Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer
File:                     2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer (raw, json)
Hash identifier:          cL/TenrSOBtuf1vNk4W0EQahvRnxn9PeUOaMZlX7MYw=
Subject key identifier:   5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6AA91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 12 Jun 2020 16:40:43 +0000
Certificate not after:    Thu 26 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 22860
                          IP: 190.113.0.0/19
                          IP: 200.24.224.0/20
                          IP: 2800:8f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16165521 (0xf6aa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 12 16:40:43 2020 GMT
            Not After : Sep 26 05:00:00 2024 GMT
        Subject: CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:73:59:2c:e3:d2:eb:c8:eb:dd:ec:3e:c5:
                    f1:0b:3b:28:25:6f:87:5c:5d:7f:12:b5:f7:04:b4:
                    9b:c6:85:b0:85:93:43:3d:d5:a1:7c:3c:52:87:e4:
                    c6:bc:d4:02:4f:cc:b5:c0:df:a7:81:dc:eb:50:d4:
                    39:f1:22:cd:6b:34:75:b3:e7:04:7a:b8:39:be:57:
                    21:3d:e9:8c:a1:e9:3e:a7:57:dc:a8:5c:99:91:8d:
                    3b:ff:26:aa:78:e3:4a:32:35:28:1d:1d:6e:db:95:
                    a5:98:b6:dc:f9:e3:2d:9e:c3:db:fa:43:28:03:fc:
                    62:15:65:fc:ca:e7:8c:3d:b2:59:88:d8:de:e4:fd:
                    d3:c4:4d:bb:38:06:61:75:c6:84:8d:50:ce:78:45:
                    94:58:5f:14:43:1e:a0:b2:9b:d1:27:0b:1e:d3:1d:
                    1b:f2:8f:12:d7:c1:24:36:a4:ed:28:1f:34:be:1d:
                    dc:02:a4:91:1c:da:df:42:61:bb:45:be:28:11:35:
                    fe:37:9f:75:8a:21:56:1d:90:0d:2a:93:55:13:b7:
                    2a:a8:6c:69:da:a8:63:07:a4:44:f0:b3:70:a7:df:
                    a2:8c:bd:e6:0a:5e:db:08:98:17:e2:2e:54:13:43:
                    ac:20:33:9b:3c:13:6c:93:62:b0:a4:54:ab:15:52:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.0.0/19
                  200.24.224.0/20
                IPv6:
                  2800:8f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22860

    Signature Algorithm: sha256WithRSAEncryption
         c3:24:5b:2d:31:57:bc:a1:b6:f1:43:78:69:58:ec:3f:98:24:
         9a:b7:53:b7:29:8b:6f:20:d4:cd:e6:1c:b6:80:78:f9:e9:df:
         da:1e:ce:f5:57:02:c0:e5:4e:e0:c4:c1:0e:64:0d:1c:8f:14:
         3e:8a:af:20:f1:4b:07:3a:4d:3c:f8:9c:1f:11:f5:b6:3a:00:
         62:d3:88:cb:41:b4:bc:42:63:7e:d9:ed:25:fc:23:25:b6:a0:
         da:c6:f7:e5:4b:39:72:50:7a:be:92:f4:54:78:aa:c8:90:ae:
         77:30:dd:37:d1:11:fa:e1:f1:45:88:47:b6:12:6c:e0:83:9c:
         55:c9:be:0c:49:32:43:29:8b:a3:82:0a:14:65:7d:70:ae:b3:
         ac:f5:37:c3:15:4c:6f:43:ed:a7:f9:43:d3:0a:3b:9a:26:a1:
         95:01:c7:77:41:ab:31:49:42:ee:88:3a:14:9e:3e:a7:45:a2:
         0a:37:fc:72:b2:b0:d2:6b:b8:2f:02:87:26:26:c9:08:f4:7d:
         51:4e:22:7e:3e:82:9f:2f:c6:98:8e:20:b9:58:b7:6a:c9:f4:
         8b:e9:03:fb:13:45:5c:f4:eb:74:1c:f9:b9:10:48:77:17:1d:
         25:3d:d8:f8:96:90:18:09:b7:c1:00:72:55:9d:61:b8:fb:26:
         77:d6:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----