Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer
File:                     62a782cb41463cc649a6c52c762bea430cdc06b2.cer (raw, json)
Hash identifier:          Y3izyKRZRnTXYRHm9PXamnLJ3tc5zKBGOPWPZc3lZO0=
Subject key identifier:   B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF285A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Feb 2020 21:16:41 +0000
Certificate not after:    Tue 19 Mar 2024 23:07:05 +0000
Subordinate resources:    AS: 28036
                          IP: 152.231.32.0/20
                          IP: 190.143.240.0/20
                          IP: 2803:180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14624858 (0xdf285a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  7 21:16:41 2020 GMT
            Not After : Mar 19 23:07:05 2024 GMT
        Subject: CN=62a782cb41463cc649a6c52c762bea430cdc06b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:94:81:54:a6:69:09:e9:81:a5:fc:5f:32:
                    c8:75:6d:a0:69:aa:8b:2d:f3:e8:44:ad:ce:a8:07:
                    54:e0:25:df:86:31:17:74:47:22:c9:a0:f0:57:75:
                    8b:40:40:fa:ae:25:e2:2f:f7:69:e8:ea:65:16:63:
                    02:65:8e:92:50:e7:b1:36:12:c3:20:07:84:01:cd:
                    bf:09:1d:a2:e3:5d:17:1e:2b:87:ce:b0:7f:10:c9:
                    22:8b:11:0e:4d:4c:84:a7:0d:67:59:31:47:80:3c:
                    e3:53:90:cf:c7:42:c6:c2:92:dd:0c:18:e1:0c:52:
                    5c:c9:25:1a:7a:dc:8e:43:86:9a:8e:c2:29:ec:5e:
                    6a:3e:b4:25:7a:55:17:1e:b5:1a:c0:08:a1:10:b5:
                    c6:ca:a9:3a:0a:9a:e4:d5:5a:1c:ea:2a:74:8f:d4:
                    b2:8f:3e:ab:7d:f7:e7:82:4c:aa:c3:21:ea:42:3d:
                    38:eb:0d:0d:99:54:4b:f2:75:94:61:73:71:07:58:
                    6c:37:1c:64:1d:e8:90:80:5f:66:82:16:98:78:b7:
                    3a:2b:69:ee:97:8d:a0:c1:ba:db:54:c7:e3:56:f9:
                    95:d9:d1:a7:93:17:9d:a8:34:73:74:8e:c7:b6:dc:
                    b8:c4:70:2d:7b:3c:eb:62:e9:99:29:98:1a:7a:60:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.32.0/20
                  190.143.240.0/20
                IPv6:
                  2803:180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28036

    Signature Algorithm: sha256WithRSAEncryption
         c4:a0:9e:1c:70:b3:e8:be:a3:31:aa:4c:f9:a6:e2:2b:f9:3f:
         3c:cc:88:10:6a:97:9f:3a:3c:e9:44:78:f0:a9:83:af:97:f7:
         b8:ab:e5:28:11:d2:08:99:e9:d6:35:9d:9c:f8:46:a6:36:1b:
         43:db:4e:32:be:4d:8b:e8:da:f0:d2:cc:82:e2:15:b4:7a:6e:
         16:b8:94:7c:72:fd:16:a0:d1:e2:c8:a5:81:74:97:74:39:ab:
         61:c5:cc:8a:42:4a:bf:b8:d2:db:52:34:de:af:bc:f7:c6:ef:
         82:87:4f:c8:58:74:ac:19:94:cf:ad:5c:4d:b4:9a:10:56:a5:
         d2:a8:68:ed:dd:63:cd:79:5d:5a:25:d6:46:33:b0:de:d3:9e:
         07:8a:b9:a2:e1:c5:8d:7d:79:f5:18:de:6d:9e:1b:f2:67:20:
         c0:dd:c3:e7:b9:47:64:f3:51:82:a7:c6:98:09:18:ae:d5:19:
         a8:f9:58:e6:10:b4:69:98:08:b4:ea:a1:72:d0:c8:38:79:92:
         b0:62:bb:d7:ea:63:b9:96:03:ef:af:10:78:a5:46:8f:4c:df:
         62:49:f9:87:09:ee:54:b0:1b:1d:a4:93:bc:9f:3f:7f:c5:b3:
         6f:f2:4f:7c:56:c4:47:c3:4d:e5:30:40:8d:58:e1:75:f8:53:
         8b:59:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----