Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/386b033044549633844a1e355380fa99c6222818.cer
File:                     386b033044549633844a1e355380fa99c6222818.cer (raw, json)
Hash identifier:          z1KyEKj8vtP4yD7ezn0KpukVzwAlx8h2opomxfQ4Q/4=
Subject key identifier:   1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F635FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Feb 2020 14:33:24 +0000
Certificate not after:    Sun 22 Sep 2024 19:53:01 +0000
Subordinate resources:    IP: 45.227.152.0/22
                          IP: 2803:be20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16135674 (0xf635fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 14:33:24 2020 GMT
            Not After : Sep 22 19:53:01 2024 GMT
        Subject: CN=386b033044549633844a1e355380fa99c6222818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:5f:8c:7b:5a:d4:6e:fa:fb:40:08:2a:f3:
                    dd:b9:49:28:aa:f6:c4:ce:09:13:f2:12:5d:b0:dd:
                    c4:73:d8:c4:cd:be:03:9d:e3:5f:65:9d:88:79:49:
                    c6:ef:91:b3:a1:f1:5d:61:c3:15:a6:a4:22:02:15:
                    a9:41:af:bf:6c:36:08:a4:81:c9:ed:2a:dd:a0:f3:
                    af:1b:6a:35:b2:ed:78:58:19:16:88:57:62:50:47:
                    77:3e:11:59:e5:3c:55:e6:0c:97:26:8a:93:57:23:
                    40:f6:75:69:0e:ee:2a:36:b7:c3:62:29:40:fd:18:
                    2f:f8:07:a5:da:04:5d:3d:8e:80:d3:85:dc:f7:6c:
                    bf:d0:72:b6:4d:4e:36:b6:0b:17:49:29:bf:db:43:
                    1e:c7:14:a1:ce:d8:3e:9a:a4:fe:7e:4c:26:7e:00:
                    6a:e1:96:70:0d:a7:de:0e:75:8b:ba:d3:6a:e5:0d:
                    88:31:40:20:3e:31:86:fe:34:ff:86:8a:3f:9a:61:
                    b3:20:8b:6d:f3:de:23:09:c2:a4:68:5b:40:da:14:
                    ca:e7:c6:16:cd:1d:b6:44:a5:1a:a2:af:4d:56:6d:
                    2b:f4:00:f1:d3:9e:6f:c8:b4:a3:13:27:d7:0c:75:
                    6e:69:bc:72:e7:3c:14:3f:ad:cd:15:81:58:5b:f4:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.152.0/22
                IPv6:
                  2803:be20::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:13:e5:43:e8:c6:b0:ef:c9:5d:66:65:5e:9d:9f:21:6a:35:
         1b:35:8d:f5:ed:f0:b9:52:72:f5:c0:bd:df:e2:95:d3:21:df:
         1c:37:bd:b3:72:78:4a:34:f1:e8:14:a3:4f:1f:ec:d7:36:da:
         37:08:9e:f2:a5:e0:ba:b4:4c:c0:b5:5c:f0:e0:48:63:c4:3e:
         a8:60:b8:1c:59:8e:3e:51:b6:86:19:8c:93:96:2e:43:d4:b6:
         e8:47:d2:f6:6f:f3:a9:cb:8b:25:08:51:f3:a9:f6:b4:1d:4a:
         50:19:39:3c:b0:c6:18:c7:60:05:63:1c:1a:14:05:98:e9:c0:
         f1:c4:38:38:24:65:1e:70:25:1c:70:68:a3:60:00:32:a4:5a:
         6c:dc:e3:f1:08:86:8d:41:3f:95:d9:ef:f7:ad:4a:3a:33:6b:
         29:20:80:da:39:2d:d7:85:61:bd:0a:fe:eb:cb:d4:d9:a1:cf:
         28:3e:e5:7f:43:75:5e:d0:ab:de:5d:1d:ab:ce:c8:5e:c2:f9:
         b9:02:88:64:b6:26:5b:ad:80:f4:95:d7:20:68:dc:ce:50:96:
         58:62:2b:0c:e4:30:61:20:42:bd:02:a6:00:21:fa:28:79:86:
         60:4f:f0:ab:02:11:8b:0e:2f:8c:f6:81:3a:ed:c6:0d:f9:63:
         2d:a3:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----