Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.cer
File:                     58d4d9b526509407bcd0b39b8d13b0c940d11a2e.cer (raw, json)
Hash identifier:          PJdP5lsDgizUm0n99PMd3Booi1iJgKrdZ+rTuYvPnzs=
Subject key identifier:   4E:61:CF:E0:E4:F7:03:42:5B:39:DD:7C:1C:1A:D6:75:06:29:8C:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6AE6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 04 Mar 2020 19:40:48 +0000
Certificate not after:    Thu 26 Sep 2024 06:00:00 +0000
Subordinate resources:    AS: 269853
                          IP: 45.171.120.0/23
                          IP: 45.189.56.0/22
                          IP: 2803:10e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16166510 (0xf6ae6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  4 19:40:48 2020 GMT
            Not After : Sep 26 06:00:00 2024 GMT
        Subject: CN=58d4d9b526509407bcd0b39b8d13b0c940d11a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:8d:0e:21:82:2e:10:01:5e:9b:74:e5:ed:
                    3a:86:43:f9:ec:99:8f:d0:27:56:c5:cd:e5:b7:f9:
                    e5:32:05:04:66:3e:cc:79:ba:f2:39:d6:e4:cb:b7:
                    b2:dc:e3:99:cb:68:5c:db:aa:a5:e9:19:01:22:c3:
                    59:53:88:4f:c7:81:48:9f:4b:d9:21:8e:ba:e8:0c:
                    bf:d4:7a:cf:c4:a4:df:ae:48:c7:8e:c9:2f:84:d1:
                    6b:64:33:b3:09:03:ec:31:c9:91:98:1c:50:9d:06:
                    1c:00:36:2f:a3:2f:77:cb:f1:48:9d:4c:41:9c:5e:
                    22:9b:e0:8e:52:28:2c:22:6b:58:66:95:33:b6:e5:
                    b7:5b:ea:82:00:e8:8c:ba:3f:a7:9a:b5:91:d4:99:
                    97:67:7c:c2:98:91:e3:cd:56:19:0b:96:09:63:8f:
                    1f:6e:18:dc:f2:d5:88:52:c4:79:a3:5a:12:09:94:
                    99:4f:89:c5:9f:e1:01:5f:61:16:fe:1c:ae:55:e0:
                    fc:a3:f8:31:a9:87:10:13:6b:69:49:91:1f:00:83:
                    83:15:cc:d7:26:10:2e:09:f6:a1:93:06:c4:5e:93:
                    e0:8f:18:a4:99:b3:9d:92:c0:44:95:d5:08:65:78:
                    20:98:7d:96:65:35:45:48:84:a5:b3:ed:e4:44:a1:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:CF:E0:E4:F7:03:42:5B:39:DD:7C:1C:1A:D6:75:06:29:8C:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.120.0/23
                  45.189.56.0/22
                IPv6:
                  2803:10e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269853

    Signature Algorithm: sha256WithRSAEncryption
         63:21:8b:f6:23:8f:f9:e6:40:24:ab:04:60:cf:c9:79:75:ff:
         a5:4d:d7:11:ea:b3:1d:4f:b0:17:46:31:1a:40:29:54:a7:68:
         3f:22:d0:fc:fb:61:1a:da:33:86:3c:d0:b5:ef:7c:ed:87:32:
         c7:fa:1b:85:66:d3:d7:4e:d4:60:6f:b6:cf:40:23:45:4b:2a:
         2e:9e:24:17:30:6f:d8:1c:f7:14:bf:ea:5b:1f:e3:00:e8:89:
         39:6b:fc:ae:bf:a9:ab:e4:cd:25:3a:b0:cb:1d:07:8a:2c:65:
         3c:fc:22:55:05:d7:12:c8:89:e1:05:6f:73:9f:82:d4:b3:82:
         ef:71:15:9d:bb:bb:82:7b:07:44:16:c1:1b:2e:02:ef:d5:b5:
         28:1f:13:b9:c5:ca:c2:82:08:ea:df:73:b1:6c:72:48:4a:59:
         4f:68:b7:55:1c:c0:14:59:f1:21:06:1b:ec:4c:65:99:39:67:
         58:27:7c:ca:05:e4:ee:15:51:13:a5:b5:c4:6d:f8:06:33:63:
         55:83:12:64:12:1a:b9:be:ca:5c:02:31:ec:31:2b:07:01:25:
         2a:b4:cd:2b:33:94:ba:e7:ab:53:26:9a:2f:ad:a0:72:52:71:
         66:a6:28:18:63:86:dc:aa:70:cf:58:29:b6:f2:62:30:c9:3c:
         57:d7:03:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----