Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer
File:                     15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer (raw, json)
Hash identifier:          1FpiC5T2qaR47U1H4h0wZI/dSsHa/JWP0MSeyk24v7s=
Subject key identifier:   F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8C463
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 16:07:06 +0000
Certificate not after:    Fri 07 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 263814
                          IP: 138.219.16.0/22
                          IP: 2803:7240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15254627 (0xe8c463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 16:07:06 2020 GMT
            Not After : Jun  7 06:00:00 2024 GMT
        Subject: CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:29:15:0d:09:1f:83:d3:44:84:5c:0a:4b:
                    e4:13:34:70:db:3e:1c:bf:3d:00:38:ec:96:a1:66:
                    d8:ed:80:aa:e1:ef:76:ae:15:16:6d:08:0a:f5:5e:
                    f3:ff:d2:11:57:f5:a8:77:f9:e6:8c:9c:18:ca:ec:
                    22:2b:1b:6c:9d:7b:d8:00:d2:d6:ac:a2:0b:b8:4a:
                    9c:23:29:fc:22:a9:7f:0d:47:b5:5a:73:d2:9a:39:
                    7b:e3:71:2e:21:b9:86:2d:ae:64:f4:70:9c:9e:9c:
                    60:9f:30:71:71:1d:6a:1b:7e:f1:5e:3a:12:da:e0:
                    d1:80:ab:a5:2c:7f:04:86:da:92:6e:e1:89:99:31:
                    08:ab:4f:15:45:ec:a7:69:06:b6:d1:c0:6d:cd:f3:
                    5a:5a:b4:36:51:47:a6:44:df:b5:44:1f:98:01:35:
                    c3:ba:2b:48:9f:bf:f7:43:74:50:25:1f:03:e8:15:
                    0f:14:1c:b1:1c:fa:00:69:30:4a:ab:52:bc:46:69:
                    4a:37:fd:bf:f4:9e:af:fb:cd:40:1e:da:15:bf:0e:
                    0b:73:84:0a:e2:76:3d:c5:88:ac:cd:e8:64:85:9c:
                    dc:c3:f4:5b:ad:ab:51:11:ef:65:3b:27:87:70:7d:
                    d6:6e:c4:f1:b6:fb:e4:72:66:80:d0:b0:60:41:1e:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.16.0/22
                IPv6:
                  2803:7240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263814

    Signature Algorithm: sha256WithRSAEncryption
         8e:38:5e:b3:5b:44:11:c2:26:a0:b4:69:85:ae:9c:11:08:15:
         91:8d:b5:6b:e5:c8:6e:ed:a7:09:1b:6c:49:60:fc:05:c8:d6:
         a1:e6:5b:b3:12:4f:25:82:47:a5:d3:91:b4:98:a5:a1:e9:23:
         a1:2a:45:b5:53:d8:12:af:3c:2c:a2:75:6d:8d:5a:36:fd:27:
         48:d6:9d:14:c7:94:6e:36:d5:32:a0:b9:56:95:59:65:0a:49:
         5b:08:35:06:6e:e2:28:38:55:cc:d0:7f:5f:fd:9d:42:43:57:
         04:6b:f6:91:e3:6c:40:e7:d7:31:f8:a3:3a:63:69:21:0f:8f:
         ac:0a:04:95:58:3e:26:20:70:c9:6e:5b:d7:40:1c:d4:0b:39:
         9e:0b:cb:3e:b6:d2:7e:c3:cd:10:7e:57:06:71:4c:c0:84:a5:
         a8:55:50:40:6c:b5:74:4a:e1:df:ad:d5:38:17:f0:73:7f:85:
         a0:4c:ac:06:83:1c:b7:d0:49:16:68:32:a2:41:36:55:60:9f:
         09:63:0b:c7:15:17:72:22:83:c8:0d:6b:57:1d:f6:b8:bc:39:
         b5:ab:b9:11:98:0b:e4:34:55:fb:78:8c:61:7e:84:06:3b:62:
         1a:28:bb:c5:9e:4d:25:f3:ed:ba:d8:d2:a4:62:72:41:c8:cb:
         58:47:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----