Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f83f8e61ba97517835e1315787d856b4267aea8.cer
File:                     0f83f8e61ba97517835e1315787d856b4267aea8.cer (raw, json)
Hash identifier:          Gu9jktdGk18KS9eHR3+BaT6waWFmY8sA3qGA+RdKvqI=
Subject key identifier:   8A:8C:15:52:DF:4D:70:7F:44:8A:F4:21:DA:C4:8B:62:53:45:99:76
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA77C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/0f83f8e61ba97517835e1315787d856b4267aea8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 16 Jan 2020 21:09:23 +0000
Certificate not after:    Wed 19 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 263201
                          IP: 45.182.142.0/24
                          IP: 2801:15:8800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15366085 (0xea77c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 21:09:23 2020 GMT
            Not After : Jun 19 06:00:00 2024 GMT
        Subject: CN=0f83f8e61ba97517835e1315787d856b4267aea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:d6:e3:3f:e9:d1:e2:5b:bb:33:77:c9:d3:
                    66:7f:54:ad:48:89:d7:c8:47:ee:47:c6:50:bd:9f:
                    2c:ad:a8:57:ae:ab:7d:97:14:71:8d:0d:0f:14:ba:
                    a8:06:5c:83:59:87:82:d7:2c:f1:74:aa:af:92:b0:
                    63:d5:8e:3d:b8:11:1c:fe:c4:62:1c:67:0f:2d:98:
                    27:60:93:2a:0c:e5:a3:35:ca:93:40:9a:35:c8:88:
                    2e:0d:08:b1:28:be:37:61:03:31:cf:77:72:c7:69:
                    04:59:6e:d9:24:a0:9c:70:68:45:38:da:e2:fd:cb:
                    39:47:e1:52:31:1f:8e:c2:83:eb:fd:5e:80:ed:7a:
                    26:78:45:3b:75:04:f9:86:7d:49:2f:a5:ff:25:1f:
                    5d:d3:56:bc:2b:9a:11:cd:14:ee:26:97:4a:2f:49:
                    27:4b:9a:5b:10:57:a1:38:a2:32:46:d7:ab:b9:74:
                    d5:64:69:6d:cf:6d:9e:9a:9c:fc:be:66:77:16:e9:
                    26:eb:03:39:6e:f9:3a:d8:77:a1:81:04:c8:90:c5:
                    ed:3a:76:de:62:84:c4:78:ca:87:d6:5b:09:9c:6c:
                    c9:7f:c4:c9:03:ba:0a:34:96:9c:d7:fc:c1:92:5e:
                    29:57:86:14:4c:50:aa:0f:92:ee:96:c4:66:69:1f:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:15:52:DF:4D:70:7F:44:8A:F4:21:DA:C4:8B:62:53:45:99:76
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/0f83f8e61ba97517835e1315787d856b4267aea8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.142.0/24
                IPv6:
                  2801:15:8800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263201

    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:59:df:73:49:62:da:45:d1:a3:db:40:31:f8:b3:12:b3:
         8e:04:86:26:51:e1:f7:35:7f:c6:b0:12:0c:72:55:57:75:b4:
         2e:b5:96:98:6b:7e:3c:d9:c5:c9:ba:d3:9d:f3:e7:20:0c:67:
         95:67:dd:b9:12:11:78:39:84:de:f3:b1:12:72:7b:93:22:bc:
         19:98:77:13:d5:57:82:22:f7:49:2f:a4:07:88:21:55:89:16:
         f9:bc:27:21:31:db:c7:a7:c5:80:24:fc:8b:85:99:e1:70:0d:
         72:04:04:31:b8:4c:82:d6:4c:06:7c:95:05:13:2d:da:45:39:
         3f:6e:f5:31:bf:41:3b:b9:42:b9:4f:f0:b8:b9:ed:35:4f:50:
         7c:ad:a9:84:9c:6e:8d:e7:09:24:ab:fe:ab:a8:ce:f7:07:77:
         2b:02:2c:dc:71:d8:9c:ac:7b:03:66:5f:76:f4:38:57:90:27:
         4c:73:67:dd:62:3a:47:e9:b6:05:2b:d2:7f:c8:ee:cb:68:8f:
         8d:e1:24:4f:3e:44:1b:ef:72:9b:e2:db:26:f7:b2:1d:eb:b4:
         dc:70:87:75:43:63:8d:32:c7:cd:9a:77:6c:7c:27:46:8c:72:
         e8:41:68:a3:9f:68:7c:9b:cc:66:a3:52:1b:ab:78:97:8d:98:
         86:d4:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----