Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5.cer
File:                     224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5.cer (raw, json)
Hash identifier:          B4RJmt2lvaVgU9TcobDUoZo4mAWdK70tHLq8yP933HQ=
Subject key identifier:   9E:E5:D1:FF:15:91:45:AE:59:15:D0:C3:A0:54:B8:92:42:48:34:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD5432
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Dec 2020 20:30:09 +0000
Certificate not after:    Thu 29 Feb 2024 19:00:10 +0000
Subordinate resources:    AS: 269991
                          IP: 24.152.56.0/24
                          IP: 2803:dee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14505010 (0xdd5432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  2 20:30:09 2020 GMT
            Not After : Feb 29 19:00:10 2024 GMT
        Subject: CN=224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:6a:fb:ff:eb:5f:14:e6:1b:84:03:dd:f5:
                    d5:f1:f2:b8:21:a0:cd:91:2d:74:10:ef:5c:cd:64:
                    b0:30:7f:32:0f:75:53:e6:81:f5:24:c8:0e:52:cc:
                    11:9d:aa:e4:53:b8:ef:1b:1b:00:53:de:57:dd:a4:
                    7f:c2:2e:45:9f:ae:c8:f7:29:80:62:0e:83:e1:61:
                    91:eb:c6:82:5b:11:44:3f:c5:ec:82:0b:58:50:29:
                    3d:93:f8:ee:18:91:a8:6e:cd:3a:e9:34:0a:d1:4d:
                    44:a9:46:af:9d:5b:c3:2a:95:4f:06:4b:34:51:ac:
                    0f:f8:b9:4f:fd:eb:0d:a4:ee:eb:3a:5d:86:c7:fb:
                    ab:3f:8e:2f:f4:e3:cf:51:24:37:61:76:76:97:85:
                    5a:c0:40:a3:f8:5e:5d:21:93:61:08:2b:1b:77:ec:
                    5d:78:9a:6c:ad:21:1e:72:c4:c9:54:60:91:16:eb:
                    d0:8c:aa:8b:b3:64:7b:b2:85:7a:4e:74:22:d8:b9:
                    62:4c:c5:45:06:d0:70:25:17:77:93:a8:14:d4:ca:
                    c2:0a:c8:68:18:68:a1:b1:41:61:5d:67:76:f0:03:
                    ca:3c:da:60:65:02:92:1c:4c:93:77:81:8b:a1:5c:
                    0f:76:e6:3a:93:b0:a3:ac:ef:c9:80:9a:9e:46:c1:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E5:D1:FF:15:91:45:AE:59:15:D0:C3:A0:54:B8:92:42:48:34:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/be17fe30-26bf-4a2b-83d8-1e80e398c063/224dea1fd2772d1b6b4820cdf6e1d40eeafef4c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.56.0/24
                IPv6:
                  2803:dee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269991

    Signature Algorithm: sha256WithRSAEncryption
         c5:f4:e1:a9:54:e3:b8:40:a4:10:88:4e:90:36:4f:6a:32:a3:
         52:01:53:28:ce:3b:74:e3:0e:32:b7:57:92:45:db:28:b3:f2:
         6e:ec:29:c6:2e:3b:a4:64:e6:a3:9e:ec:64:ca:55:06:18:08:
         65:a2:46:fe:81:42:8b:56:68:1b:aa:69:09:74:65:ad:a2:61:
         ac:d5:9a:28:22:05:13:e9:a6:bf:f3:29:f3:7d:e9:37:19:4d:
         21:ba:5a:89:fc:4c:49:01:fa:8f:16:9c:4c:43:8f:5a:bd:3f:
         94:a1:3d:b6:b8:89:29:ef:b6:bb:3d:95:cf:ee:69:07:0a:9f:
         be:8b:33:a3:da:c4:0b:f7:4e:8f:12:1e:c1:e7:ca:c1:a7:d7:
         56:97:9d:c7:fa:ac:4a:a6:2f:1f:77:19:41:fa:14:f7:39:ea:
         3c:76:83:79:50:bb:13:17:af:30:d3:95:67:5c:87:23:db:24:
         40:03:c0:15:b0:9b:13:fb:1c:fa:95:21:26:28:62:32:e5:45:
         e5:13:01:6f:32:39:48:c5:28:32:d5:25:7e:fc:d3:70:8d:ea:
         41:f8:75:6f:e4:d9:73:12:bb:aa:32:07:3d:93:3b:58:e2:4d:
         ea:9b:78:c3:a1:d8:17:00:5f:de:25:d7:8f:57:83:e6:db:09:
         0b:b6:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----