Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a2d02496b31d1521c53287dfedd888ca51de7ca.cer
File:                     5a2d02496b31d1521c53287dfedd888ca51de7ca.cer (raw, json)
Hash identifier:          klKYgNd5gC0htTERKtZE24Bc1xXf4+SIdrzIVlUeHVI=
Subject key identifier:   F6:9A:6E:B3:C3:0B:2C:68:DC:F4:DE:88:4F:5C:4A:3E:67:90:61:73
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8BD9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/5a2d02496b31d1521c53287dfedd888ca51de7ca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Dec 2020 13:17:13 +0000
Certificate not after:    Tue 08 Oct 2024 23:01:33 +0000
Subordinate resources:    IP: 2801:1a:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16301471 (0xf8bd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  9 13:17:13 2020 GMT
            Not After : Oct  8 23:01:33 2024 GMT
        Subject: CN=5a2d02496b31d1521c53287dfedd888ca51de7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:02:ae:34:99:13:b2:4f:d3:59:e9:13:de:28:
                    43:47:53:3e:22:ee:7e:06:42:dc:96:5c:c4:18:50:
                    26:0d:95:13:30:93:7b:42:45:cc:85:f1:ed:94:9e:
                    a9:b6:72:67:b4:78:e4:08:99:5d:19:7c:46:64:5e:
                    d4:5b:45:23:ab:f6:fe:4c:77:bb:e9:fe:fb:4e:b6:
                    7f:00:ae:92:30:6e:cb:39:a1:2c:00:79:7b:b2:d0:
                    3f:6f:ef:e0:14:22:1e:4c:ab:a7:4e:d2:80:90:6d:
                    f7:5c:e5:41:ea:23:21:0e:af:49:12:7b:94:30:51:
                    49:f0:a2:ac:bf:e3:cf:52:c8:0c:69:56:9a:98:27:
                    42:9d:b9:b4:94:18:09:a6:f8:a8:da:a8:ff:a9:e8:
                    06:be:e7:a5:4d:71:2d:ab:42:b1:1e:57:12:9d:e5:
                    c3:3e:6d:fa:75:ca:a4:f7:76:29:ce:64:86:7c:3b:
                    3a:6b:06:55:94:f1:f6:51:ed:7f:a7:9d:8b:f4:7e:
                    e4:72:79:08:4a:a5:57:c4:5f:50:b1:f2:b5:7b:2e:
                    ae:50:a5:a1:38:f0:48:a6:53:7a:33:b5:de:01:59:
                    f3:e8:ac:d2:83:71:59:a8:13:4b:60:10:2d:8c:5a:
                    7a:c0:cc:4b:3a:de:2d:da:9e:30:b0:d8:c0:ca:17:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9A:6E:B3:C3:0B:2C:68:DC:F4:DE:88:4F:5C:4A:3E:67:90:61:73
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/5a2d02496b31d1521c53287dfedd888ca51de7ca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:5c:45:a5:a6:bb:7e:5e:41:d5:c6:ce:28:0f:29:38:29:63:
         1a:36:e8:07:c9:44:dc:64:4b:e8:87:cf:a3:72:45:15:fc:4d:
         ab:0f:92:84:cd:11:73:af:10:7b:92:ec:22:5a:12:d9:2d:c2:
         60:5b:8d:23:bb:d3:16:48:03:52:85:2b:c0:81:a7:d5:bb:62:
         2c:bf:a3:62:54:f9:5f:cb:8b:1a:27:92:9d:7f:1c:9c:07:50:
         7d:b2:29:b6:e6:c4:e5:1a:e1:23:fb:99:6e:92:53:b6:64:c2:
         98:e4:f6:f5:9e:6d:18:1b:35:ce:ed:17:ce:6d:f8:d2:8c:67:
         82:b9:a3:61:dc:6a:8a:22:51:f4:ea:d4:20:2f:3f:54:c7:72:
         e1:2d:ae:7b:3d:79:53:92:7e:ab:9b:65:0b:ca:0e:38:ba:01:
         21:de:ff:41:64:dd:d4:29:0b:ac:ef:78:e6:0c:95:a8:d3:96:
         cf:24:4e:0d:56:83:6d:70:3c:8e:07:71:bc:9c:f7:bf:50:54:
         5f:a3:d3:b7:c4:d9:54:b9:aa:07:08:bf:5e:23:f8:66:15:54:
         86:e9:a0:97:08:b0:c4:37:11:6f:3a:68:a8:12:d5:c0:ee:73:
         6d:d1:90:86:04:20:e8:e2:99:a9:1f:36:21:44:1d:0f:f0:05:
         8d:1f:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----