Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bc54a732b1e35772dfd48ba0704665447b560ae.cer
File:                     2bc54a732b1e35772dfd48ba0704665447b560ae.cer (raw, json)
Hash identifier:          5JSJjm56ixqmNDTEgYQvwz4wbQ7eMPcUrEZqBuNz42E=
Subject key identifier:   6F:08:13:8E:CE:A7:37:20:6B:A3:64:A0:B3:3D:D5:C1:AA:CD:3E:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D689C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/2bc54a732b1e35772dfd48ba0704665447b560ae.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2020 15:50:39 +0000
Certificate not after:    Tue 05 Dec 2023 15:46:14 +0000
Subordinate resources:    AS: 271823
                          IP: 190.83.72.0/22
                          IP: 2803:b2e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14059969 (0xd689c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  5 15:50:39 2020 GMT
            Not After : Dec  5 15:46:14 2023 GMT
        Subject: CN=2bc54a732b1e35772dfd48ba0704665447b560ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:f4:a7:17:d8:cb:52:c0:2e:d5:38:a2:64:
                    43:d7:27:21:ee:3e:4b:ff:2b:5e:15:12:6d:10:9b:
                    5a:56:a5:a1:97:99:a4:08:c4:61:00:aa:ab:53:d2:
                    48:6d:12:60:1e:9e:8b:4a:c9:8c:3b:b9:a4:2d:45:
                    09:fd:88:d1:4f:65:dd:81:e7:86:c5:8f:2f:5e:72:
                    b5:9f:50:00:9f:f0:6f:d9:20:8a:e8:dc:aa:8e:77:
                    ec:46:45:52:01:4d:30:2f:0c:27:23:08:cd:69:f6:
                    b8:4b:4e:41:19:cc:15:ab:6a:3c:aa:aa:88:7d:a4:
                    a8:c5:d9:91:ff:fa:77:f0:33:a7:c6:3b:89:f4:45:
                    6b:e3:bb:90:7d:4a:96:c5:7c:d6:ca:af:50:57:a8:
                    f4:c3:e1:b8:3a:e6:68:a6:1b:48:0e:fe:73:4d:f1:
                    5e:1e:03:2e:06:65:35:2a:df:26:99:7f:4e:d6:e0:
                    4d:77:7e:42:82:e5:14:cb:f7:63:89:8d:c8:ca:d1:
                    e9:ca:74:51:00:58:52:da:eb:2c:d8:8b:1e:07:92:
                    5c:3d:cb:4c:cf:70:d3:40:2b:0f:9c:5d:af:2b:b7:
                    99:f5:7c:c4:ad:0e:2d:9d:6f:0b:a6:fb:4c:8e:ec:
                    0d:ad:36:23:07:43:78:ec:d7:ff:0f:a7:7e:c4:9e:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:08:13:8E:CE:A7:37:20:6B:A3:64:A0:B3:3D:D5:C1:AA:CD:3E:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/2bc54a732b1e35772dfd48ba0704665447b560ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.72.0/22
                IPv6:
                  2803:b2e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271823

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:89:eb:e0:91:d9:12:84:44:f9:37:72:39:7e:0f:8c:7e:
         21:07:d2:8e:2a:04:3d:5d:cd:74:9a:5e:63:87:71:f5:0f:8a:
         c9:06:7a:81:11:ac:7a:41:fb:9e:00:ca:6f:64:4d:62:37:8e:
         84:15:7b:41:e8:05:ee:4a:35:6e:22:75:31:89:66:d3:8d:3c:
         56:0c:9b:90:08:62:0d:be:94:2e:63:36:75:c9:fa:22:5c:7b:
         be:56:78:55:01:32:b1:13:80:d2:34:f5:bc:ac:cc:98:42:54:
         3c:a0:03:b5:17:31:4e:d1:84:70:0e:72:19:7c:3c:35:6f:5f:
         6d:29:19:d0:92:c9:44:08:e6:06:a9:e0:9a:49:31:3f:58:f9:
         2a:87:77:d5:4c:6c:8e:8b:84:4d:ee:18:ff:4e:78:ac:93:bd:
         e3:6b:8a:1b:b3:67:9c:54:15:31:de:2d:ae:44:18:bf:88:6c:
         05:23:5c:84:5b:f9:d3:1b:4f:35:af:42:92:d4:b4:06:13:0c:
         a7:ad:70:3e:25:c4:f4:52:90:24:56:9c:e0:91:a8:9e:65:b2:
         37:e7:66:32:40:1c:99:00:bc:15:78:3e:53:d2:46:36:78:47:
         c1:55:d9:d0:c9:58:ea:5b:6c:e7:c9:97:8a:a9:29:d5:8b:03:
         77:3b:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----