Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer
File:                     0c4557be1a84f05a56a15cb22513acd961fb70fa.cer (raw, json)
Hash identifier:          uDyqXy1yp6jfMDIBXKBJH1NDFuNIMPL4RRdVA8MKQ/8=
Subject key identifier:   6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D71BD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/0c4557be1a84f05a56a15cb22513acd961fb70fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Mar 2020 00:10:38 +0000
Certificate not after:    Wed 13 Dec 2023 16:41:59 +0000
Subordinate resources:    AS: 269936
                          IP: 190.83.104.0/22
                          IP: 2803:aae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14097366 (0xd71bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 31 00:10:38 2020 GMT
            Not After : Dec 13 16:41:59 2023 GMT
        Subject: CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:41:37:9c:dd:c9:85:69:ae:ea:89:71:cf:
                    77:5b:b3:73:93:88:85:fb:39:21:8f:3a:48:dc:25:
                    5f:25:fa:bc:e0:65:17:c8:d3:fc:6c:3b:dd:f1:b0:
                    3b:9e:20:9b:27:cd:13:ea:db:37:9f:ae:15:ea:9a:
                    59:b1:de:94:1b:d0:de:3e:32:8a:6c:ad:de:97:2f:
                    22:13:e7:c8:8e:00:e8:42:db:52:bb:2a:db:37:3e:
                    66:42:e3:36:59:04:f8:1a:95:66:7c:8e:36:4f:0f:
                    39:1c:59:1f:8d:75:1f:26:6a:f0:8a:45:72:c1:57:
                    d5:3c:0a:20:9a:f5:81:4d:1e:74:e4:8f:a2:9d:25:
                    10:c5:8f:80:42:49:ef:1a:a9:89:5c:9f:2c:81:52:
                    9d:4c:ef:63:0c:c4:c0:3a:d9:4a:ef:06:8b:d2:ae:
                    e9:30:3a:c6:10:ad:7d:80:53:17:37:4a:b8:5a:fa:
                    08:3e:db:d7:a7:cb:69:3c:d3:9d:37:88:32:6e:fa:
                    96:ee:2a:df:e1:1c:af:71:79:64:14:5e:86:26:81:
                    f3:48:fe:29:b0:50:ad:fc:67:5c:17:48:27:a7:aa:
                    ed:e0:fc:54:2e:89:f6:fa:83:8c:c0:a6:0b:72:09:
                    fc:95:75:47:1e:be:79:4c:9d:f0:63:9a:9a:be:91:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/0c4557be1a84f05a56a15cb22513acd961fb70fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22
                IPv6:
                  2803:aae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269936

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:67:e3:73:31:bf:f8:a2:85:55:ed:df:1c:40:68:2a:d2:
         58:ef:07:c4:21:79:8d:f0:6d:ad:1b:11:01:a9:f2:9c:4a:c5:
         2c:c0:75:bb:49:95:bc:3f:fc:37:9d:e7:69:b4:02:b2:2c:bf:
         b5:97:2c:b7:45:bd:18:85:a3:20:7f:59:21:83:ed:b0:8f:cc:
         99:4c:f1:20:05:26:32:ee:75:32:3d:47:6e:6e:2b:4f:1b:04:
         06:ef:52:b0:a7:f7:24:29:3b:f9:98:4f:9f:96:0b:46:2c:95:
         18:56:71:e0:f6:fc:be:47:7d:cd:b6:52:cb:30:5f:85:70:59:
         5c:89:66:3d:bd:97:c0:eb:8c:de:15:68:d7:0d:6f:14:23:17:
         b8:cb:3d:78:85:ad:60:f1:4a:97:8d:70:25:79:55:0f:59:7f:
         98:d1:d0:7c:b5:cd:f7:f2:80:d9:d8:6e:ec:b6:37:4b:ad:77:
         07:e0:3c:26:e2:61:66:84:cf:b5:16:74:b9:06:17:58:31:c4:
         45:61:5d:ca:8d:45:96:bf:4d:bc:c9:59:5f:97:ed:39:04:9d:
         96:dc:b3:26:20:32:24:89:9f:ed:50:98:30:94:45:93:20:c8:
         c8:2e:d9:2d:3f:50:42:cf:8f:ed:5f:e3:9f:7f:bc:0e:6b:4e:
         ec:d8:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----