Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
File:                     501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer (raw, json)
Hash identifier:          AVqbgNuH88GmVotgZ8/s4lAKuwBjYAcn/5c9m2yducI=
Subject key identifier:   84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E00116
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Oct 2020 18:42:16 +0000
Certificate not after:    Sun 01 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 265639
                          IP: 170.246.88.0/22
                          IP: 2803:6c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14680342 (0xe00116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 22 18:42:16 2020 GMT
            Not After : Dec  1 04:00:00 2024 GMT
        Subject: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:22:f6:5c:32:22:5e:b9:69:96:c9:f4:a8:
                    e5:24:e4:21:42:00:c9:1b:21:02:9b:f7:d3:54:c8:
                    9d:b8:42:6b:b5:91:5b:c6:85:be:c2:e0:88:fe:66:
                    25:91:2a:03:1d:c0:74:ec:eb:d5:8d:b9:a7:95:e8:
                    4b:30:0f:a2:fb:89:46:71:53:1c:de:28:67:3c:72:
                    20:66:ed:81:e6:bc:32:51:ff:8e:05:79:de:da:c9:
                    8c:87:16:b0:0d:aa:44:c1:31:5e:9f:5d:58:26:cf:
                    86:9b:8d:27:66:e1:98:0e:7e:12:68:c7:87:a6:27:
                    c1:5f:bf:45:3e:7a:f4:d4:be:46:8d:83:62:99:99:
                    47:7f:22:5a:18:b7:31:b5:53:9b:fa:f0:50:8b:e3:
                    f2:5b:22:bd:43:49:04:74:80:9a:ad:18:9e:40:ef:
                    d0:92:56:b7:3d:4a:12:71:84:c4:48:e7:d4:f1:a6:
                    4a:1a:e6:61:cb:26:c3:56:ab:5f:0a:15:3e:96:f1:
                    98:6f:21:76:42:29:33:ff:c1:43:0b:5b:f3:57:9e:
                    b7:e5:92:40:f7:5a:7f:0c:53:76:38:86:1b:12:8b:
                    3a:b2:30:15:fe:e5:e5:4e:7d:3c:7c:05:eb:93:a4:
                    c9:9c:5f:8f:fc:e0:2d:05:de:5d:92:1f:04:64:ba:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.88.0/22
                IPv6:
                  2803:6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265639

    Signature Algorithm: sha256WithRSAEncryption
         06:ee:47:eb:ba:96:bb:e0:f4:93:2c:24:7f:a6:e8:a0:b3:7e:
         7f:c3:8c:35:33:bb:75:87:19:12:97:0f:43:38:b5:1f:63:46:
         96:97:76:d6:b4:5f:bb:5f:80:80:38:5b:c9:3d:bf:16:c3:5a:
         79:f1:af:56:e3:ff:d2:ce:a4:ee:9c:7a:78:96:9f:ef:82:7f:
         17:88:f8:0d:ea:a7:f8:db:51:c3:d9:90:cf:10:fa:06:05:bf:
         bf:6d:09:91:e3:97:6e:fb:62:78:b0:89:43:01:5b:b1:20:ab:
         64:a8:e5:03:65:26:98:bb:a0:0f:b3:11:75:2c:7b:a4:4b:40:
         79:42:9b:b4:35:36:22:1c:c4:a6:65:76:6e:42:35:b8:81:95:
         d7:6f:63:32:d7:ca:bd:d2:1f:c3:12:53:36:5d:9b:f2:bc:e7:
         df:f1:0d:79:ef:27:34:23:61:1e:54:77:2e:1d:83:9a:a1:99:
         ca:bc:df:a0:e5:82:c6:a9:f1:be:7c:72:a6:9f:d7:e6:71:14:
         da:9b:60:c2:a3:78:19:b2:f6:41:b7:15:5e:16:10:fe:ee:65:
         26:fe:f3:c5:dd:ad:59:80:6b:7c:c3:80:41:70:ff:a7:be:0a:
         40:a0:ca:e0:b5:22:50:58:c7:52:ee:c6:c0:fe:1f:22:71:76:
         ce:d4:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----