Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13c901d01480b53fbb495710d0bce80433642ecd.cer
File:                     13c901d01480b53fbb495710d0bce80433642ecd.cer (raw, json)
Hash identifier:          jPEnOVb/dmi4wnkj597KS+ZTdtXN5SGjZ9FzAQTPgFo=
Subject key identifier:   02:5E:22:17:40:09:02:B6:24:F9:29:13:88:54:0E:01:15:6D:50:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2E377
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/13c901d01480b53fbb495710d0bce80433642ecd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Jun 2020 21:09:25 +0000
Certificate not after:    Mon 29 Apr 2024 21:26:03 +0000
Subordinate resources:    AS: 266838
                          IP: 45.238.248.0/22
                          IP: 2803:eca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14869367 (0xe2e377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 10 21:09:25 2020 GMT
            Not After : Apr 29 21:26:03 2024 GMT
        Subject: CN=13c901d01480b53fbb495710d0bce80433642ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:7a:38:e0:7f:81:26:b1:00:89:2a:30:62:
                    36:a8:48:0e:d1:9a:54:9e:9b:fb:9f:62:0c:03:f0:
                    a3:55:14:e4:9c:c1:94:59:94:b0:6e:a8:ea:b3:5f:
                    af:f9:56:bb:be:8a:b3:86:b8:81:d3:e2:ea:b3:a7:
                    62:6d:ca:4b:39:44:f0:47:ea:9c:45:05:4a:4a:e1:
                    cc:5f:36:37:00:47:e2:f2:88:a1:1f:30:eb:7e:0e:
                    64:11:bc:b3:55:88:62:03:83:88:ef:dd:c5:56:ba:
                    72:12:a4:9f:db:5b:82:29:2d:db:0b:87:49:cf:77:
                    89:e0:42:03:21:75:34:61:6a:d8:81:c4:35:92:d8:
                    08:1d:b7:7a:04:aa:7f:38:10:62:81:eb:f3:b3:16:
                    7c:1f:cd:e9:31:a9:33:4c:44:ae:5c:80:68:57:2e:
                    3c:ca:4a:7c:97:c3:a0:57:31:3b:95:c0:e7:96:6c:
                    02:1d:86:6b:e8:b4:40:95:06:46:01:60:b6:a0:93:
                    bb:64:8e:20:b1:a1:a0:88:e4:b1:16:e0:96:cf:59:
                    2b:cf:e7:8e:53:1d:d5:71:18:3b:0b:5a:c8:12:ef:
                    f5:9b:ae:63:6d:ef:0a:0e:ea:a9:7d:31:0d:be:e5:
                    4f:83:0a:f5:ce:6c:82:e4:c1:a5:d5:a0:aa:e9:1c:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5E:22:17:40:09:02:B6:24:F9:29:13:88:54:0E:01:15:6D:50:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/13c901d01480b53fbb495710d0bce80433642ecd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.248.0/22
                IPv6:
                  2803:eca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266838

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:b4:bb:f1:a2:68:bc:7b:91:ee:a8:1e:52:2b:c2:6e:89:
         f1:c0:74:57:3c:20:ac:1f:bd:f7:60:2c:7e:a4:73:28:33:5f:
         76:94:fd:51:7c:2c:81:cc:ba:02:c3:54:5c:fb:e8:31:68:c6:
         de:ad:cf:91:7f:2d:6e:83:0a:37:b7:b6:2d:58:26:f3:f2:ca:
         ed:bf:99:47:3b:a7:82:5e:37:fe:a9:57:db:06:a0:c8:ed:ea:
         e8:66:3b:31:f0:a6:6b:af:37:0f:d4:27:a6:3f:5a:8a:7b:e1:
         22:69:77:e8:6f:7b:c7:6d:93:fb:43:d5:ec:93:71:c1:8e:5b:
         1d:10:18:a1:09:a6:7e:9f:5e:58:3d:22:0b:da:cf:d5:53:e1:
         c4:ee:dd:6e:8e:58:21:c6:02:a6:4c:91:95:81:bd:9e:8a:b3:
         af:ac:4c:e9:cb:34:e9:15:06:58:cf:0b:b2:66:cf:bd:76:b4:
         be:c3:e3:38:c3:00:19:73:6c:25:2d:af:e0:50:c6:00:b6:eb:
         82:09:e2:cb:01:e6:1f:27:21:89:46:b0:1d:94:1f:89:62:7d:
         72:c9:48:82:6f:80:e7:f8:39:34:28:c4:8a:dc:1f:64:c1:ef:
         49:13:f9:7c:c2:22:fd:c5:a9:9d:8f:46:7a:d4:c8:a9:29:b4:
         8e:32:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----