Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f7d560f43289fcabbfe388816878105c0c12e43.cer
File:                     6f7d560f43289fcabbfe388816878105c0c12e43.cer (raw, json)
Hash identifier:          1GKjgQGljRpBN2cHJgbOVQYl4uh/4LoOTidr+qZj0S4=
Subject key identifier:   05:86:C3:8F:24:71:6D:D3:83:FE:A2:F4:9D:7F:CD:F2:6E:15:93:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB3052
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6de18fdc-9d97-49ee-99ad-afc200e11c05/6f7d560f43289fcabbfe388816878105c0c12e43.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6de18fdc-9d97-49ee-99ad-afc200e11c05/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Mar 2020 20:03:28 +0000
Certificate not after:    Sat 03 Feb 2024 20:43:01 +0000
Subordinate resources:    AS: 61476
                          IP: 190.104.88.0/21
                          IP: 2801:18:8000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14364754 (0xdb3052)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 20:03:28 2020 GMT
            Not After : Feb  3 20:43:01 2024 GMT
        Subject: CN=6f7d560f43289fcabbfe388816878105c0c12e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:e4:06:48:91:24:32:3c:ab:27:cd:ab:c5:
                    b8:79:70:41:cf:bb:95:43:37:d3:97:5e:07:49:7b:
                    39:91:04:51:eb:1d:b2:3c:fb:19:c0:49:74:92:5f:
                    51:ad:41:f1:5e:eb:07:14:73:bd:e0:23:31:96:5d:
                    3f:ee:ad:23:2a:57:56:5e:8a:6c:7c:70:8b:6d:b1:
                    18:de:09:79:5c:1a:52:7d:7f:23:db:88:18:b9:da:
                    25:f1:03:b7:65:e3:a8:6b:67:f5:9d:d7:27:be:79:
                    28:4a:43:bb:30:08:bd:5a:65:25:37:21:ee:79:6f:
                    87:f9:f6:ed:e8:40:81:f1:95:f1:3e:21:af:50:3c:
                    ea:cf:34:0d:1a:54:80:6d:ed:3e:ac:a7:83:be:9d:
                    c4:ba:45:60:32:27:77:1e:6e:c0:28:14:2a:00:02:
                    91:dd:91:d8:29:35:9d:e3:b6:bc:ab:f3:a4:8d:27:
                    9e:f2:ad:b8:a5:be:44:ba:98:5a:b1:ae:56:2d:2f:
                    ea:4a:c7:23:a6:c2:50:0c:b6:a1:6d:01:f7:be:82:
                    27:be:a4:d9:0b:fd:24:b3:ae:34:2f:a8:b0:a5:5b:
                    e5:cc:6e:74:76:3f:c3:0f:c8:08:ac:bc:01:ad:25:
                    e2:07:3e:b7:3a:19:7e:73:9e:eb:01:9e:25:ef:60:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:86:C3:8F:24:71:6D:D3:83:FE:A2:F4:9D:7F:CD:F2:6E:15:93:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6de18fdc-9d97-49ee-99ad-afc200e11c05/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6de18fdc-9d97-49ee-99ad-afc200e11c05/6f7d560f43289fcabbfe388816878105c0c12e43.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.88.0/21
                IPv6:
                  2801:18:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61476

    Signature Algorithm: sha256WithRSAEncryption
         7c:9e:80:6f:2e:1d:4a:6d:3f:31:a8:51:9f:e1:32:02:51:97:
         0a:9f:02:86:4a:f8:4e:51:80:a6:20:bc:dc:7b:a4:ff:5e:0f:
         b6:15:00:b3:fe:ea:35:a4:a2:69:59:36:5a:45:58:6c:58:dc:
         f3:99:03:cc:ab:6a:96:b0:64:77:40:31:f2:68:8f:63:fc:0e:
         9b:e6:f3:7a:c0:e6:47:af:cc:5f:29:d2:79:66:4f:e3:22:a8:
         c3:d0:14:21:dd:76:6b:c5:f4:1b:4a:d0:32:2d:63:03:3f:68:
         09:46:d1:b9:96:3a:77:31:b8:1b:98:65:7b:d4:9d:f6:f3:1a:
         60:11:12:fc:2d:d1:ef:2a:06:5b:63:d6:e2:b3:38:2e:44:af:
         5c:1d:17:da:25:4e:dc:05:aa:07:f7:58:a3:ef:fa:c1:a5:26:
         19:76:d9:30:b8:48:f3:1f:65:1d:26:87:43:f1:b2:76:86:3e:
         65:6b:0f:27:63:bc:32:d8:e5:52:4c:f2:82:32:55:b3:b6:ae:
         3c:0a:5a:88:fa:7d:49:51:2a:3a:95:67:d2:c3:b7:79:64:85:
         5c:ca:75:d8:a0:a9:13:ef:55:81:7f:da:32:08:36:57:5a:85:
         31:85:3a:5e:99:3e:f0:14:90:fb:7d:fa:c1:87:0d:a1:6f:5c:
         fd:49:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----