Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ab59f78162934a82dac9a1bd82bec4b6266225b.cer
File:                     5ab59f78162934a82dac9a1bd82bec4b6266225b.cer (raw, json)
Hash identifier:          2m02Y5CrbLYO+mWSogj677WsyM9GgEHoTfrTrDTGEbc=
Subject key identifier:   E2:BD:0D:E9:77:BC:AE:75:04:2A:3F:F7:E5:CE:D1:D0:64:52:32:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107AB51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/5ab59f78162934a82dac9a1bd82bec4b6266225b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Oct 2020 02:04:54 +0000
Certificate not after:    Fri 22 Aug 2025 05:00:00 +0000
Subordinate resources:    AS: 52266
                          IP: 201.219.252.0/22
                          IP: 2800:700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17279825 (0x107ab51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 02:04:54 2020 GMT
            Not After : Aug 22 05:00:00 2025 GMT
        Subject: CN=5ab59f78162934a82dac9a1bd82bec4b6266225b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:5e:9b:41:1e:2b:a2:64:95:98:79:18:1c:
                    67:dd:38:8a:55:c2:36:c1:00:21:53:4c:4b:53:4c:
                    b8:46:da:82:09:cb:a9:af:4d:95:9d:5e:66:00:9b:
                    39:6e:0b:cb:08:5a:5d:b1:8e:6d:35:25:20:7a:00:
                    7a:66:1a:1c:e9:b5:cc:e0:f8:c5:a4:66:a9:58:75:
                    0d:68:74:7c:f4:1a:42:00:f5:8a:06:87:29:c4:8b:
                    0a:1b:8b:2f:6d:64:62:d2:c6:b8:f4:68:17:71:25:
                    e3:e2:d9:3c:76:b4:71:59:d8:b2:fe:97:7d:30:67:
                    b7:7e:30:8e:39:3a:29:12:18:76:83:0c:fe:36:0b:
                    75:f9:47:28:60:55:47:ae:cb:57:0f:2b:f5:a6:af:
                    47:b5:3a:e7:99:8f:6b:f8:65:7f:5a:07:3d:e7:5b:
                    cb:3b:70:5f:53:1a:1d:30:e2:d8:5e:64:af:6f:63:
                    e9:2b:b0:f3:a1:59:86:61:9e:30:2e:7d:28:2d:e4:
                    05:8f:7f:74:28:62:c9:c3:da:62:fc:f2:b7:68:69:
                    2e:cb:83:0c:ab:ec:f9:52:1f:78:63:1e:39:82:21:
                    bd:98:11:33:65:b4:87:f7:75:03:01:77:ed:14:5a:
                    40:75:05:34:75:ff:45:98:59:59:85:20:39:a7:17:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BD:0D:E9:77:BC:AE:75:04:2A:3F:F7:E5:CE:D1:D0:64:52:32:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/5ab59f78162934a82dac9a1bd82bec4b6266225b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22
                IPv6:
                  2800:700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52266

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:39:4c:32:ba:4b:f6:4b:eb:d3:11:2c:24:b7:d0:de:e4:
         08:95:1b:45:e0:d6:6f:a9:d9:20:c2:6f:30:7a:ea:fb:e8:97:
         b3:16:03:e0:4e:b5:31:4a:22:af:62:2b:c1:30:74:7a:4b:4f:
         10:f0:3d:6b:71:0e:0c:fa:7d:d6:c7:da:76:bf:2c:d1:c8:5a:
         07:7e:b5:c7:91:e1:4f:8f:7e:4b:a1:99:b9:6f:6d:66:23:02:
         80:1c:5a:34:a5:f3:d0:b3:33:0b:15:90:50:16:70:ed:5c:3c:
         dd:ff:f5:d4:ba:67:72:70:ac:9e:9d:8c:c3:13:7c:d8:35:0e:
         77:94:3e:d3:73:dd:31:29:e2:c9:74:16:34:b4:f4:e2:dd:08:
         5b:b9:62:ea:be:29:01:7d:c2:34:5a:e8:4e:c4:2a:32:26:5a:
         d3:52:8f:f5:f3:58:28:e0:91:36:e2:d4:63:26:61:57:70:65:
         8b:8b:84:b3:03:34:ae:4e:83:24:61:99:68:4f:b1:eb:00:ab:
         6e:8e:b4:6a:1e:6e:4e:d6:54:b7:54:d1:b6:61:05:d8:95:25:
         00:33:d7:f2:5d:5f:fb:9d:ef:15:b1:ce:5a:be:f2:3d:ad:86:
         68:8e:40:75:6b:80:6c:e0:51:27:15:c6:98:cc:cf:f1:02:e6:
         c9:77:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----