Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer
File:                     4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer (raw, json)
Hash identifier:          4U/8zrP9RoaBTHh9T/upQFBl3IQZFXBM3Z1zvxdGakM=
Subject key identifier:   37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFE166
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 17 May 2020 17:50:05 +0000
Certificate not after:    Thu 28 Mar 2024 18:25:19 +0000
Subordinate resources:    AS: 52438
                          IP: 131.108.40.0/22
                          IP: 179.63.248.0/22
                          IP: 190.185.104.0/22
                          IP: 2803:bc00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14672230 (0xdfe166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 17:50:05 2020 GMT
            Not After : Mar 28 18:25:19 2024 GMT
        Subject: CN=4f17752f3d0b4b3bb5cf630e65f8e199604e5f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:1a:15:44:fc:e9:c1:1d:0e:68:f7:b2:51:
                    d7:8d:d7:ed:20:49:f2:9a:d9:9f:13:32:bc:f3:ad:
                    3f:d7:bb:c9:ba:b7:da:4a:ec:84:f7:dd:c6:4e:35:
                    68:09:5e:8f:78:f9:ac:a5:89:a5:d5:f8:53:ed:1c:
                    24:22:3b:75:6d:78:77:30:22:4c:5c:f1:70:8d:d2:
                    d4:f8:57:fe:22:f3:3d:5c:3c:e2:be:18:92:df:ce:
                    03:b2:a3:1b:db:14:85:ed:9b:ad:3f:0c:76:54:65:
                    44:97:8a:94:44:19:cd:d4:f5:72:b4:fa:64:7d:e2:
                    41:84:96:91:ea:8a:0e:4d:70:a9:e6:79:8f:ac:4e:
                    2f:3b:a1:1e:e3:d3:16:59:5a:58:22:0a:74:8a:a2:
                    56:ce:f0:76:9d:76:95:d8:5e:cf:ae:bb:f1:7b:f1:
                    9f:35:b1:63:3d:e1:00:7a:e9:ad:0f:fa:6c:dc:e7:
                    c0:e8:a6:04:28:61:60:80:bb:9d:26:4d:29:78:a7:
                    ef:aa:fb:ea:e9:b4:58:0e:ee:02:f7:ca:25:4a:af:
                    b4:d7:5a:80:8e:21:f7:09:92:23:99:7f:ce:07:7f:
                    9c:a6:2a:ae:c1:a0:a2:25:2c:46:cd:f7:0b:63:a6:
                    23:c5:28:c9:6a:9e:9f:ab:93:da:8a:b1:10:f5:66:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.40.0/22
                  179.63.248.0/22
                  190.185.104.0/22
                IPv6:
                  2803:bc00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52438

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:3a:cf:fe:2e:16:f4:c4:17:ee:93:21:f1:6b:bb:fb:61:
         e9:9b:0b:42:1d:2a:19:b5:6c:63:84:49:23:38:13:e7:87:2b:
         83:40:0b:4e:c6:91:ab:e3:af:0c:40:7b:b0:b8:a0:6a:d2:b1:
         1e:ae:5b:cc:97:9f:e0:e0:be:8b:1b:d9:68:89:07:5b:86:b7:
         43:ed:8b:95:91:e4:85:90:2c:24:24:9a:21:31:a8:a1:5e:fe:
         e4:fe:58:9a:77:b4:bd:b3:72:d2:ce:d8:f0:7a:f5:a9:40:3d:
         18:16:31:b2:fb:7b:44:df:c1:11:92:13:67:6d:58:21:59:ae:
         e4:39:04:60:a1:21:e1:7e:7e:cc:c0:55:6b:4b:5b:82:ed:33:
         36:4e:1a:fb:7c:8d:6c:6f:d9:5d:9d:b5:d0:2a:f0:39:e7:bf:
         fd:75:77:25:cc:64:92:8b:f5:7c:d0:b4:55:0d:f1:0d:6f:0d:
         a8:4a:0b:41:4b:28:88:6c:eb:a6:e4:9c:83:68:3d:7c:df:91:
         3f:fb:2d:c9:ba:a7:95:01:37:f1:5b:9c:75:b2:e2:9a:95:f8:
         df:85:a7:f9:3e:c3:5d:d6:4d:33:1d:ae:19:cd:a5:66:f8:9b:
         a5:42:0c:c0:fa:31:3b:c5:01:b6:b1:fa:ca:0b:f4:68:13:a5:
         63:f6:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----