Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05b7c0667e451d9945c7951692209ff2a37a1060.cer
File:                     05b7c0667e451d9945c7951692209ff2a37a1060.cer (raw, json)
Hash identifier:          5oC13qHm6xfHMa7jdkybXjBqTt7i3rDq6u4tnZboiWI=
Subject key identifier:   86:E3:EA:1A:49:AA:BD:A1:C7:E5:BB:18:9A:BD:5A:B3:09:84:28:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA2AB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2088d1b-34fd-46ef-830a-aa7db9411689/05b7c0667e451d9945c7951692209ff2a37a1060.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2088d1b-34fd-46ef-830a-aa7db9411689/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Oct 2020 17:57:37 +0000
Certificate not after:    Sun 20 Oct 2024 17:03:57 +0000
Subordinate resources:    AS: 52432
                          IP: 168.181.72.0/22
                          IP: 181.224.208.0/21
                          IP: 2803:3500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16394936 (0xfa2ab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 17:57:37 2020 GMT
            Not After : Oct 20 17:03:57 2024 GMT
        Subject: CN=05b7c0667e451d9945c7951692209ff2a37a1060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:15:18:f7:d2:20:b3:a2:f3:d3:ee:d1:4c:
                    04:4a:2d:18:6b:a8:26:86:66:22:60:8b:f5:f7:88:
                    9f:89:42:bd:9d:d8:57:86:1d:5f:e2:19:a9:78:26:
                    2f:fb:a3:90:5f:1a:7b:36:b4:8c:73:10:e7:40:fc:
                    7e:59:9d:b8:e2:fc:dc:57:dd:3d:a3:4f:b0:54:1c:
                    97:94:2b:60:ec:1a:6f:57:f2:80:04:56:49:8d:35:
                    69:ab:c5:63:41:45:2c:d8:98:b2:2f:c3:0b:a3:e2:
                    84:74:11:46:8f:f3:cb:f8:69:ec:46:9d:8f:d2:01:
                    5a:f4:dc:10:88:35:22:0b:3b:52:0c:59:90:64:5d:
                    69:f2:27:95:73:33:5d:37:4b:5d:3f:fd:e4:46:03:
                    92:0f:07:75:44:d6:f2:4d:ed:db:93:8c:41:68:42:
                    e2:40:bf:04:fd:3e:a9:eb:ff:e6:6b:32:20:77:18:
                    52:34:09:4e:a2:88:17:8f:6c:44:ec:e2:38:63:02:
                    b3:f0:27:cd:b4:62:08:cd:0b:fe:bc:86:04:a9:ef:
                    bf:62:bc:69:20:fa:6b:11:e6:56:7d:6f:d2:7f:32:
                    89:95:c9:c6:b4:92:d1:01:7b:3a:f7:60:cd:00:9a:
                    95:1e:86:a6:9d:41:d2:9b:89:b7:a7:96:d5:de:8b:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E3:EA:1A:49:AA:BD:A1:C7:E5:BB:18:9A:BD:5A:B3:09:84:28:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2088d1b-34fd-46ef-830a-aa7db9411689/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2088d1b-34fd-46ef-830a-aa7db9411689/05b7c0667e451d9945c7951692209ff2a37a1060.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.72.0/22
                  181.224.208.0/21
                IPv6:
                  2803:3500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52432

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:92:29:4e:ca:66:aa:e5:cd:2e:4e:71:c1:b8:9b:48:aa:
         8d:c6:35:4b:e5:e1:2c:10:24:c4:1a:93:ff:6f:15:3b:d9:43:
         6d:4d:1d:70:c1:f6:c4:4c:db:fb:62:cd:2e:c4:30:be:4c:d0:
         42:c9:d5:30:95:a2:20:94:62:7f:07:31:0a:79:d2:74:da:b5:
         21:37:4a:4f:64:05:f3:b4:70:bd:9d:4a:16:51:a4:e7:53:eb:
         db:a0:b7:fd:d4:4d:81:10:16:71:4b:6b:f8:01:1a:a0:f2:d1:
         be:d6:d0:70:a5:04:e4:58:71:9c:60:6f:19:28:c2:59:d3:b6:
         02:5b:4b:28:a3:5f:d0:82:c6:7c:97:f7:aa:12:2a:c9:b6:56:
         ac:49:cb:d4:ac:b4:6a:1d:a4:2b:54:51:4c:57:d0:76:ae:a3:
         8e:b0:27:92:b9:05:c0:90:04:43:d5:1d:53:83:56:2a:a3:52:
         8c:3f:67:ab:6e:4d:32:a4:e6:4a:a2:7f:89:23:7f:5a:0a:52:
         17:31:af:f3:30:aa:98:f8:00:23:9c:62:f1:f5:05:ff:d8:c8:
         cd:e3:67:59:04:d0:6a:74:5a:29:21:ac:22:b2:4f:ba:86:df:
         f8:a1:84:d5:7c:b6:f8:8a:78:f7:66:e9:17:6e:69:89:56:7a:
         ce:3b:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----