Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
File:                     2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer (raw, json)
Hash identifier:          mswWpKtrZG7WYFbxHNPdmPACK6Z7JBrmaJaUjdkGIAM=
Subject key identifier:   4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDFE28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 May 2020 15:22:18 +0000
Certificate not after:    Fri 08 Mar 2024 18:56:55 +0000
Subordinate resources:    AS: 266725
                          IP: 45.65.224.0/22
                          IP: 2803:e5c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14548520 (0xddfe28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 15:22:18 2020 GMT
            Not After : Mar  8 18:56:55 2024 GMT
        Subject: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:d2:11:d7:b5:b5:68:02:6b:da:e3:90:64:
                    5c:bc:de:26:f7:f2:3d:cc:82:ec:42:fa:6c:2e:27:
                    43:57:48:16:92:aa:33:77:62:ab:8b:a4:99:2a:69:
                    56:27:98:ef:d6:65:7b:1a:c6:d1:df:75:54:06:26:
                    ea:11:74:82:3a:de:4c:33:10:7e:18:3f:e3:d1:bd:
                    f2:cb:ae:e4:05:93:76:79:ae:52:1a:1f:ba:e1:5c:
                    f8:e7:74:0b:05:95:da:46:06:79:b3:07:e0:f6:90:
                    be:21:e7:56:c7:7f:c8:c0:d7:aa:3a:a7:a4:7f:2d:
                    ff:8f:2b:6b:9c:58:14:2a:79:b9:5d:2a:27:48:6a:
                    8d:3f:1b:d2:c4:ec:50:55:e2:a9:8a:a6:62:61:35:
                    fd:a1:6b:24:8d:e1:30:7e:48:7f:00:c2:30:66:4f:
                    eb:a4:c9:69:49:43:97:0c:ed:c8:0c:93:e9:1b:c3:
                    8e:b6:00:e1:59:8d:fd:e8:81:c1:3f:4d:eb:19:fe:
                    a5:d0:a6:d0:f0:67:7c:0a:77:d1:da:c7:0b:f8:0e:
                    14:b3:0a:95:35:55:4f:c6:34:0a:47:92:39:73:93:
                    03:64:71:4d:ab:07:80:53:41:b8:70:d5:68:c6:b6:
                    7f:14:72:61:cc:21:f6:ac:fe:c9:51:58:3c:3c:65:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/22
                IPv6:
                  2803:e5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266725

    Signature Algorithm: sha256WithRSAEncryption
         9d:c0:d9:23:34:7d:d6:99:13:5a:bf:0c:ae:ae:45:58:a3:b7:
         88:2e:2a:1c:21:70:76:ee:bd:cf:b2:35:d7:81:dd:2d:0a:0d:
         dc:01:37:cb:b6:66:90:50:a0:b3:78:cf:78:f0:7e:c9:ad:5f:
         24:79:c3:f0:94:83:09:c7:b1:70:07:ae:04:37:06:b3:6d:f2:
         77:dd:41:de:63:2a:a6:65:34:bf:42:bd:f7:41:0d:ff:6a:9a:
         98:df:2c:b4:9d:e4:ed:23:5b:46:ae:d5:0c:36:c1:02:51:67:
         a1:b0:5d:a2:e3:ee:c3:78:20:af:9f:13:a7:d2:a0:79:e6:13:
         b1:d6:b7:fd:dc:40:e5:92:18:39:61:5c:88:e2:83:c1:a2:a2:
         ed:35:e9:40:54:bf:15:fa:cc:d7:69:2e:53:2e:d4:f7:60:f5:
         18:53:f0:72:ce:78:3a:1e:07:e6:c9:63:fa:06:a6:0e:88:f9:
         3e:1e:85:69:c4:51:e4:e5:31:49:61:7b:ac:83:45:c7:7d:42:
         3d:a2:f1:6f:81:db:da:ec:25:4a:94:cd:12:d5:26:f7:72:5d:
         c5:17:4a:9c:7f:9f:3c:85:12:0b:cd:86:45:91:60:16:a7:01:
         e0:ae:a6:87:93:53:2e:b2:d9:81:64:40:c5:fc:35:43:df:63:
         58:59:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----