Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a584b25ee533fa7ea37f69249c0d41f072fc3df.cer
File:                     2a584b25ee533fa7ea37f69249c0d41f072fc3df.cer (raw, json)
Hash identifier:          Q0Cp1W+nqRBgU66WaeA05eMbqa72YY5QjfKguE4MQNc=
Subject key identifier:   EF:59:2A:09:03:D5:3F:EE:41:D2:1F:43:7A:38:D8:F9:91:66:8E:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1E478
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/2a584b25ee533fa7ea37f69249c0d41f072fc3df.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Sep 2020 19:56:57 +0000
Certificate not after:    Thu 15 Aug 2024 21:31:30 +0000
Subordinate resources:    AS: 269813
                          IP: 45.186.136.0/22
                          IP: 2803:bb60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15852664 (0xf1e478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 10 19:56:57 2020 GMT
            Not After : Aug 15 21:31:30 2024 GMT
        Subject: CN=2a584b25ee533fa7ea37f69249c0d41f072fc3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:02:a5:86:58:dd:fe:0d:c4:92:0d:1f:06:
                    ff:61:79:4c:67:9d:8a:92:67:93:fb:78:35:59:37:
                    e9:98:6c:4e:6c:6b:1d:41:43:7b:20:e6:07:f7:a2:
                    ce:e3:f7:b5:0b:3e:97:83:59:1f:ea:15:c0:9a:3b:
                    73:6a:28:c8:ed:51:16:d3:93:07:42:b9:ac:71:26:
                    8e:1b:4a:ff:46:1b:18:1e:66:ac:91:2b:b7:16:52:
                    a9:0c:80:c7:06:24:d9:0a:f1:c4:be:77:1d:5f:e0:
                    06:b7:60:cf:60:7b:5a:34:87:05:06:39:11:6e:dd:
                    24:a0:28:e5:59:3e:64:fd:be:c5:98:4a:a1:b6:9a:
                    9c:57:38:6e:5e:09:2a:ac:9d:78:a4:c7:2a:d9:1f:
                    30:24:8f:e5:e0:29:e9:12:8f:87:9f:b9:82:7b:2f:
                    8b:06:61:11:99:57:b9:a6:43:e6:6e:76:63:3e:b5:
                    1c:02:50:a2:10:91:f0:95:ca:2e:3e:d7:4f:dc:95:
                    8b:90:29:51:cf:29:67:32:53:a8:2f:e3:d9:36:0f:
                    ea:80:f5:83:a9:ff:a3:4c:7c:2f:0d:50:de:ef:02:
                    93:01:77:ec:5a:65:60:e7:b2:74:0d:73:62:0d:ea:
                    2a:33:50:05:aa:0d:64:9b:82:a5:e4:f3:eb:a7:e5:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:59:2A:09:03:D5:3F:EE:41:D2:1F:43:7A:38:D8:F9:91:66:8E:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/2a584b25ee533fa7ea37f69249c0d41f072fc3df.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.136.0/22
                IPv6:
                  2803:bb60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269813

    Signature Algorithm: sha256WithRSAEncryption
         0e:55:de:01:4a:5b:b3:12:d6:ec:a3:ad:f9:ce:f4:cb:7f:49:
         77:dc:c2:37:0d:a9:95:29:30:80:66:74:68:08:64:6a:8b:cc:
         a7:be:55:ec:96:c9:90:5d:4e:a3:11:81:d5:ec:a9:e2:24:03:
         1b:d9:77:3c:f2:36:e3:88:7d:a7:3f:77:ed:9f:0f:82:d3:c1:
         45:db:bf:47:f8:eb:84:39:e3:9d:8e:2e:a2:f3:f0:fd:e4:b7:
         d1:b9:36:2d:a4:21:2e:46:da:a6:6d:be:42:69:0a:4f:88:43:
         0a:80:c1:85:98:2f:27:ec:c6:28:90:df:95:27:d3:4c:75:4b:
         e2:4e:76:82:cb:40:fc:d6:e2:e0:b5:46:47:88:19:e6:e2:2d:
         95:64:b7:29:d5:74:3e:78:98:f3:b3:b6:0d:4b:ac:e0:89:17:
         f6:3e:76:e9:3a:3c:19:d4:cb:3e:d4:29:8a:16:e2:b4:55:59:
         9f:8f:7f:ec:94:dd:68:15:d7:ac:cb:c9:47:a9:74:3d:aa:15:
         bb:f1:d4:a3:8c:8c:ba:e3:93:4c:bb:99:81:3d:1b:4e:47:94:
         b4:78:28:2e:10:8b:79:4a:e3:87:b3:c6:6c:b6:64:c1:c2:88:
         a1:ce:ff:5c:f7:3d:c5:b3:31:0c:df:15:6a:75:c6:d0:ba:ab:
         3b:25:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----