Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer
File:                     7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer (raw, json)
Hash identifier:          ES/OSpTgFvqzcoAzz+7ciSGRkxvTqGZOs9PWx2pCOjg=
Subject key identifier:   15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF3258
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Jul 2020 17:15:35 +0000
Certificate not after:    Wed 20 Mar 2024 17:57:06 +0000
Subordinate resources:    AS: 270002
                          IP: 200.59.212.0/22
                          IP: 2803:31e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14627416 (0xdf3258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  7 17:15:35 2020 GMT
            Not After : Mar 20 17:57:06 2024 GMT
        Subject: CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:d7:fe:74:42:92:c9:56:e2:f2:a1:c0:2d:
                    9c:3c:88:03:43:1d:9a:38:89:ab:db:32:bf:f2:c7:
                    04:9a:fb:aa:7c:d5:7f:04:0a:70:ac:57:4e:b1:76:
                    19:6f:6b:df:aa:a3:bc:94:4b:cf:a6:d5:1a:4e:18:
                    71:d5:98:5f:5f:cd:77:0c:92:a2:e7:7b:8b:38:db:
                    13:36:d8:d7:a6:78:c8:7b:42:a8:59:72:8b:38:de:
                    ef:d8:df:2a:03:1f:54:40:49:2d:83:2c:7a:30:68:
                    f2:52:9a:a2:57:bd:d8:f8:f3:77:57:9a:a5:67:1a:
                    cd:1d:c0:8e:5c:ac:ba:6f:95:ec:dc:1c:18:39:74:
                    7a:87:98:76:9e:e5:6a:ff:54:cf:dd:c2:ac:01:c4:
                    ad:36:fd:82:00:a5:88:05:b1:95:ee:ec:98:da:8b:
                    f9:1e:a6:9f:3d:82:d3:38:fa:6f:72:e5:4f:32:fc:
                    28:ea:34:66:8b:49:6e:ef:2c:ef:45:7e:bc:8c:5d:
                    f8:da:8d:3b:5f:f8:33:3c:b9:56:cb:ab:1e:f7:2d:
                    98:2c:00:80:58:53:28:e0:21:db:75:ee:8f:68:c6:
                    c7:ee:06:69:59:ee:44:80:e9:4e:e4:d9:e8:57:fa:
                    89:0b:cf:d9:c5:44:e5:ef:eb:ee:b5:0e:42:9c:66:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.212.0/22
                IPv6:
                  2803:31e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270002

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:70:cb:1d:93:03:01:7f:31:f4:60:a3:ca:5b:ec:30:bd:
         38:85:ba:46:6e:89:cf:81:df:d4:86:60:fd:a7:37:a8:f6:3a:
         b6:80:2a:4b:e0:8d:3c:89:c6:ce:9f:a6:2b:1e:99:47:25:1a:
         43:b5:ca:f0:5e:80:de:46:27:2b:95:7b:f1:ab:4e:0c:b5:14:
         0f:84:38:73:ae:e3:8a:a0:e2:1a:d8:fd:da:ac:37:4a:09:ef:
         bd:20:04:cb:25:e4:1a:22:67:a4:ec:49:98:fb:67:fb:cd:04:
         fc:25:4e:1a:25:5f:17:55:c6:a9:3f:b8:8e:8e:c6:82:80:4a:
         87:0f:4c:c1:fa:83:44:64:91:85:ab:b1:bd:ac:61:2a:6d:b6:
         1b:2a:11:e2:17:eb:25:e3:a6:9c:bf:ef:fd:b9:6b:f7:79:dc:
         82:02:e7:64:92:6b:7f:6e:da:5e:05:bb:ce:07:29:41:c8:20:
         66:22:12:4e:eb:cf:49:86:ed:f1:3e:77:d9:94:d8:a4:9e:16:
         c8:81:5d:4f:ad:fd:d2:ca:0d:76:54:17:df:85:bc:1e:45:6c:
         85:5f:ca:d6:2e:fc:4d:7e:27:99:74:f7:4e:3c:46:ab:d4:03:
         27:43:55:70:11:81:0e:b3:33:bf:32:31:25:c4:b8:42:c2:a5:
         7d:21:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----