Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.cer
File:                     2a042d0a363b4c3bccd74c55cfacb5bd6667039c.cer (raw, json)
Hash identifier:          FRtsI0CjmIk1OcQovt9XJv3Iwwd6RqOlD/Z2WJM90v0=
Subject key identifier:   52:F7:96:D9:2D:94:EF:1A:55:6A:B9:98:6F:F8:0D:50:98:69:D8:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEA0B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Oct 2020 02:48:43 +0000
Certificate not after:    Fri 15 Mar 2024 16:52:06 +0000
Subordinate resources:    AS: 266877
                          IP: 152.231.24.0/21
                          IP: 2803:de80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14590130 (0xdea0b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 02:48:43 2020 GMT
            Not After : Mar 15 16:52:06 2024 GMT
        Subject: CN=2a042d0a363b4c3bccd74c55cfacb5bd6667039c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:fb:9f:df:03:03:1e:22:a0:05:99:98:ff:
                    6d:96:cd:fc:6b:48:7f:a2:87:e0:5f:c1:0b:a1:4f:
                    1b:26:4a:77:18:f7:ba:5b:4d:bb:d6:39:15:2d:58:
                    c3:0e:eb:46:f2:af:86:18:ca:5b:8d:af:33:15:5e:
                    b6:a7:b7:49:33:14:57:25:31:e9:e1:88:bc:1c:62:
                    1a:ae:06:12:23:89:cc:55:23:e7:42:de:22:9b:aa:
                    b1:45:6a:c4:64:b6:60:c4:91:7a:a0:63:09:49:2a:
                    b5:9c:1e:56:74:ac:34:1b:42:38:e5:8b:bf:7c:04:
                    16:49:ea:89:81:26:04:37:ef:25:69:2a:d3:30:61:
                    5b:66:28:50:23:30:80:84:ba:43:e8:5b:08:d5:2c:
                    c6:9b:b0:59:08:8e:38:c5:f0:b9:f1:38:4c:e0:99:
                    dc:a8:a0:b2:ed:02:00:0e:b7:91:14:d0:cd:4a:ae:
                    ed:29:0c:e8:80:b4:07:b4:ce:ee:d5:66:24:79:ea:
                    80:a3:7a:db:2c:48:cc:65:2f:3d:2b:6d:80:cc:7d:
                    f1:e8:4e:b5:89:2b:1e:5e:1a:49:51:de:68:90:9f:
                    36:cc:3d:10:eb:39:c1:7b:42:f5:90:4c:7b:51:ed:
                    57:fe:9b:5d:f5:1f:9f:c9:8e:6d:c3:38:d5:78:ad:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F7:96:D9:2D:94:EF:1A:55:6A:B9:98:6F:F8:0D:50:98:69:D8:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.24.0/21
                IPv6:
                  2803:de80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266877

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:1b:bb:88:c2:38:d5:ab:97:b3:0f:ab:27:44:d9:80:54:
         12:4b:17:61:06:d0:05:58:8b:a0:33:58:1d:1c:78:7f:6a:1a:
         4e:2a:33:8d:80:39:27:3c:27:18:9c:af:30:b7:4b:2c:c9:c9:
         1f:75:1f:22:cd:52:5e:6d:a8:21:82:db:05:44:9d:1b:30:42:
         39:10:29:f0:c4:a7:02:3f:5f:c5:27:49:10:51:7d:fd:2d:b8:
         a2:7a:f2:03:c1:bb:c7:2d:b3:a8:34:8a:86:f0:6a:ed:5f:1d:
         79:54:6c:78:41:88:07:b0:04:48:e2:fd:68:63:7b:a0:27:51:
         b8:1c:9e:27:33:a4:37:9f:a7:9d:70:78:a3:40:6d:ea:1c:b3:
         0e:26:62:8d:d6:c6:d1:70:ab:1d:02:f3:a0:46:98:9c:85:4d:
         71:5c:36:72:ea:47:3b:9e:04:54:03:a6:2e:55:74:9c:94:8b:
         cb:e3:7e:6f:fd:68:51:14:a2:26:68:2b:c7:84:3f:d1:f9:f9:
         6c:42:ee:91:a8:48:43:8c:78:d9:c6:93:bf:b8:46:f3:c1:76:
         aa:70:cf:ed:46:69:1d:ea:00:62:f4:b9:54:5f:67:8c:ed:15:
         d2:b5:95:c0:b4:b9:f4:ee:43:46:46:38:ff:d4:e4:79:c3:2e:
         d1:0d:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----