Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer
File:                     70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer (raw, json)
Hash identifier:          whk/1cGQyMBrU51Qd16ulwgqAFOenfQkAKUw7ZnRgvg=
Subject key identifier:   D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E22807
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 25 Jul 2020 15:57:53 +0000
Certificate not after:    Sun 21 Apr 2024 22:25:39 +0000
Subordinate resources:    AS: 266832
                          IP: 45.238.144.0/22
                          IP: 2803:8ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14821383 (0xe22807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 25 15:57:53 2020 GMT
            Not After : Apr 21 22:25:39 2024 GMT
        Subject: CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:e1:04:e5:c5:e0:98:5f:4f:1c:63:1a:f4:
                    09:e0:17:cf:5d:27:78:23:f8:64:4d:86:d5:04:01:
                    64:e2:28:27:5f:5a:fa:f9:f1:a1:d8:f9:66:d7:66:
                    f3:58:37:b3:65:a8:8e:69:7c:b9:14:39:ee:f4:3b:
                    0d:da:76:29:a1:17:b8:6f:c8:b2:41:7b:fd:0b:48:
                    2c:f0:50:73:93:07:45:7f:3f:43:12:b7:c4:29:bf:
                    6c:59:26:40:b7:2d:27:48:d2:52:92:1b:1a:7f:f4:
                    e2:2d:84:b9:aa:ec:f7:13:25:a2:14:dc:86:7a:d3:
                    29:90:8f:0c:29:80:97:9e:8e:5d:50:ce:29:4e:b7:
                    ef:1d:e5:9d:c1:48:99:3c:ac:f7:b4:1a:7c:da:85:
                    31:45:c7:78:4d:a3:7c:1d:a1:80:2e:7e:e1:1c:b8:
                    25:0a:6a:55:ce:46:85:90:4e:27:07:68:d9:2c:88:
                    1a:0b:de:bb:22:dc:68:df:c2:97:95:60:f2:e7:3d:
                    41:cb:7c:19:99:06:34:b9:c7:c4:3e:74:36:4e:ed:
                    4f:eb:8d:0b:41:2d:b6:71:c8:19:b0:bb:c2:5f:d7:
                    e4:14:c7:48:f4:ea:b1:8d:10:de:75:95:53:6b:81:
                    c6:15:77:df:65:eb:b4:83:98:6d:ee:78:59:00:9d:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.144.0/22
                IPv6:
                  2803:8ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266832

    Signature Algorithm: sha256WithRSAEncryption
         93:b7:d4:23:64:55:33:13:10:1e:5a:d7:f1:80:77:70:ad:27:
         c4:f3:e6:ce:6f:2b:7e:37:bb:22:f4:ff:90:38:f8:92:29:42:
         26:b4:ad:2f:c9:f8:6a:3f:26:3c:20:05:7a:3d:6d:75:ff:e3:
         de:8e:ee:8b:b9:4e:67:6e:f6:bb:1f:25:26:19:b4:fe:4d:07:
         b4:4a:59:27:07:de:2a:06:36:9a:51:7d:26:c3:1f:a9:d9:51:
         ae:31:63:da:59:16:1b:a1:8f:e2:b4:aa:50:98:ac:39:ca:61:
         7e:5f:9b:35:c1:3e:c2:81:47:cb:23:d8:97:32:6f:b9:3e:66:
         3f:03:f3:bd:3c:04:0a:5a:0f:e3:55:96:50:3c:b5:a8:30:3e:
         53:52:31:38:e8:b9:13:26:81:65:be:52:41:15:7c:79:68:44:
         f5:63:c1:f3:48:42:ea:43:77:6f:a4:42:1d:1e:ec:2a:37:34:
         6d:3a:f4:ca:d8:13:11:33:63:82:85:f7:c7:82:0f:9d:92:de:
         58:a3:11:58:61:0f:4e:01:6c:4e:5e:c4:f9:e7:26:2d:75:94:
         c6:24:83:57:3b:30:22:c0:77:5f:a0:5b:6d:4b:8a:f1:68:bb:
         fd:ac:90:6d:75:a7:25:1a:79:04:2a:6d:f0:a5:45:b6:9e:a8:
         85:46:d3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----