Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer
File:                     2cb72688104ed29264f079ae92d8d441e6eb06a9.cer (raw, json)
Hash identifier:          OhPxnBqmgLXLi59+vgcIAbef/7JI3zy0Ty4DUbrhTnU=
Subject key identifier:   3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBB006
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/2cb72688104ed29264f079ae92d8d441e6eb06a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Nov 2020 18:49:25 +0000
Certificate not after:    Sat 02 Nov 2024 16:06:19 +0000
Subordinate resources:    AS: 269886
                          IP: 45.191.108.0/22
                          IP: 2803:24e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16494598 (0xfbb006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 18:49:25 2020 GMT
            Not After : Nov  2 16:06:19 2024 GMT
        Subject: CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:25:e0:cd:3f:0e:1a:03:55:9e:ce:8c:34:
                    4f:ea:5f:51:e9:80:aa:f8:0a:1d:9f:22:ba:39:ab:
                    21:9e:02:f6:89:d7:69:af:9f:fe:bc:90:84:41:36:
                    86:61:df:ab:02:6d:8c:9a:d9:f5:77:85:af:6a:b4:
                    47:35:d2:e7:96:9c:39:9d:37:fc:c4:b3:2b:f4:dc:
                    c2:46:02:05:cf:9c:0f:2a:17:18:1d:de:58:22:0d:
                    f7:f0:16:59:33:c8:68:5b:2a:a8:e6:f6:30:47:9a:
                    4d:52:8c:43:f9:f4:5f:b3:67:cd:6a:b3:5b:01:fd:
                    53:18:2b:e1:9b:3c:0b:d3:c5:9c:b8:e8:9f:6d:a1:
                    a3:92:d7:bb:8e:a0:0e:95:36:6f:e3:8d:8b:e9:5c:
                    4e:03:ca:36:98:e3:c8:dd:8d:f6:ab:bd:06:97:c3:
                    21:6c:b4:ab:c7:98:ab:64:70:56:e8:90:0e:dd:f9:
                    ee:a8:57:d8:d2:e7:3d:6b:c0:e9:63:5e:dc:f5:e0:
                    39:19:88:43:f4:9c:30:53:42:89:16:16:bf:bb:fc:
                    a4:d3:97:49:d6:b5:ee:c1:b9:cb:6b:ca:10:25:d5:
                    88:08:43:9a:7f:8a:c6:41:c0:42:fc:9b:40:40:18:
                    f2:73:cf:f8:01:3a:c9:22:19:2f:2e:b9:08:d7:7a:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/2cb72688104ed29264f079ae92d8d441e6eb06a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.108.0/22
                IPv6:
                  2803:24e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269886

    Signature Algorithm: sha256WithRSAEncryption
         6b:ad:86:3b:f6:e1:63:77:9a:f0:64:22:ac:a5:ff:b1:f6:9c:
         bb:63:68:6d:20:0f:f0:09:ef:cd:a1:df:34:9d:37:94:6c:a6:
         00:7a:b4:16:3c:89:ef:60:99:00:b8:c1:61:4b:27:5d:58:cc:
         54:ee:a3:8e:47:00:60:4e:0c:0c:b9:3e:87:b0:80:0f:4f:4c:
         11:5d:40:e0:53:56:fa:ba:f6:a5:08:54:e0:ac:f4:77:fe:96:
         b3:af:a3:8c:8c:11:af:c5:75:67:49:f6:64:bc:a9:f4:23:36:
         46:42:9d:83:be:76:d1:58:e2:37:5d:e0:d9:78:f6:f4:2d:b9:
         68:ef:13:0a:7d:6c:6e:1c:53:ad:94:24:6d:59:87:83:65:cb:
         68:e7:ab:81:46:b1:01:74:3f:83:a2:7c:bb:bf:13:a7:bd:72:
         4b:b8:13:ec:b6:a1:f1:13:86:c9:4e:8f:96:25:2c:cf:9f:b2:
         cd:e6:42:51:8f:15:f5:24:81:a4:3f:94:b4:70:6d:3e:ff:a2:
         13:82:d0:59:ff:8c:3c:25:fc:52:a8:db:4f:92:94:af:7e:6d:
         8a:07:47:0d:9f:cd:9c:bf:30:af:3c:53:98:ce:73:1b:43:90:
         15:30:9f:10:bd:0b:f8:8e:96:34:8d:61:8a:b9:84:d8:95:87:
         31:33:fe:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----