Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer
File:                     5d3796838d771f93080603caee0f79e836838277.cer (raw, json)
Hash identifier:          aNYuuLNeVWH9GXbAlCQlTMrg3yozhsCStpaJPdsS4uk=
Subject key identifier:   AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01048C3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/5d3796838d771f93080603caee0f79e836838277.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 May 2020 14:17:35 +0000
Certificate not after:    Mon 20 Jan 2025 22:18:38 +0000
Subordinate resources:    AS: 269976
                          IP: 24.152.40.0/22
                          IP: 2803:f6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17075258 (0x1048c3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 18 14:17:35 2020 GMT
            Not After : Jan 20 22:18:38 2025 GMT
        Subject: CN=5d3796838d771f93080603caee0f79e836838277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:c6:88:4e:2b:8c:71:e4:dc:9d:66:8e:6b:
                    51:f5:a4:9e:32:19:7b:17:59:1a:2e:1e:d5:05:9f:
                    ed:ed:b5:27:31:f9:20:f1:f2:e4:6e:8b:f8:21:1b:
                    92:a8:c5:f9:6c:0d:a7:1b:04:c5:a5:99:53:9b:eb:
                    da:6f:c9:f0:d3:58:ae:65:19:14:20:fb:7c:d0:ce:
                    9c:48:ea:7d:e2:d8:e5:a5:38:d7:90:6b:cf:34:6d:
                    af:8e:e8:b7:8a:17:3e:38:09:ab:42:3a:6d:06:43:
                    87:02:1e:d1:51:08:af:c0:78:ea:32:12:98:aa:14:
                    da:58:8c:03:13:2d:b9:51:83:39:3b:bc:86:be:69:
                    67:2c:d2:bc:1f:ea:97:3d:74:e0:a0:10:13:37:65:
                    37:43:e7:8a:62:64:35:fa:df:80:5a:a6:f8:84:dc:
                    01:eb:b4:43:d8:6d:9d:a9:ed:22:3b:ec:22:72:69:
                    96:86:65:0b:4c:d0:f8:e6:d3:98:7e:28:c8:75:da:
                    95:ec:f8:80:67:40:55:8b:3a:56:98:21:ef:57:05:
                    54:31:57:f3:c3:ec:f3:72:4f:8d:94:81:b9:41:a5:
                    d7:96:3b:fc:6b:ce:ed:01:43:d8:62:96:4c:93:97:
                    4d:75:75:81:1a:c1:7b:b7:3b:46:b5:0c:00:91:d6:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/5d3796838d771f93080603caee0f79e836838277.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.40.0/22
                IPv6:
                  2803:f6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269976

    Signature Algorithm: sha256WithRSAEncryption
         5b:e3:37:22:cf:b1:91:3d:54:66:7c:3a:59:e2:3c:87:c0:b2:
         a7:fd:11:85:bb:98:89:38:1b:ed:1a:ea:70:cd:88:06:51:f5:
         8a:35:a6:06:d3:b6:7f:19:d1:64:d9:49:30:01:7d:32:1c:7d:
         5a:d3:50:8d:14:57:1a:1a:91:9c:15:dd:1c:6e:dd:a6:98:fe:
         ce:65:54:e0:0e:a7:30:88:71:c7:53:ee:71:cd:d3:db:21:fa:
         d4:53:ef:d0:d3:c6:b3:d7:63:db:c6:3e:5f:17:05:ad:e4:37:
         ed:18:05:4a:60:a2:b4:42:41:48:a3:8d:71:b1:77:18:59:2f:
         fa:c7:5d:8f:7e:2b:01:6f:22:f1:2b:f0:b7:86:5d:d0:4e:41:
         c5:7a:84:8a:3e:81:e7:ae:d6:80:be:60:fd:0c:2c:42:04:1c:
         45:86:0f:54:9b:74:f5:42:1f:da:c9:fe:2d:e1:a1:4a:2b:66:
         a0:93:90:a0:38:e8:45:b3:d4:14:2b:f2:a0:10:2d:0c:8c:9f:
         67:b6:fb:e6:00:61:97:cd:57:74:63:f8:3e:c9:32:2d:95:61:
         2f:b4:42:e3:e1:14:7b:d8:d6:9e:26:23:d0:22:fd:12:8d:23:
         f6:1e:fb:56:c3:2c:5c:7a:e4:77:d0:f1:b6:59:a0:c7:dc:26:
         c6:c3:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----