Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46bfa72421aae6d53bffc2308ae1fd0b350314da.cer
File:                     46bfa72421aae6d53bffc2308ae1fd0b350314da.cer (raw, json)
Hash identifier:          YNdkwU3Jkg/7D26mOHM7oxZDPIEvNjFLTvoWAIHgas8=
Subject key identifier:   66:21:40:E5:11:2D:3B:96:D0:F3:15:4D:88:05:E6:3E:38:E2:24:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010508A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/46bfa72421aae6d53bffc2308ae1fd0b350314da.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 May 2020 22:01:43 +0000
Certificate not after:    Sat 30 Nov 2024 13:39:18 +0000
Subordinate resources:    AS: 269924
                          IP: 207.191.164.0/22
                          IP: 2803:12e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17107109 (0x10508a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 22:01:43 2020 GMT
            Not After : Nov 30 13:39:18 2024 GMT
        Subject: CN=46bfa72421aae6d53bffc2308ae1fd0b350314da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:64:6b:c0:fc:7b:66:b3:bd:dd:1e:10:6a:
                    ef:e5:90:0c:f6:bd:c3:ac:f7:67:cd:ec:09:d4:78:
                    26:b8:9f:a7:f1:3f:27:66:42:1a:f2:cc:a9:0e:0d:
                    14:2e:72:a7:34:56:3f:0d:fa:fc:6c:46:91:04:62:
                    85:18:9c:4f:6b:60:2a:a2:65:e4:c2:5d:df:8d:79:
                    a4:95:34:29:fc:25:84:67:b8:08:f4:00:ca:40:a4:
                    2e:97:fa:fb:0c:02:b9:af:b9:47:70:09:ce:1d:62:
                    d3:4b:a1:d8:aa:f3:7c:4a:50:55:64:28:ac:d6:2f:
                    51:dc:1d:cf:23:5a:b6:02:97:03:2e:be:20:9f:8c:
                    bb:87:d8:e4:9d:78:31:75:b1:93:3b:8a:fd:2c:98:
                    1f:f7:f6:da:35:54:fa:f4:01:3a:76:cd:b7:27:0e:
                    44:c3:15:1a:23:8d:ee:99:38:65:6b:ca:f6:1f:2c:
                    b3:3f:5d:27:76:46:c7:9c:c5:53:02:c7:48:d4:c3:
                    a9:97:66:5d:47:26:b9:96:d4:b9:37:9a:0d:a3:7f:
                    38:15:00:af:de:2f:69:36:3f:dc:3d:8b:f2:29:48:
                    f2:b6:a5:0e:cc:11:12:31:34:dc:f3:64:ac:7e:02:
                    66:c2:c0:84:3c:c4:6d:45:28:42:3a:24:79:0b:2d:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:21:40:E5:11:2D:3B:96:D0:F3:15:4D:88:05:E6:3E:38:E2:24:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/46bfa72421aae6d53bffc2308ae1fd0b350314da.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.164.0/22
                IPv6:
                  2803:12e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269924

    Signature Algorithm: sha256WithRSAEncryption
         98:07:85:37:a1:c2:2f:f5:f4:14:7e:7b:fd:c9:b8:0b:26:42:
         f8:e5:f7:f4:13:97:81:5a:83:59:3e:d8:2f:9e:7d:fb:6e:69:
         bd:e3:26:23:df:e5:46:7a:77:92:b7:71:98:c7:27:20:c3:16:
         94:50:9e:2e:0c:98:40:97:a9:dc:78:77:c8:67:79:b7:42:7c:
         cf:90:7e:f0:44:55:fa:51:0b:6f:8f:be:8d:e9:20:d4:3d:f4:
         1f:2d:3f:35:cc:08:5a:3a:4f:51:01:e1:f5:f9:ba:21:7e:6a:
         af:6f:3a:2e:28:53:63:06:44:1f:ac:c5:b7:06:ef:ca:10:7a:
         48:56:9a:27:bc:4f:80:5a:f3:be:b7:fc:3a:c5:73:85:34:70:
         17:68:81:36:bc:61:84:96:50:5f:61:2a:b9:cf:40:96:04:64:
         a8:66:b5:96:c7:da:a9:b9:d7:8d:19:6a:7b:e7:8a:b0:9d:9b:
         7c:8f:b3:6d:2e:32:3f:fa:86:73:1d:13:23:e5:ad:2e:02:59:
         0e:73:c6:b5:30:0a:f0:c6:cd:90:eb:ee:ed:79:d4:2f:18:f4:
         03:c0:00:50:cd:8e:81:c1:6f:9e:2c:ef:ad:b3:a3:4c:e8:0a:
         2c:1c:8c:82:a5:7a:9b:d2:a2:f2:b7:88:10:be:06:84:0e:83:
         98:81:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----