Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/264594ab0a87e9fe0523de21ba1d3eda8a994014.cer
File:                     264594ab0a87e9fe0523de21ba1d3eda8a994014.cer (raw, json)
Hash identifier:          B6kJxUksngGdU3zZhMggkoI5oz2MiD6QpHc15VNi8TI=
Subject key identifier:   7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F307E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/264594ab0a87e9fe0523de21ba1d3eda8a994014.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 08 Apr 2021 08:50:54 +0000
Certificate not after:    Fri 14 Jun 2024 22:54:45 +0000
Subordinate resources:    AS: 273045
                          IP: 45.180.20.0/23
                          IP: 45.182.189.0/24
                          IP: 2803:c560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15927265 (0xf307e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 08:50:54 2021 GMT
            Not After : Jun 14 22:54:45 2024 GMT
        Subject: CN=264594ab0a87e9fe0523de21ba1d3eda8a994014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:17:a7:01:d9:a1:14:16:73:2c:22:b6:67:
                    bd:a4:5d:7a:26:41:df:77:1c:f8:a0:04:fc:86:c2:
                    06:b8:66:b4:35:5a:5e:80:e8:c7:0a:27:7c:12:a6:
                    66:99:45:d5:c0:d1:72:f0:4b:9b:a9:02:2d:96:7c:
                    c2:04:78:b2:80:87:5d:b9:66:1f:a5:3e:93:84:e4:
                    05:d6:d9:3e:e9:ae:21:65:b5:1f:4a:5d:51:b9:c6:
                    59:e5:fa:37:cb:1b:d4:88:71:3c:30:bf:60:f9:f3:
                    da:dd:c9:10:c8:8c:1b:46:a9:2a:2d:de:48:2a:9f:
                    1e:96:6a:dd:f7:79:cd:dc:11:88:54:9b:2d:5f:b7:
                    d1:d1:1b:82:b9:ef:a1:22:19:da:e1:46:f7:41:a1:
                    46:5b:d0:c3:38:bb:c6:84:2d:3e:46:df:35:83:d8:
                    a5:ae:30:a4:b9:4f:46:62:ee:60:8c:d6:de:4d:63:
                    80:a7:6d:54:c4:8b:88:99:2d:46:93:de:97:45:85:
                    7e:01:7c:e2:47:04:c6:d0:b3:de:de:24:5f:56:e4:
                    43:2e:e3:50:ff:39:57:11:36:0c:03:99:05:cc:f0:
                    c4:0f:4f:17:ab:75:eb:90:22:22:95:28:a1:90:5c:
                    53:4f:8e:41:a6:39:71:2d:4b:4a:24:a3:c1:80:3f:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/264594ab0a87e9fe0523de21ba1d3eda8a994014.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.20.0/23
                  45.182.189.0/24
                IPv6:
                  2803:c560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273045

    Signature Algorithm: sha256WithRSAEncryption
         55:63:4a:aa:47:f0:0f:46:ec:a0:8c:49:cf:09:63:82:40:88:
         e9:ae:74:13:a4:70:38:72:73:eb:7b:02:f6:48:09:03:47:d7:
         39:a1:90:33:57:6c:7e:98:65:f2:9c:ff:81:10:6e:d6:a8:6b:
         f6:c2:f8:90:b1:85:51:fd:18:a7:58:1e:75:04:14:28:87:2d:
         e0:21:6d:81:6c:a5:1c:c3:d7:c5:d7:cb:31:b5:37:d4:5e:95:
         24:90:ec:05:31:4a:d9:a8:95:cc:07:b7:78:f3:3f:66:6d:69:
         74:96:3b:25:97:2e:3d:9b:32:00:90:55:38:43:cf:02:33:06:
         29:f6:48:ed:7d:3a:e8:d0:bb:db:f6:6e:ef:be:85:13:b9:3c:
         0b:80:53:f1:14:2d:be:b4:1f:29:6e:68:f2:fb:65:5d:bb:23:
         b4:1e:bb:38:3f:38:d0:c3:58:69:49:cf:68:ea:a7:29:31:72:
         41:bd:43:44:2c:08:c6:77:a1:79:6b:d1:15:82:58:e9:8a:77:
         34:74:f4:b1:54:cf:d5:41:42:43:87:e5:f5:75:7f:1e:0b:a2:
         75:78:79:f6:e4:ff:81:13:18:49:6d:0c:6a:37:67:f3:e4:4a:
         2b:c1:9c:a7:02:d8:82:05:2b:19:33:35:42:22:a6:01:c4:4f:
         a4:b5:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----