Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f9ada29b77326910fc70d2e4156136667a95e57.cer
File:                     1f9ada29b77326910fc70d2e4156136667a95e57.cer (raw, json)
Hash identifier:          oazwfz+DPCe6jAWmokxumFqMtk8PJy23tzG18arybR4=
Subject key identifier:   66:C8:1A:92:7A:A5:A7:0F:87:7F:1F:23:63:3A:1F:6C:69:A7:EF:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E61D9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2be6003-f605-4123-b575-82aab3554c9c/1f9ada29b77326910fc70d2e4156136667a95e57.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2be6003-f605-4123-b575-82aab3554c9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 May 2020 14:21:01 +0000
Certificate not after:    Sun 19 May 2024 23:21:27 +0000
Subordinate resources:    AS: 52382
                          IP: 200.115.182.0/23
                          IP: 2801:0:330::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15080861 (0xe61d9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  1 14:21:01 2020 GMT
            Not After : May 19 23:21:27 2024 GMT
        Subject: CN=1f9ada29b77326910fc70d2e4156136667a95e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:75:0a:85:6b:b9:8d:af:de:70:7d:19:11:
                    dd:2c:d1:bb:62:c6:22:9e:16:b5:f5:99:60:3a:51:
                    20:2a:0b:e3:6d:19:a3:65:fc:de:5b:6e:13:b4:41:
                    e5:40:eb:7d:50:42:d7:40:2a:14:cf:4a:fa:66:f5:
                    28:66:fe:23:77:87:c8:61:3b:d5:4b:00:5c:4a:58:
                    55:81:1d:16:4e:96:58:2d:a3:f3:7a:2d:5c:fe:d9:
                    80:03:72:66:65:85:99:ef:e2:8a:04:e3:3d:72:bf:
                    b8:11:17:87:a4:34:be:23:82:61:9d:c8:a7:8d:5e:
                    90:b8:6e:0f:d4:70:32:3d:4a:49:a2:14:e0:62:19:
                    53:09:f9:74:b6:3b:80:81:71:76:30:7c:32:2a:35:
                    b6:9f:fa:ed:69:5e:dd:39:52:40:83:10:03:c0:bc:
                    f3:5a:4c:c7:93:b8:7c:04:00:28:c5:8d:f9:66:a6:
                    13:88:ff:ed:37:f3:7f:a6:b0:85:46:d2:2c:6f:ce:
                    79:37:fb:0c:9d:d3:01:19:5d:27:ad:2f:e7:61:5b:
                    28:08:99:22:46:e7:0e:26:31:35:52:90:e2:d1:34:
                    4a:fa:f5:aa:e5:41:4e:be:8e:13:1b:57:61:4f:e7:
                    1b:c3:70:0b:58:40:64:e7:65:30:e9:b5:91:67:f2:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C8:1A:92:7A:A5:A7:0F:87:7F:1F:23:63:3A:1F:6C:69:A7:EF:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2be6003-f605-4123-b575-82aab3554c9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2be6003-f605-4123-b575-82aab3554c9c/1f9ada29b77326910fc70d2e4156136667a95e57.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.182.0/23
                IPv6:
                  2801:0:330::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52382

    Signature Algorithm: sha256WithRSAEncryption
         c7:0c:ca:0b:3e:fc:8c:21:db:cf:77:3b:a3:14:22:67:50:18:
         c8:b3:aa:e3:48:63:09:b9:c3:f0:eb:ce:61:16:77:37:05:e1:
         ce:ba:66:38:01:e1:74:ed:7b:3a:92:2f:03:3e:39:4f:b8:85:
         7c:df:c4:8d:3f:4e:e2:56:0e:c7:1d:e8:71:b9:12:98:53:0d:
         ac:66:bc:1e:7c:5c:e7:3e:0e:f6:1c:e7:28:b0:c3:10:d1:7e:
         89:f1:56:20:b1:86:b7:ae:fe:36:b4:99:c5:b6:ad:c3:b3:5f:
         a8:fb:3f:64:ad:fb:b7:55:b3:4c:48:16:d5:e0:2b:da:7a:f6:
         18:c4:79:f8:ce:6d:3f:3c:ee:b8:7c:8a:d3:8b:a0:a8:82:64:
         34:70:32:33:ae:bd:91:15:f9:cd:cc:af:f0:6e:85:61:6d:e6:
         13:03:fa:c9:7c:19:76:f5:26:96:49:a3:d3:13:b2:17:29:65:
         71:e7:a1:6a:6a:70:6f:4f:b9:80:b3:b2:83:c9:33:93:a8:3d:
         23:3c:82:8f:c0:0a:81:6c:1c:54:6b:7a:67:60:43:15:00:f6:
         0d:ad:ab:c7:ed:73:2a:17:39:38:b1:3b:bf:a0:7d:e6:5e:f3:
         aa:7c:69:74:ae:3f:46:2b:e9:5b:df:4d:4f:e2:42:d3:da:77:
         0c:c7:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----