH8IbCTOjUY=
Subject key identifier:   CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101757C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Nov 2020 14:00:38 +0000
Certificate not after:    Tue 17 Dec 2024 15:13:41 +0000
Subordinate resources:    AS: 269939
                          IP: 45.191.112.0/22
                          IP: 2803:1ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16872828 (0x101757c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 14:00:38 2020 GMT
            Not After : Dec 17 15:13:41 2024 GMT
        Subject: CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:a2:73:e0:46:9a:a7:38:33:49:ee:59:9f:
                    e9:e5:47:59:7a:d3:ef:b9:a2:40:6a:17:9f:3b:08:
                    d4:08:bf:32:79:4e:26:ae:cd:71:9b:8e:58:9a:44:
                    7a:ee:a8:ae:f5:fa:85:2e:7d:80:d4:bf:ca:89:43:
                    17:c9:e7:3c:1c:07:9a:bc:c0:93:c9:49:98:1e:7b:
                    70:3d:dc:17:ea:3e:5e:33:67:8b:74:36:c5:4c:03:
                    09:0d:8f:ea:0e:2e:0a:c1:5d:d2:05:63:66:c2:9d:
                    ec:6c:b1:9c:96:51:84:8f:a4:7b:91:9e:ef:36:38:
                    cd:1f:b1:cd:d7:4c:de:7a:2e:ab:f5:31:cc:af:37:
                    ae:50:e8:84:cf:f2:d2:7f:a8:79:4e:75:a5:c4:17:
                    1f:46:f4:63:ce:5c:eb:04:7d:99:16:98:9e:1f:5a:
                    f0:a6:c8:12:86:91:12:60:fc:be:c4:24:91:d9:56:
                    82:ea:e0:cf:da:51:a0:3e:d8:90:56:88:53:c4:65:
                    ac:60:d3:e7:d4:5b:ad:68:08:52:60:52:f2:cf:90:
                    ca:cc:5a:c5:e2:71:4f:7b:f1:b2:33:b1:24:60:03:
                    3b:2a:ee:04:6e:f8:3f:1b:7e:71:c6:3e:7b:88:d3:
                    dc:2b:f7:7b:d0:9c:db:a3:0f:30:93:72:1b:b0:71:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.112.0/22
                IPv6:
                  2803:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269939

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:f4:5e:5d:bc:a5:81:5e:15:7e:2a:c5:06:bb:5b:95:3b:
         5d:2c:ae:3b:37:01:11:5e:dd:56:35:e9:c5:75:9f:51:2d:70:
         7a:be:eb:6f:c6:ed:2a:45:79:ca:e6:2e:31:db:16:6d:da:b9:
         b3:44:66:cb:51:25:17:20:3b:5d:db:66:49:04:56:b7:1d:a5:
         d3:f1:20:d3:25:7b:28:6c:52:c6:93:75:09:41:f8:0d:b4:9a:
         cc:ea:38:00:61:ea:d2:f5:25:ad:1e:46:17:87:ed:88:91:bb:
         70:99:b2:13:bb:9f:d0:7b:2e:c4:4e:df:de:f6:dc:35:db:51:
         a4:f4:97:fc:92:57:17:3a:ac:1d:7f:87:ed:f1:df:ac:3d:30:
         6b:d4:db:48:6b:b2:e8:70:c9:16:53:0e:35:f4:d4:82:f0:33:
         de:3c:86:44:72:4b:85:4e:18:bc:3a:cf:0e:8e:a1:cf:33:91:
         e1:38:b1:f1:de:98:7b:05:a7:4c:54:d8:12:f5:32:78:12:85:
         b1:d7:c4:13:1b:25:69:0c:6f:03:60:54:40:d0:4d:59:7e:de:
         4d:03:5b:74:21:ef:36:d7:92:25:53:28:3d:b9:99:d4:8b:74:
         67:c0:6b:d4:04:e1:c8:69:23:a9:19:18:d8:77:95:ef:09:39:
         ff:6c:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----