Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
File:                     7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer (raw, json)
Hash identifier:          /RSOyHKquQHnlo2DYQZlRM9OUpJbj4C0J/edSXH0xKQ=
Subject key identifier:   EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB1D00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Oct 2020 12:59:59 +0000
Certificate not after:    Mon 24 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 27848
                          AS: 27859
                          AS: 27913
                          AS: 27916
                          AS: 28054
                          AS: 52243
                          AS: 52289
                          AS: 61447
                          IP: 200.93.240.0/21
                          IP: 2001:13c7:7005:: -- 2001:13c7:7009:ffff:ffff:ffff:ffff:ffff
                          IP: 2801:1b:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15408384 (0xeb1d00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 12:59:59 2020 GMT
            Not After : Jun 24 15:00:00 2024 GMT
        Subject: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:76:ab:d9:ec:25:c9:f6:7a:7e:a7:1f:8e:
                    1f:0d:30:51:ab:0e:ac:c1:86:3e:78:4e:92:f7:51:
                    a6:d8:2f:42:4d:b6:fb:59:a3:cc:30:69:dd:ba:e7:
                    d8:70:4f:cb:4d:f4:52:0e:bb:ff:39:98:39:40:b2:
                    78:96:56:e7:ee:33:ff:bb:e1:d1:a3:97:54:a2:b2:
                    00:61:43:75:ba:bc:f3:b4:02:98:9b:a8:2f:80:43:
                    27:cf:e3:a1:bd:85:ba:77:11:6e:3d:b2:ef:a8:5d:
                    d4:5d:c9:88:0e:2d:f4:2d:f9:3d:30:42:23:80:52:
                    b9:a3:c3:70:c8:e4:90:5b:1b:38:85:66:3d:66:99:
                    69:ef:9c:73:af:65:e4:d4:3f:5c:15:a7:aa:0b:69:
                    7c:6b:9a:2d:de:a2:61:1e:eb:97:28:78:50:af:fe:
                    ff:24:a2:80:85:f0:e0:3c:c4:d3:a5:a4:bd:35:17:
                    34:af:4c:66:dd:43:aa:b0:ae:a7:db:cc:00:5f:4d:
                    18:94:69:f2:bd:ee:f1:a1:cc:93:55:47:81:ca:92:
                    5b:3c:90:69:30:4d:1b:57:cb:68:5e:7d:ee:de:1d:
                    20:d1:da:79:5b:84:d2:89:8f:f0:3a:ac:f1:26:50:
                    68:1c:fa:ab:ff:ae:41:e0:da:4d:c3:e2:30:da:c9:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.240.0/21
                IPv6:
                  2001:13c7:7005::-2001:13c7:7009:ffff:ffff:ffff:ffff:ffff
                  2801:1b:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27848
                  27859
                  27913
                  27916
                  28054
                  52243
                  52289
                  61447

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:7d:4e:a3:8d:5b:ac:dc:77:bb:56:91:9b:d3:c8:91:2a:
         65:b0:bb:e3:3a:11:19:10:e6:81:29:c8:9e:57:71:d0:22:b8:
         5e:14:6a:0b:f9:3f:c7:5a:23:50:9f:9a:a9:89:64:2d:26:ef:
         3d:54:df:e8:34:a1:99:ca:da:8d:07:95:68:70:9d:9a:13:ac:
         76:d3:43:3d:b7:b2:f2:76:a7:86:38:ee:79:14:1d:8c:57:e8:
         b6:e4:fb:06:4c:1a:02:7b:6e:93:d5:5a:20:b1:e0:93:6a:3e:
         45:37:39:fb:9b:ae:6d:28:ec:fa:23:b9:64:5c:71:a4:51:5f:
         15:3f:9b:1d:14:a3:7f:ae:4a:a7:22:49:47:23:a0:00:e6:e5:
         ed:e7:b0:01:f7:0e:ac:28:1c:ed:49:d7:d8:63:f3:d7:b3:b3:
         22:54:79:28:fd:1c:ad:7c:a8:26:cc:91:f7:02:8b:dd:95:89:
         7b:04:51:04:d1:f9:68:aa:13:15:ef:b9:16:6b:b0:97:8e:8e:
         1c:74:6f:80:73:5a:19:6a:49:6c:ac:2b:c4:6d:5a:0a:82:37:
         6b:29:07:5f:81:7e:31:2f:3a:42:5b:d7:5c:91:7f:c5:0b:91:
         95:99:30:cd:c5:ae:21:de:9c:e3:92:c9:55:de:48:b3:78:11:
         4d:90:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----