Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a0d7684bdadabbd15b4a8134f2213cb30cc656b.cer
File:                     0a0d7684bdadabbd15b4a8134f2213cb30cc656b.cer (raw, json)
Hash identifier:          WDmOzf7CcIVmGD15LBci9WKL44H1L7fHMthlcBR5s40=
Subject key identifier:   D9:C4:B5:3C:0A:54:EC:41:D3:A7:E7:19:5E:2E:51:BE:B0:47:34:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D92327
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/0a0d7684bdadabbd15b4a8134f2213cb30cc656b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Mar 2020 17:40:52 +0000
Certificate not after:    Mon 08 Jan 2024 18:49:22 +0000
Subordinate resources:    AS: 267792
                          IP: 45.172.188.0/22
                          IP: 2803:efa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14230311 (0xd92327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 20 17:40:52 2020 GMT
            Not After : Jan  8 18:49:22 2024 GMT
        Subject: CN=0a0d7684bdadabbd15b4a8134f2213cb30cc656b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:9a:ef:2b:8e:27:7a:47:c4:db:00:66:7f:
                    da:5d:0b:ec:f0:a8:36:2c:83:f3:3b:fe:c6:9e:39:
                    fd:22:ec:9c:c7:7e:65:95:ba:37:7e:62:7f:06:95:
                    64:8a:a8:0c:42:56:72:51:2e:95:ae:d4:07:49:c6:
                    4f:54:1a:58:e7:75:25:fc:f1:8b:c9:79:5a:4a:55:
                    b8:10:e4:57:e6:35:18:c0:92:b9:58:ab:93:61:d4:
                    00:c6:6d:8e:e2:1f:cb:d4:a6:b2:76:d6:93:54:d1:
                    6a:4c:6e:8c:b4:6b:ad:8c:f5:a0:6d:b5:ba:e5:cf:
                    71:56:19:69:b2:a4:34:10:b9:bc:62:d1:d5:ea:4f:
                    2e:27:3c:1e:c8:a0:1b:aa:0b:a5:61:53:81:8a:fe:
                    90:28:07:26:04:d7:9e:6e:10:53:65:6e:f7:bd:a3:
                    4e:73:86:e1:ce:90:40:de:4e:f3:86:3b:61:fa:90:
                    0f:f0:6a:89:f6:38:93:27:22:38:3e:7c:07:e7:2e:
                    44:df:1e:8b:78:28:1e:fc:b6:9c:4c:cb:fa:72:51:
                    6b:f1:a7:b9:5b:1d:36:01:39:b1:dc:89:e8:1f:79:
                    ef:7c:94:47:d0:cc:f5:be:80:77:74:2a:bd:ca:50:
                    d2:07:d5:ea:3f:ce:0b:d1:05:d8:59:6c:ef:93:26:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:B5:3C:0A:54:EC:41:D3:A7:E7:19:5E:2E:51:BE:B0:47:34:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4bfd28-e756-4479-a54d-a9ccb356f7fa/0a0d7684bdadabbd15b4a8134f2213cb30cc656b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.188.0/22
                IPv6:
                  2803:efa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267792

    Signature Algorithm: sha256WithRSAEncryption
         c4:c7:84:39:12:f6:42:e2:03:b4:e5:a9:72:40:54:b3:1b:35:
         ff:16:e5:1a:62:ea:78:b6:79:ba:b2:9d:64:1f:91:04:af:f5:
         bb:40:9b:32:2c:67:b0:e5:f2:3b:a3:ce:19:9a:5d:55:82:2f:
         fe:63:6c:e5:c5:0d:47:20:1b:6b:3a:99:d6:25:fc:b7:e7:bc:
         e9:df:83:67:bc:33:3b:02:5c:69:28:32:ef:8f:93:f6:3c:27:
         b8:96:33:0b:07:de:a6:f5:1d:87:e7:18:04:f1:24:48:c3:c2:
         db:a4:5a:4e:db:ea:41:88:0b:e6:9b:fe:75:97:20:d6:3b:a5:
         42:39:59:2c:78:ca:b8:c9:79:42:b5:3b:25:f2:ce:b3:31:01:
         cd:50:85:9f:18:e0:96:d0:26:d4:56:3a:67:df:25:e4:02:b9:
         f5:ee:88:e7:d6:69:26:cc:a2:fb:cf:92:46:34:18:0a:ce:e4:
         b2:41:14:dc:a2:bb:0d:6b:2b:e0:e8:89:7f:5c:5c:f8:43:ae:
         ab:7d:24:57:b1:c3:f6:84:f6:2f:43:48:5c:6b:78:fc:51:91:
         ef:11:74:e8:17:ca:58:cf:3d:20:5f:45:42:f9:59:a4:3f:23:
         32:c8:04:90:4e:2b:e2:91:cc:0f:2d:e8:68:68:49:79:20:2e:
         94:f7:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----