Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e8a8aa03080d7ec87cb59361208e42641e3d6d1.cer
File:                     2e8a8aa03080d7ec87cb59361208e42641e3d6d1.cer (raw, json)
Hash identifier:          v6T+/+3NKQldzWrOQkfamus7SXGJDu3QqRqlasMpDbQ=
Subject key identifier:   1F:22:C9:86:A5:BC:7D:26:51:E5:ED:C9:B2:F4:4A:65:9E:FF:89:D6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA402F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/2e8a8aa03080d7ec87cb59361208e42641e3d6d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Sep 2020 02:11:56 +0000
Certificate not after:    Mon 17 Jun 2024 19:43:01 +0000
Subordinate resources:    AS: 270093
                          IP: 45.228.203.0/24
                          IP: 2803:7be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15351855 (0xea402f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 02:11:56 2020 GMT
            Not After : Jun 17 19:43:01 2024 GMT
        Subject: CN=2e8a8aa03080d7ec87cb59361208e42641e3d6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:5c:7a:9e:73:34:2c:2d:3b:be:99:7f:44:
                    85:2d:f7:fd:7e:5b:b5:fc:54:eb:fd:25:9e:fa:60:
                    24:50:b8:80:96:53:cb:f8:41:55:c0:1e:d4:bb:e8:
                    e5:fe:34:4c:51:71:4c:e5:53:d8:62:8a:5b:8f:e6:
                    ff:26:cd:cc:e8:6c:79:d5:c8:a8:1f:2f:d8:9e:fe:
                    1f:e7:da:5a:f6:7d:d2:27:2f:d4:00:a9:33:d4:02:
                    cb:db:9d:5f:18:93:64:36:b2:dc:5f:df:da:ed:5a:
                    ff:70:7a:ac:8d:8e:de:ce:c0:8a:77:e8:a3:1e:e8:
                    d4:bf:5e:52:a9:23:2c:41:ad:3b:9d:1c:3f:d3:cc:
                    96:25:38:a4:d0:fe:45:1f:bd:5a:f3:b2:6d:55:65:
                    50:b0:e1:54:8c:24:cb:9c:11:61:4f:47:a7:90:2f:
                    81:c8:18:47:ef:97:19:ee:24:80:59:eb:98:e5:63:
                    23:cb:9b:bf:89:fa:26:32:5a:8f:90:ba:d5:5c:57:
                    82:a3:c3:f9:eb:d4:86:91:ac:ee:e8:1b:f7:f5:ff:
                    3a:6d:12:d2:f7:fe:d3:09:2f:16:ef:b1:ab:9c:f6:
                    02:1d:94:cf:42:e3:fa:b7:7f:74:ec:08:e1:ba:cb:
                    d3:41:f4:3c:5e:e2:fd:ef:af:1a:17:64:d6:50:6f:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:C9:86:A5:BC:7D:26:51:E5:ED:C9:B2:F4:4A:65:9E:FF:89:D6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/2e8a8aa03080d7ec87cb59361208e42641e3d6d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.203.0/24
                IPv6:
                  2803:7be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270093

    Signature Algorithm: sha256WithRSAEncryption
         39:fe:4c:74:16:c1:28:4f:e1:b6:a1:7f:39:76:2a:d8:a0:83:
         66:83:2d:fa:1d:ff:12:88:23:ad:db:95:e2:be:e3:59:da:f5:
         21:1b:82:2f:9d:7f:4f:c4:f2:79:a6:d9:2a:4c:2b:5b:6d:1a:
         41:f0:7b:d5:5a:f1:f3:c3:eb:a4:b9:37:60:96:45:3d:76:1f:
         45:12:15:fc:09:a1:31:7f:c4:01:4f:03:72:9c:ef:02:09:d0:
         82:aa:e6:5d:a9:57:ca:60:8e:c3:b1:f8:da:82:80:57:85:e1:
         be:33:fd:0d:6f:c8:ff:6e:81:34:c7:9d:04:b5:ba:fd:21:bb:
         ce:4b:f9:a7:ab:a7:cf:4f:7c:50:9b:bf:cc:88:49:21:0b:c6:
         80:ba:a4:54:d0:99:2a:bb:c4:17:e9:93:be:ea:fc:4e:23:fe:
         30:a4:4e:28:cb:e5:77:e8:b2:74:85:4a:d2:2a:aa:84:b4:f9:
         0c:96:d9:56:54:c1:29:16:3b:be:a7:5b:c1:34:9a:f0:38:a6:
         53:63:6d:f0:ef:07:72:c5:ad:1a:5f:28:fd:f2:46:91:d6:76:
         76:37:3b:02:82:a1:55:48:80:81:7f:5a:fe:12:9f:48:90:1d:
         37:40:33:f6:01:69:6c:df:6d:47:f6:c6:8a:45:3f:0f:51:5c:
         c2:1d:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----