Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d32ebe916009a3fc3780b7e96e2b0141d847585.cer
File:                     2d32ebe916009a3fc3780b7e96e2b0141d847585.cer (raw, json)
Hash identifier:          cETGQtgIEuBqX00mywtbuTXmZNYLJ1CrfzNWZvJN5ak=
Subject key identifier:   54:3E:24:9D:BD:D5:AB:0F:65:A8:44:B7:B6:AE:CB:85:73:2B:1E:AD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D73B90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/2d32ebe916009a3fc3780b7e96e2b0141d847585.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Aug 2020 16:16:04 +0000
Certificate not after:    Fri 15 Dec 2023 20:15:30 +0000
Subordinate resources:    AS: 264675
                          IP: 168.121.56.0/22
                          IP: 2803:cd40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14105488 (0xd73b90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  5 16:16:04 2020 GMT
            Not After : Dec 15 20:15:30 2023 GMT
        Subject: CN=2d32ebe916009a3fc3780b7e96e2b0141d847585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:16:09:0f:d9:5b:dc:4d:39:b9:95:3b:17:
                    72:dd:a1:fe:a1:84:58:ce:26:8e:12:c9:3a:f6:24:
                    d3:28:a5:92:bd:a9:35:db:0d:4f:94:36:e8:79:53:
                    84:ea:8c:07:15:a7:e0:cb:43:9a:72:08:6a:fd:3c:
                    b0:52:e0:bf:5e:89:88:24:89:a0:cd:fc:97:4b:be:
                    00:aa:0d:fe:15:c8:41:ab:4d:c9:c1:01:06:7d:90:
                    f2:d2:5b:09:7a:4d:46:26:09:6c:e6:f2:0b:3c:ef:
                    bc:73:ec:d6:b1:b7:1e:89:e5:b4:29:a6:ed:cc:00:
                    2e:22:0e:02:84:f7:f2:7e:42:a2:9e:09:bb:3d:d2:
                    dc:59:0c:4a:9f:c7:ee:fd:e6:69:7c:7f:60:39:ad:
                    8b:28:9b:34:a9:76:4b:2a:83:43:23:88:0c:ad:e9:
                    3d:35:48:47:e2:31:75:93:c1:5f:d4:1c:c4:d9:00:
                    53:7f:50:45:39:26:91:20:50:06:5e:c5:69:8d:28:
                    87:41:d3:23:22:7d:6b:29:f0:5f:69:ae:1d:06:5e:
                    03:bd:91:75:de:fa:d0:bf:a2:32:a5:cb:4a:e5:a3:
                    f3:60:6a:34:fa:f3:fc:06:d3:0d:03:d4:bd:fd:f6:
                    97:35:ac:6e:35:0a:7c:7e:f2:bc:37:9b:82:b3:6d:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3E:24:9D:BD:D5:AB:0F:65:A8:44:B7:B6:AE:CB:85:73:2B:1E:AD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/16b3e31d-6e47-4985-a4df-70aa6269bd6f/2d32ebe916009a3fc3780b7e96e2b0141d847585.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.56.0/22
                IPv6:
                  2803:cd40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264675

    Signature Algorithm: sha256WithRSAEncryption
         67:a5:32:43:54:f7:b1:1d:a0:45:1a:47:da:e9:9f:1e:64:8f:
         37:ea:90:bd:c1:50:89:a4:e8:ec:dd:5d:4c:4c:e5:5f:09:1f:
         7e:a5:a2:4f:a1:2a:91:6a:4c:8c:a8:fa:08:60:df:0c:7c:17:
         76:97:e4:60:96:23:54:99:03:f7:b7:d0:a1:a0:09:8a:d6:e6:
         56:5f:ad:6e:19:ff:6d:c3:48:f1:ac:2f:40:c0:ef:62:7f:df:
         42:5b:04:56:e4:1c:b8:8c:9c:10:1c:ea:74:4e:2c:70:cd:b7:
         2c:d6:48:03:f2:6b:f0:36:44:de:73:67:f9:75:f9:e3:16:44:
         5a:bb:cb:17:60:d0:98:c9:43:b0:ac:c5:dd:a5:93:70:ce:e7:
         e9:70:2c:ee:9f:9d:8d:89:70:46:18:21:d3:73:d5:78:fb:89:
         2a:e9:17:14:01:29:ee:63:49:8a:0d:46:a2:de:4f:12:60:f0:
         33:9f:fd:45:ba:37:2a:4a:9e:f6:7b:6e:70:5c:c2:e9:b0:af:
         22:73:60:7c:d6:21:c5:bf:3f:6a:0e:c3:28:73:02:e4:2c:3b:
         7b:ab:55:44:32:a3:0a:ab:ea:e4:92:6f:19:61:38:db:82:a8:
         e1:f6:04:d5:56:34:40:64:21:c2:c0:0c:b5:0f:ed:15:d2:03:
         d6:0c:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----