Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer
File:                     32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer (raw, json)
Hash identifier:          9VadafVHoGsmzAI9HneCmHh8wzjgeAzwLAoS3uOUaw0=
Subject key identifier:   69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE9A78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Aug 2020 23:50:19 +0000
Certificate not after:    Fri 15 Mar 2024 06:00:00 +0000
Subordinate resources:    IP: 45.236.44.0/22
                          IP: 2803:48a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14588536 (0xde9a78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 24 23:50:19 2020 GMT
            Not After : Mar 15 06:00:00 2024 GMT
        Subject: CN=32a8b2a97729bd1e6de885b58fd0c34c4a661ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:f1:d9:a3:8b:a7:4f:8b:58:d1:e9:2b:b1:
                    e6:8a:92:ef:7c:53:59:4c:f1:fb:b1:7d:45:a3:65:
                    12:59:ad:50:c6:bd:c1:ed:7e:1a:a7:a0:05:e8:de:
                    88:9b:bb:72:f3:a7:c0:10:fa:91:c0:24:8a:84:42:
                    c6:4d:cf:da:75:85:de:73:0e:2f:1b:09:26:a3:66:
                    45:ca:a8:f1:67:38:26:05:0c:13:31:6f:6c:38:f1:
                    8e:b6:b7:6b:b6:a7:40:e7:06:0f:69:90:38:ce:d5:
                    c6:4e:a3:6b:b4:db:90:32:a3:5d:46:b7:08:e3:66:
                    17:82:8e:51:c7:e1:a1:95:76:13:95:c7:78:27:9c:
                    1f:ea:d6:36:b9:8b:31:03:e1:cf:e4:c4:48:0a:0c:
                    dd:96:ef:90:c4:e6:ff:d4:a0:33:0a:63:b1:76:a0:
                    8a:5b:ee:89:ca:de:d2:bf:b5:58:be:54:f5:1b:e7:
                    17:eb:4d:35:82:c3:ef:c1:46:7c:4e:8a:40:19:fe:
                    fd:26:16:50:12:1a:5c:46:d6:4a:b0:75:b5:5d:9d:
                    3b:02:89:47:7b:ac:2c:76:95:b0:fb:c7:e4:23:35:
                    cf:cf:0f:48:63:7b:5a:cd:66:a3:ce:92:02:7a:69:
                    7f:d8:c3:2d:75:6d:02:b3:c7:8a:4e:e2:ac:3e:46:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.44.0/22
                IPv6:
                  2803:48a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:c9:16:6d:3c:c3:f1:f9:9d:2e:43:47:37:85:67:5d:d0:
         6f:fa:4f:ea:00:a9:0e:5d:7f:11:54:46:4b:56:96:0c:7d:8f:
         f0:70:e0:57:c5:c3:1c:75:70:72:3d:94:86:f6:d4:ee:0e:03:
         0b:fc:76:42:13:12:65:68:29:b4:ae:bc:3a:dd:44:fd:26:fc:
         1a:2f:de:f3:b4:e4:b9:3b:0a:67:e7:14:a0:66:26:aa:b1:2a:
         b6:91:9e:1d:7d:dd:d3:61:22:d6:1d:71:99:b6:a6:cc:f7:a0:
         bd:e3:17:04:92:9e:e4:2a:79:5d:58:b4:ef:94:52:ee:74:39:
         6d:9b:99:4d:a7:9d:c2:7f:96:4d:b3:8a:25:25:3f:41:89:3b:
         74:2e:87:05:59:f6:bb:15:ae:58:51:3b:c3:3e:69:37:7b:02:
         ca:5f:38:73:77:46:22:3c:89:e9:9b:08:8e:d8:a0:42:45:07:
         39:b7:a4:21:11:8d:58:93:12:de:d3:12:f2:4b:1d:3a:41:69:
         4d:dd:a6:e5:3f:68:a8:a8:5e:2b:e6:ba:6a:2c:85:f3:f0:23:
         47:15:62:cb:ff:5f:d2:67:c5:92:34:47:a4:d6:79:8c:a1:6e:
         ff:0d:ac:fe:57:41:82:f8:4a:80:ce:83:96:38:07:9d:34:a6:
         b8:ba:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----