Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e2555d6d6cd9849fdcea4cd3f4d423880fbd420.cer
File:                     0e2555d6d6cd9849fdcea4cd3f4d423880fbd420.cer (raw, json)
Hash identifier:          XtCM41wfhXSKTgZdHK3N5EwL4G3WSKn4ihXNTd5uAGw=
Subject key identifier:   38:2C:BB:1B:5E:B4:5B:2C:41:12:FB:09:8A:5D:5A:FE:89:5B:B3:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67921
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/af428568-fa34-47c2-a3b4-af3236f8789c/0e2555d6d6cd9849fdcea4cd3f4d423880fbd420.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/af428568-fa34-47c2-a3b4-af3236f8789c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2020 12:08:48 +0000
Certificate not after:    Wed 12 Jun 2024 17:31:49 +0000
Subordinate resources:    AS: 52271
                          IP: 167.250.208.0/22
                          IP: 170.239.48.0/22
                          IP: 190.112.56.0/21
                          IP: 2803:3940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15104289 (0xe67921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  4 12:08:48 2020 GMT
            Not After : Jun 12 17:31:49 2024 GMT
        Subject: CN=0e2555d6d6cd9849fdcea4cd3f4d423880fbd420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:d4:ce:5d:1a:75:ad:da:fc:68:32:19:68:
                    cb:b6:11:ba:b1:c1:08:11:7e:59:eb:25:8f:d9:d5:
                    c1:1b:ac:db:84:28:38:67:02:e5:4d:c9:ff:12:ce:
                    c9:d6:10:6d:d1:9b:91:63:6a:e7:d3:ec:04:25:f0:
                    8a:26:32:5e:59:d6:12:82:d4:63:f2:92:ec:e5:05:
                    f6:70:c4:03:6f:81:a4:27:3b:69:28:e3:dd:f9:17:
                    0f:ca:5c:be:a2:78:3b:e6:0f:de:f5:51:04:2e:6e:
                    35:1d:1e:44:30:e7:fe:75:40:99:15:65:b4:6d:07:
                    f3:3a:5c:bd:00:98:d9:8c:33:b8:43:81:fd:4e:f3:
                    d0:dd:67:c0:c8:cb:e0:45:7f:eb:52:01:36:16:45:
                    71:9b:c8:06:f1:ce:75:36:57:95:6d:cb:0d:37:cc:
                    ca:15:f5:10:20:f9:99:c9:03:d2:ec:2c:96:22:84:
                    0e:3e:57:e8:7a:0d:b9:ff:bc:eb:08:23:a8:1e:ba:
                    f4:5e:83:ea:9c:92:f3:7a:a1:25:0b:e0:3f:19:f0:
                    28:6c:02:1c:49:ec:85:17:84:b0:77:e5:bc:1d:c1:
                    16:9e:6a:1c:e1:07:a3:51:90:ed:5e:6d:e5:19:66:
                    4d:f9:64:ef:af:16:dc:98:9b:07:6a:bf:b4:39:87:
                    3a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2C:BB:1B:5E:B4:5B:2C:41:12:FB:09:8A:5D:5A:FE:89:5B:B3:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/af428568-fa34-47c2-a3b4-af3236f8789c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/af428568-fa34-47c2-a3b4-af3236f8789c/0e2555d6d6cd9849fdcea4cd3f4d423880fbd420.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.208.0/22
                  170.239.48.0/22
                  190.112.56.0/21
                IPv6:
                  2803:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52271

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:f9:a8:0e:8e:31:ea:29:9a:ef:b0:9c:cf:11:62:0b:7d:
         90:73:c4:c4:61:8c:87:8f:d7:dc:35:72:74:a6:2c:37:41:65:
         44:10:39:ee:fb:3a:3b:d5:54:b5:2a:12:5f:30:f5:bf:c5:60:
         5c:91:42:fe:14:bc:65:a4:a7:84:93:ac:ab:67:7c:fd:4f:9d:
         f1:2b:d6:f3:cb:a7:43:1c:14:ce:ad:77:fd:a4:cc:c9:a8:f2:
         c7:d8:a9:fb:11:b5:44:6a:59:f7:39:85:20:ac:4e:00:4f:33:
         77:ce:a3:ec:48:ef:c6:48:68:cb:cf:10:9e:91:97:68:34:29:
         9d:0c:8d:56:13:f6:09:3c:2a:ee:03:ab:66:3c:c8:59:f3:13:
         c0:32:40:cb:06:14:8c:9f:a5:95:7e:1d:b1:87:f5:6e:8c:d8:
         5b:1e:d1:a9:38:aa:d5:b1:75:55:a8:06:29:42:a9:de:b0:66:
         d0:b8:52:44:a8:d5:45:02:d6:28:ba:44:78:04:be:28:d5:37:
         a1:65:de:e7:50:71:b7:6f:4f:c4:cd:a4:c3:37:06:2b:7d:ba:
         97:ce:05:a7:0f:03:55:13:d7:fa:b6:5f:7a:9c:cd:c8:c7:4d:
         d5:46:58:87:57:88:6c:46:8a:52:03:39:c5:5a:0b:36:b3:db:
         53:b2:49:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----