Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18690dd24b422809b7e6550a84c4ea001b17f421.cer
File:                     18690dd24b422809b7e6550a84c4ea001b17f421.cer (raw, json)
Hash identifier:          ZoyqKzCGsHfpg6T0I45Avujp69+uUK7aUYfdqos8zzA=
Subject key identifier:   63:EC:1A:57:BD:E9:6E:6A:A5:A0:23:00:91:2E:7E:6E:F0:0C:63:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD9C44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3693c704-5f25-4c09-b3b8-3acbfa4dd92b/18690dd24b422809b7e6550a84c4ea001b17f421.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3693c704-5f25-4c09-b3b8-3acbfa4dd92b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 16 Nov 2020 21:28:29 +0000
Certificate not after:    Mon 04 Mar 2024 16:24:28 +0000
Subordinate resources:    AS: 270011
                          IP: 190.111.132.0/22
                          IP: 2803:fee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14523460 (0xdd9c44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 16 21:28:29 2020 GMT
            Not After : Mar  4 16:24:28 2024 GMT
        Subject: CN=18690dd24b422809b7e6550a84c4ea001b17f421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:41:45:95:5c:89:b3:1d:0f:de:ea:2e:45:
                    1b:34:df:20:d7:d1:8a:ac:b5:f7:c8:d8:94:05:d5:
                    be:2c:51:b7:09:4b:c6:0e:aa:df:e7:fb:5f:40:36:
                    b0:98:2d:ff:ce:ed:53:b2:90:7e:c9:86:c9:68:21:
                    88:3a:df:96:55:56:b0:4e:e9:38:fa:44:52:04:f1:
                    6a:7d:7c:83:3e:c3:20:8b:2a:af:22:04:3e:46:b8:
                    ba:f2:0e:31:9a:ba:41:5d:51:f0:23:17:4c:a0:13:
                    33:77:0e:c7:bf:7b:d5:3c:af:c3:4a:ed:d5:41:76:
                    1b:c5:d5:73:2c:9e:41:a1:d5:de:fe:34:74:d1:ce:
                    52:6b:8e:6f:7b:66:7d:ea:ad:a9:b3:f5:74:fb:9b:
                    cc:4c:4a:bf:43:f2:1b:bc:73:96:0d:c2:2c:6d:45:
                    ac:c2:c3:c3:ea:52:cf:96:be:d2:75:5e:cf:a0:a7:
                    69:50:74:ca:83:59:63:a4:f5:f2:44:a2:2e:3f:0f:
                    e9:84:5e:26:6f:24:40:44:90:49:42:0c:76:a5:f9:
                    43:fb:73:22:3b:e6:a0:64:e6:d4:28:1e:9c:32:74:
                    e9:a2:05:5e:5c:16:f0:86:da:c6:74:30:2f:69:32:
                    ec:88:99:62:60:70:28:b3:29:43:e7:5d:e1:d9:42:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EC:1A:57:BD:E9:6E:6A:A5:A0:23:00:91:2E:7E:6E:F0:0C:63:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3693c704-5f25-4c09-b3b8-3acbfa4dd92b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3693c704-5f25-4c09-b3b8-3acbfa4dd92b/18690dd24b422809b7e6550a84c4ea001b17f421.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.132.0/22
                IPv6:
                  2803:fee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270011

    Signature Algorithm: sha256WithRSAEncryption
         85:7b:a7:c4:87:c2:ab:40:3a:cf:35:3f:fe:b9:58:2d:e1:a6:
         89:63:e4:73:43:62:a9:dd:87:09:08:38:83:d2:24:1b:1b:90:
         63:d0:18:cb:d0:46:1a:d8:b3:42:3e:0a:b0:6d:32:83:82:fe:
         34:c1:00:dc:14:c2:da:ae:b6:79:d4:28:f4:2b:0b:31:b8:d8:
         cd:68:20:08:42:60:0c:b4:a7:d3:03:68:7b:16:c1:0b:dd:64:
         ba:ab:23:f4:f8:d9:63:70:ca:04:92:fd:ac:38:48:e9:7b:0d:
         bf:91:0c:a7:fb:6b:e2:42:06:a4:94:b1:9e:1d:6c:d2:58:bc:
         79:87:d0:cb:75:59:38:42:4f:52:da:53:48:13:8e:4f:c8:6c:
         1b:db:90:52:b2:0b:6f:32:34:e3:7a:06:03:e6:aa:f4:a6:60:
         db:70:81:3f:22:ac:49:f9:d7:05:e7:79:04:56:b2:77:6f:00:
         99:ef:ab:d3:15:4b:d7:fb:75:3c:ff:43:32:9b:3e:2f:a6:b5:
         2a:d1:36:9a:3b:37:2d:c1:5a:34:da:a6:8f:0a:a1:35:78:ea:
         bc:99:7b:b7:17:6a:22:0a:e8:a3:43:c7:2e:4b:37:b7:8d:e9:
         f9:08:36:8e:d7:0c:82:51:d7:b6:ef:93:9f:03:51:fd:bc:fc:
         f0:b2:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----