Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.cer
File:                     2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.cer (raw, json)
Hash identifier:          wT9v4ohD3dG49iGj7WDx7Ox9TuaolbzXd0sUaEsmT/E=
Subject key identifier:   0E:16:D9:27:D2:72:B6:16:3D:F9:54:E1:01:E2:39:3D:8A:B3:68:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9C024
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Aug 2020 01:03:23 +0000
Certificate not after:    Thu 13 Jun 2024 23:43:06 +0000
Subordinate resources:    AS: 270085
                          IP: 200.0.67.0/24
                          IP: 2801:10:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15319076 (0xe9c024)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 17 01:03:23 2020 GMT
            Not After : Jun 13 23:43:06 2024 GMT
        Subject: CN=2d58158bda6f6fd6f2d2ecdd11220a4132b054c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:9f:c6:f6:2c:99:44:b6:9d:b4:e9:6f:d8:
                    0b:75:a2:21:63:f6:f1:bf:a7:aa:6d:41:a1:19:c5:
                    39:d2:99:ac:8d:8c:7d:26:4c:85:d3:70:b6:46:47:
                    0f:9d:b6:4a:77:c6:1c:89:91:7d:93:93:0a:ab:e9:
                    e7:f9:6f:d9:7a:38:51:3d:13:a9:8a:ce:24:a4:2c:
                    f0:de:eb:fd:62:3a:51:bd:54:3b:42:28:43:e1:d9:
                    fc:b8:9c:dc:8d:2d:50:a9:2b:62:c7:2c:ed:7e:9d:
                    4f:1d:4e:68:84:29:ae:87:81:d0:2c:8e:da:8d:90:
                    63:68:8c:e9:86:a9:8c:a7:72:29:fe:4b:fe:75:81:
                    8f:5d:7f:3a:a8:fc:d6:46:24:2c:e9:3b:5c:97:d1:
                    61:1b:55:3f:eb:53:ac:d3:02:25:e2:69:1b:47:99:
                    d2:89:e3:ab:1d:6b:8e:f0:28:79:17:fe:61:c0:b3:
                    75:c0:02:ff:a5:e2:f6:08:e2:53:ef:09:96:4a:64:
                    47:b2:e4:b1:b8:b2:b2:93:8d:0c:42:ae:16:ec:d0:
                    73:66:c7:a9:1e:2b:51:38:f3:a8:f9:6b:b5:cd:de:
                    e2:a0:8b:14:e9:0b:19:ce:7f:dd:48:fb:9e:cf:24:
                    80:19:d6:6e:f8:48:9a:2f:4e:d1:0c:04:e6:b0:7c:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:16:D9:27:D2:72:B6:16:3D:F9:54:E1:01:E2:39:3D:8A:B3:68:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.67.0/24
                IPv6:
                  2801:10:a800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270085

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:d8:58:37:e7:2d:7a:70:ea:64:be:62:b5:59:75:b8:18:
         92:d4:ef:2e:0a:93:d0:72:e8:f9:83:4a:2d:34:1d:5a:5c:18:
         46:39:79:d0:86:b2:43:a9:9d:8f:46:ed:da:f9:60:89:b0:5f:
         18:8f:fc:8e:45:a9:8a:e6:d7:dd:1f:30:30:fb:af:e6:49:f8:
         d9:80:09:5c:17:03:7c:ef:ce:74:81:d2:dd:a6:90:b9:fa:ac:
         b8:a5:b9:10:3f:90:01:7c:19:c7:98:35:7c:8b:7e:d0:ef:6c:
         58:ed:39:55:6f:b2:84:e0:bf:ff:b4:ef:80:1d:e8:d4:4e:84:
         54:eb:ce:f2:bc:ff:56:e3:e0:b4:8b:1b:29:1e:91:8d:26:a9:
         b6:fa:1c:90:da:5a:e6:04:cf:75:cb:d1:13:b0:a4:14:5d:5e:
         6c:16:6e:a3:50:86:0a:7e:42:1b:ba:8d:6b:ce:8b:bc:7c:f5:
         83:4f:e2:a8:13:3b:95:5d:b2:c1:e2:f5:5c:0c:36:bc:c5:03:
         6d:61:b3:97:1c:b9:37:ea:b3:5e:13:9a:d6:c2:9a:70:72:3a:
         e9:a6:33:1e:6d:8c:96:c0:45:55:6d:b9:69:71:dc:3b:0e:91:
         ed:fd:05:37:fc:bb:a8:00:7d:be:a2:20:75:97:e0:af:75:88:
         06:22:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----