Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer
File:                     be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer (raw, json)
Hash identifier:          GzOkXNIfcDynVZLBE9XQPUrvLbE/knhjyuwKB0lpkbE=
Subject key identifier:   D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01017867
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/be13c6d545795fa349d0c42f37ac051a6f4f88b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Aug 2020 02:30:29 +0000
Certificate not after:    Tue 17 Dec 2024 15:25:14 +0000
Subordinate resources:    AS: 269940
                          IP: 190.83.116.0/22
                          IP: 2803:9ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16873575 (0x1017867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 18 02:30:29 2020 GMT
            Not After : Dec 17 15:25:14 2024 GMT
        Subject: CN=be13c6d545795fa349d0c42f37ac051a6f4f88b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:b1:92:2a:32:59:f3:64:85:da:74:e7:ed:
                    99:32:43:4a:60:5a:b2:8e:e5:b3:ed:0d:d0:4e:72:
                    46:9f:d6:f6:d6:74:d0:34:85:40:89:11:54:c1:bb:
                    6c:c9:7b:af:db:4c:0a:17:e3:5a:f3:38:e1:d2:2c:
                    ff:2a:de:a3:53:a9:aa:7b:16:e2:db:ef:6e:7b:d0:
                    45:df:f4:a1:75:8f:f8:31:b9:36:5d:e2:ed:68:bc:
                    ac:df:a6:ce:37:e3:ca:92:b2:3e:17:5c:be:2b:b4:
                    47:e4:05:a0:6c:72:9c:19:8b:1f:df:b0:c8:c4:8c:
                    5f:2c:63:3e:10:e6:43:01:04:d9:ad:34:bf:56:2c:
                    ff:8e:50:d5:fb:20:29:56:66:e7:fd:72:03:78:5d:
                    c2:e3:f9:0b:2a:82:28:b0:3f:e7:11:c7:19:e2:50:
                    b6:15:e0:0d:03:77:6d:59:ad:e1:fe:d2:09:36:58:
                    44:a6:8b:7c:be:19:71:94:40:9b:ab:b8:63:16:ad:
                    32:6a:31:2c:19:f4:68:43:8d:02:4a:04:2f:e4:17:
                    74:d6:31:87:46:fc:2a:95:32:10:7b:42:38:f0:66:
                    2d:f2:94:26:73:cf:f0:3f:c7:fc:cc:5e:5c:9f:62:
                    2f:2d:79:bf:11:3f:92:08:d7:75:55:32:30:8e:54:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/be13c6d545795fa349d0c42f37ac051a6f4f88b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.116.0/22
                IPv6:
                  2803:9ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269940

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:ff:45:7d:74:a2:81:a5:fc:0f:0c:ae:99:4b:24:a6:74:
         d1:35:22:0d:68:3e:b6:b0:d6:3b:4b:ca:5a:37:92:57:7b:f4:
         15:54:42:50:bb:75:aa:88:a6:b8:f7:0e:5a:25:66:c9:cf:fe:
         5e:74:3d:c9:49:eb:f0:c1:05:ed:47:e9:04:54:22:49:5f:24:
         d5:b5:08:65:3d:46:f6:ce:67:46:ea:e5:c6:f2:92:a2:85:e9:
         41:f2:13:14:13:b2:75:90:73:c1:eb:f7:3e:6a:c4:d7:e2:84:
         24:87:92:92:a3:23:5a:a5:35:e0:5c:1e:fb:5c:05:3f:bc:dd:
         f3:24:07:f3:d5:55:fa:0c:6c:8c:b2:36:a5:ed:46:fe:e2:a4:
         4d:16:e7:60:09:62:cf:17:b3:32:99:13:35:69:88:c0:48:70:
         06:6c:62:c1:40:ae:b9:18:24:99:ab:6a:21:8b:57:aa:59:d0:
         1b:82:af:7c:25:50:cf:be:77:de:14:35:b1:39:e0:11:f4:92:
         39:8f:4d:20:58:53:04:a5:db:fc:f3:99:47:47:cd:ef:1c:ba:
         1a:b8:35:2f:f9:3d:25:65:1c:aa:06:6a:16:1d:6e:d9:66:bc:
         b3:d5:80:35:d9:a1:5b:eb:85:62:c2:ee:4c:e9:1d:14:86:94:
         ac:c8:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----