Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ba6696fb31d1cc69120e7388063ab6feeda983b.cer
File:                     2ba6696fb31d1cc69120e7388063ab6feeda983b.cer (raw, json)
Hash identifier:          a6HxvwrECKB9Zdaa0C7A41zMNDkgxx3D+jH1GIEkVDA=
Subject key identifier:   B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD8629
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Sep 2020 20:55:28 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 2708
                          IP: 148.214.0.0/16
                          IP: 2801:c4:30::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14517801 (0xdd8629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 20:55:28 2020 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=2ba6696fb31d1cc69120e7388063ab6feeda983b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:72:ee:84:5e:09:12:36:95:59:20:e2:16:
                    fd:da:cb:a7:9f:67:44:44:1d:d2:d3:ad:49:c2:81:
                    ce:07:6b:a0:d6:e4:28:48:92:e1:93:bc:c2:a3:f5:
                    c4:c7:44:01:47:63:fa:06:28:82:37:ce:6e:d0:7b:
                    13:6e:e4:49:59:80:82:31:f7:6b:00:55:17:53:60:
                    bb:d7:db:4d:14:a1:ae:d2:24:74:37:cf:e4:e7:4f:
                    11:3c:94:56:86:67:a8:52:40:a0:41:de:78:cb:1d:
                    30:b9:38:1d:0a:fb:e2:6f:1e:50:60:13:cb:b8:1e:
                    11:9f:02:0b:fc:cd:42:28:4d:2d:4c:e1:83:9e:07:
                    47:62:3c:ec:da:ad:e0:eb:ba:a9:4d:ea:12:d5:98:
                    3e:60:ca:4c:7e:23:57:18:82:82:59:a7:79:69:34:
                    2a:71:06:e2:00:36:58:9a:62:37:ec:af:d9:c1:f3:
                    cd:f9:c3:4f:44:ce:8a:69:06:32:f7:ea:4f:27:59:
                    49:ad:5c:f6:8f:ac:af:cd:b0:b4:6c:56:81:d6:43:
                    34:eb:55:99:35:ef:ac:a7:89:fe:b0:45:84:81:cb:
                    c5:b0:cd:fd:21:9b:bf:01:3f:5c:73:8e:a8:38:52:
                    9c:ab:60:4c:54:f6:4f:25:a7:23:48:f1:0b:53:fc:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.214.0.0/16
                IPv6:
                  2801:c4:30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2708

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:e5:c5:89:a8:e5:56:01:0b:d8:e0:d2:47:7a:c6:46:e2:
         e8:99:be:d0:32:9e:85:4e:d0:a7:b5:fa:30:ab:18:55:b9:0d:
         c0:5f:b3:c5:2b:8f:2d:cb:28:b6:12:c3:65:73:eb:7d:49:03:
         38:28:d5:fb:1d:df:35:db:6a:a4:2a:c6:ba:64:95:fc:c2:4c:
         08:b0:53:1e:4d:bf:3a:a3:5c:1e:f1:c6:b7:c5:bd:f8:52:8c:
         ca:dc:36:85:51:89:cb:78:fd:bb:44:fb:c0:ce:d8:43:d1:4e:
         b2:47:7a:84:e1:be:85:96:f0:47:1a:b5:d1:55:1a:c1:35:6c:
         41:9f:c7:8e:f4:24:51:ef:f3:7f:68:17:c2:54:50:be:e9:43:
         ff:bc:36:e7:0a:3b:2f:00:2d:08:13:74:b4:15:20:a9:cb:76:
         f1:8f:b8:88:86:cb:fd:25:95:c7:0f:d5:a0:b4:34:03:b8:cc:
         56:0c:fb:c4:39:83:7c:20:83:2c:36:91:6a:92:26:1e:73:2a:
         7e:1f:3b:d9:4d:2b:c5:d8:57:3e:0a:b2:7f:23:76:76:27:3f:
         50:ad:b5:14:ca:2c:7f:30:10:e3:a3:28:f9:d8:4e:ad:82:a2:
         b8:25:79:20:6d:6e:a8:e4:2a:a8:04:e3:40:ce:66:75:56:03:
         27:2e:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----