Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d8c5c151d3d4813127482165f2c6714ba65d28.cer
File:                     73d8c5c151d3d4813127482165f2c6714ba65d28.cer (raw, json)
Hash identifier:          UuxXxNiWSqi/5kTUE5ZyMIQckpV2ORoohcl9bdpziC8=
Subject key identifier:   5B:7F:32:5B:51:42:36:74:70:E0:B4:6A:17:51:09:64:FA:E5:8B:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E85720
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/394fcefe-81c9-4a07-a0f0-f8010152a20e/73d8c5c151d3d4813127482165f2c6714ba65d28.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/394fcefe-81c9-4a07-a0f0-f8010152a20e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Nov 2019 19:58:37 +0000
Certificate not after:    Tue 04 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 27781
                          IP: 201.220.0.0/20
                          IP: 2800:280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15226656 (0xe85720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 19:58:37 2019 GMT
            Not After : Jun  4 06:00:00 2024 GMT
        Subject: CN=73d8c5c151d3d4813127482165f2c6714ba65d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:8b:e4:01:b4:50:80:5f:af:c7:50:54:d9:
                    22:66:67:c8:38:a7:19:a3:f9:e0:3a:67:a3:db:f6:
                    c1:83:7d:a3:06:48:42:69:61:ac:c3:a5:2f:ec:27:
                    13:30:f6:8e:96:36:75:46:ab:1a:ae:78:70:7b:62:
                    f8:fa:e2:ba:43:37:94:b2:43:ea:97:c5:1d:ab:41:
                    41:3d:4e:32:5b:49:45:87:19:7a:be:f8:d0:57:ae:
                    33:78:35:28:59:ec:fd:58:5e:13:df:05:72:94:2c:
                    08:49:98:36:5d:43:0d:6d:24:fd:62:50:07:fd:95:
                    6c:ca:71:60:25:e6:ea:ec:53:7f:ed:e3:47:6d:86:
                    f7:e8:b3:a0:dc:b0:34:00:b6:0b:6d:71:61:71:33:
                    8f:ed:87:33:37:6f:c7:1b:4f:cc:55:86:43:c8:c7:
                    4e:41:46:12:05:49:e3:6f:50:03:f3:5b:7a:ab:94:
                    e1:33:dd:df:3c:bf:9b:e2:70:0f:cf:6f:28:21:12:
                    9d:61:6a:6b:87:b7:ce:1b:88:5e:fd:dd:4e:14:ee:
                    d6:56:5c:3f:38:b9:b1:a2:b8:a6:74:16:e1:c5:9f:
                    24:ef:1e:f4:fb:fa:54:c2:51:02:68:ff:68:fd:e9:
                    91:65:63:ea:0e:e4:7a:ba:48:f4:b2:06:80:6b:80:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:32:5B:51:42:36:74:70:E0:B4:6A:17:51:09:64:FA:E5:8B:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/394fcefe-81c9-4a07-a0f0-f8010152a20e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/394fcefe-81c9-4a07-a0f0-f8010152a20e/73d8c5c151d3d4813127482165f2c6714ba65d28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.0.0/20
                IPv6:
                  2800:280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27781

    Signature Algorithm: sha256WithRSAEncryption
         ab:5e:2d:27:84:39:df:d0:2d:52:7f:0a:cf:c4:73:be:1a:65:
         d0:7b:84:2b:25:0c:73:e5:00:b6:2f:55:41:bc:1b:a3:30:50:
         0c:2d:7f:db:74:55:56:d9:28:6b:a0:2b:a4:0c:40:6d:6c:16:
         f4:5b:db:c9:4a:de:b4:d9:15:39:e2:1f:69:c7:f4:99:3d:77:
         d1:dc:c9:49:ae:eb:4e:08:f2:c2:f3:c3:29:73:4f:c0:5e:1a:
         11:ac:31:72:53:f7:4a:e3:0b:fb:c4:54:65:eb:e7:9b:d8:83:
         2a:b5:87:94:75:b9:cf:1e:e5:be:5b:cf:cf:0d:5f:a6:5a:1d:
         24:e6:1f:98:d4:b3:a2:8c:e0:28:60:4f:cb:c4:a9:41:07:0e:
         bf:03:04:64:ae:b2:b4:32:89:10:95:ff:d9:13:3f:20:83:32:
         d3:c0:24:b0:c7:6c:fd:4a:57:9e:06:54:21:8e:f1:ae:25:ea:
         ea:23:3e:f9:4b:19:94:b5:71:8e:36:99:27:b8:f5:5a:2a:0e:
         7f:86:7e:73:4b:3c:c1:85:ed:4e:3e:87:d3:1d:ee:07:69:e8:
         5b:aa:30:d0:22:51:f9:9d:3d:50:d9:f9:2d:f5:0c:c7:29:98:
         5f:02:b8:11:24:f7:d1:ff:dd:87:96:96:28:77:26:a8:cf:f6:
         80:b5:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----