Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5.cer
File:                     3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5.cer (raw, json)
Hash identifier:          hjc6EI27LWXtSyAGoGZWqS+LDg1Gu2SAEGo46f3gcQs=
Subject key identifier:   3B:67:31:14:73:FC:21:0F:B6:0F:F4:42:7D:78:E2:89:20:F3:58:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDF5C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Sep 2020 15:32:34 +0000
Certificate not after:    Wed 17 Jul 2024 23:21:39 +0000
Subordinate resources:    AS: 52401
                          IP: 200.124.184.0/22
                          IP: 2803:de00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15594948 (0xedf5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 15:32:34 2020 GMT
            Not After : Jul 17 23:21:39 2024 GMT
        Subject: CN=3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:58:48:d4:8e:82:71:ad:4e:17:20:5d:c2:3e:
                    ae:6c:d8:4d:a1:53:b3:fd:8d:d1:00:1d:a3:47:fe:
                    6a:61:a7:a7:fc:d9:13:42:c7:62:50:e4:46:4f:10:
                    99:06:bc:29:8d:fd:60:8d:24:21:32:2b:4b:73:f8:
                    5d:01:e4:f0:a6:32:c1:c7:97:36:aa:df:0c:7a:26:
                    41:61:d6:1c:2b:b3:e6:9e:33:8b:79:9d:57:cf:d0:
                    47:3e:b8:5f:3c:54:68:0d:4d:82:5f:cc:8c:b5:f6:
                    30:57:bf:b5:d0:a3:1b:87:ed:97:98:c2:09:8c:a0:
                    a5:1e:15:d1:7e:f9:8b:05:33:92:29:f3:8d:c1:d6:
                    91:aa:c2:11:01:59:30:04:a0:a6:cb:04:69:36:97:
                    c9:94:2c:2e:0e:d1:d9:ba:cd:44:75:05:f9:a5:e4:
                    c3:a9:c0:35:4b:dc:93:18:63:46:9c:99:22:05:7a:
                    fc:9f:7c:65:ae:2b:a1:fa:30:d3:7e:47:09:cc:7d:
                    5c:e9:34:45:6e:2f:4c:96:41:e8:c4:21:bc:73:4a:
                    54:87:24:d5:98:2c:96:e3:ac:95:89:1d:12:c5:e8:
                    57:00:6d:53:02:e5:64:be:bb:fa:c5:6a:3e:97:7d:
                    92:d2:58:5d:4c:ca:c4:63:46:62:fb:e6:a8:85:74:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:31:14:73:FC:21:0F:B6:0F:F4:42:7D:78:E2:89:20:F3:58:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.184.0/22
                IPv6:
                  2803:de00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52401

    Signature Algorithm: sha256WithRSAEncryption
         b2:c2:59:58:76:bf:a0:66:51:57:c2:03:ed:45:d8:a1:92:a4:
         8b:8a:28:6a:65:8d:bf:92:e1:4c:51:cd:22:0b:03:a8:70:8c:
         9e:c1:38:4e:58:9f:19:b5:69:cd:90:3e:95:8d:d8:8b:f5:48:
         09:4b:24:cf:19:78:66:42:fc:c9:56:93:2e:65:02:ca:21:70:
         87:8d:53:d5:f9:86:0c:5f:06:c1:52:4b:7c:8c:5b:3b:e8:75:
         d3:e0:f6:e5:ee:8f:4f:ff:4d:76:ed:57:26:80:2d:53:cf:62:
         c2:0f:58:7d:ff:9a:09:02:c7:f2:8d:14:7b:dd:40:61:6b:2c:
         92:90:7b:39:fc:26:74:01:e5:8d:24:14:56:cb:7d:01:92:e9:
         d4:8d:71:f9:e2:f4:92:47:44:47:5e:83:f6:d1:d2:a9:33:02:
         68:f3:f3:30:e0:b1:a1:ad:08:b7:27:4a:9f:50:3f:ed:b8:fa:
         a5:81:25:c8:39:3c:77:42:12:8e:e5:46:e3:6a:e3:07:4a:6f:
         7c:2d:20:4f:e7:3a:cb:6f:02:20:a8:35:b0:16:26:33:8b:f4:
         61:70:77:dc:23:e9:5a:f7:d7:58:00:0a:3d:cf:50:f0:07:d7:
         45:fa:5e:9c:d7:3f:6e:98:34:81:a0:00:96:98:94:eb:5c:b9:
         fc:af:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----