Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a0b642c22955b5add812a8a0c66c25349002a5b.cer
File:                     3a0b642c22955b5add812a8a0c66c25349002a5b.cer (raw, json)
Hash identifier:          ET8a9Bw/0z0srCmxbezAGQVnqT4olBqUwgxCjuJuf8g=
Subject key identifier:   9F:C8:3A:F8:78:01:CF:C4:21:99:CF:E6:4E:CE:70:CE:F8:8D:AD:13
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB1C5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/3a0b642c22955b5add812a8a0c66c25349002a5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Apr 2020 18:53:36 +0000
Certificate not after:    Sat 03 Feb 2024 05:00:00 +0000
Subordinate resources:    IP: 45.5.180.0/22
                          IP: 2801:10:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14359643 (0xdb1c5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 22 18:53:36 2020 GMT
            Not After : Feb  3 05:00:00 2024 GMT
        Subject: CN=3a0b642c22955b5add812a8a0c66c25349002a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:59:e8:56:58:80:bb:60:23:9c:6b:86:c6:
                    59:93:1b:39:84:3a:44:7b:aa:3c:bc:6f:58:06:fe:
                    00:27:26:0a:e2:64:c3:e7:0d:69:e1:59:6b:fe:31:
                    3e:70:3d:57:fa:47:72:5c:ba:93:4c:53:e8:95:2e:
                    0d:46:67:52:7f:28:c1:1e:06:b9:4a:b5:3a:03:5d:
                    ce:43:48:ba:f6:03:2b:1d:10:9d:17:d0:d1:7c:f3:
                    be:ae:6e:5d:97:f9:17:7f:e8:18:b6:cb:b4:4c:66:
                    40:98:b0:17:1a:4b:56:b2:7b:7e:aa:c5:dc:e0:ef:
                    3e:05:80:88:02:a6:97:2a:e1:5d:7c:d4:1b:8a:de:
                    61:9c:13:89:bb:03:76:a4:5d:57:9b:cf:fd:8b:1b:
                    01:5b:55:03:9a:74:49:c4:77:79:ca:df:c6:12:da:
                    57:5e:c8:53:e3:d0:a4:41:85:5c:b8:f0:a7:af:a9:
                    6c:27:20:32:09:84:6e:07:de:aa:3c:d3:81:94:e1:
                    dc:11:d6:ed:2a:93:a8:d2:00:93:70:0c:17:67:99:
                    f6:40:0e:de:7a:9e:b9:c9:32:47:ea:7e:f2:6b:89:
                    0b:3c:a7:3f:84:30:78:ae:6f:07:3e:1f:6c:b7:4d:
                    f1:82:84:44:bf:26:bb:3b:c7:b6:bf:f7:9a:b2:b1:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C8:3A:F8:78:01:CF:C4:21:99:CF:E6:4E:CE:70:CE:F8:8D:AD:13
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fc2acae1-4d2d-4021-ae24-953534ca6efe/3a0b642c22955b5add812a8a0c66c25349002a5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.180.0/22
                IPv6:
                  2801:10:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:65:a3:94:62:ce:d3:81:32:b8:38:c6:03:a6:5b:ea:7a:19:
         a5:54:97:ae:13:fb:33:14:5b:a2:7c:23:7d:67:00:b2:6f:31:
         8e:3b:46:9c:87:a2:13:af:c1:8d:ce:23:f4:82:d2:e4:b0:14:
         a6:24:83:cb:56:8e:da:61:63:0e:ca:d2:0a:3b:00:de:9f:9b:
         1a:9f:67:b8:f2:b0:5e:ea:3c:19:ab:67:8e:99:fb:08:8e:f4:
         db:22:ff:b0:bf:b6:fc:7e:8b:01:dc:4b:f5:45:4d:df:92:5d:
         94:a1:f6:99:31:f7:aa:fd:ac:f2:82:1b:cc:9e:bf:fe:f3:ef:
         8f:ac:8f:62:e6:e7:c7:76:30:81:8d:20:8e:d6:54:20:17:ba:
         13:b2:27:a1:80:a1:46:6d:0b:e0:21:95:c4:eb:4b:bc:88:ff:
         95:8e:b4:3b:5f:cd:01:89:4c:99:8f:c2:5f:ad:d9:92:9e:e4:
         f9:73:55:8d:50:d4:8e:b7:b9:01:e8:ad:34:30:9f:0a:aa:b4:
         e3:bb:23:a0:03:bb:a2:f7:03:f3:e1:f9:51:fd:2b:42:83:11:
         bd:a7:98:00:03:ed:aa:c1:4c:95:33:ee:8d:a0:79:a6:f1:f1:
         12:a4:85:a9:b5:99:69:47:2c:c8:0a:ed:7d:ac:2b:4c:24:55:
         65:84:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----