Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c98253884bf2c1af8a85cb73c9533144fc33af6.cer
File:                     7c98253884bf2c1af8a85cb73c9533144fc33af6.cer (raw, json)
Hash identifier:          V5EfBz82GNjgnUNNkyMgLUo3fcRSBnYmxOmB9x5OMmk=
Subject key identifier:   A1:F4:53:76:11:05:C9:A4:F7:71:1A:BB:80:19:37:85:C6:56:79:7F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA3D95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/7c98253884bf2c1af8a85cb73c9533144fc33af6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 14:12:01 +0000
Certificate not after:    Mon 17 Jun 2024 19:18:49 +0000
Subordinate resources:    AS: 265795
                          IP: 192.141.208.0/22
                          IP: 2803:9020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15351189 (0xea3d95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 14:12:01 2020 GMT
            Not After : Jun 17 19:18:49 2024 GMT
        Subject: CN=7c98253884bf2c1af8a85cb73c9533144fc33af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:81:a2:76:26:e8:cf:34:56:9a:91:66:e2:
                    ce:23:14:a4:2c:60:b0:de:52:5d:74:ff:41:ee:19:
                    85:01:e5:aa:48:b5:95:54:ad:16:63:7f:67:69:72:
                    41:e4:b5:44:4e:c7:b2:95:b7:6f:ed:a1:06:a2:26:
                    28:dd:65:33:a9:1d:9d:dc:b4:2a:85:8c:7f:96:1c:
                    c3:da:e3:9b:c9:30:2b:fa:eb:c0:76:9f:f5:07:dc:
                    1b:33:07:0b:34:e2:a6:6c:7d:e4:ff:98:0a:b9:7b:
                    76:a8:41:08:c3:e3:5b:67:df:f2:48:04:99:b8:81:
                    a3:37:9f:37:53:f3:b9:9e:85:f6:a0:8a:19:52:80:
                    e3:f7:a0:af:55:c6:0b:54:25:13:cb:db:2d:62:f9:
                    92:7e:b8:81:3e:5a:4a:32:9a:d4:61:1a:cf:56:4a:
                    ba:63:69:7d:a7:9f:07:53:82:66:11:71:bf:b6:9d:
                    c0:fa:0e:32:5a:44:1d:73:6c:9d:d4:1c:34:f3:b3:
                    10:8b:03:14:24:ce:38:9a:8e:a6:c1:f3:3e:7d:51:
                    a4:96:2a:24:72:e4:6e:dd:3e:7e:09:d8:92:62:43:
                    f9:b2:17:5e:1a:d4:63:a4:01:26:75:76:89:29:23:
                    0a:76:d4:14:39:90:69:44:a7:04:40:ee:59:6e:eb:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F4:53:76:11:05:C9:A4:F7:71:1A:BB:80:19:37:85:C6:56:79:7F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/7c98253884bf2c1af8a85cb73c9533144fc33af6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.208.0/22
                IPv6:
                  2803:9020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265795

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:69:82:09:de:23:d6:2f:51:8f:37:3c:90:9c:8a:1c:ba:
         d2:12:e9:af:c8:5d:28:3b:37:fa:18:94:b0:ed:1f:78:45:ba:
         34:44:fd:6f:41:62:05:b4:32:d2:ee:3f:63:17:1a:7f:e5:2b:
         dd:15:75:33:98:57:04:e3:62:11:50:31:c6:dc:34:97:2b:0e:
         cf:4b:1b:f1:25:c2:d3:9a:b0:21:33:59:00:a0:ca:cb:1d:40:
         c7:4f:4a:a2:35:7b:d0:4f:77:f5:93:12:cf:e3:5a:64:f4:c7:
         63:f6:8c:04:d4:eb:15:39:58:cf:44:87:5e:ad:e3:08:ff:9d:
         8b:33:ad:9a:aa:4e:d5:c0:9f:9d:df:8b:20:8f:c7:70:73:c1:
         e6:a1:da:ef:0c:ee:55:61:b3:ef:f6:31:60:1e:9e:5c:99:53:
         01:2f:a1:76:db:d5:b1:91:f6:9b:af:f3:d5:79:2f:8c:63:24:
         9e:b2:92:88:ab:63:d6:95:a4:11:f9:35:56:a6:26:da:86:49:
         5d:56:a7:b8:ca:a5:2b:65:d4:1c:8e:65:ab:8a:20:c5:7b:44:
         17:c9:f5:dd:90:ee:c9:e6:8d:10:0f:0c:4c:09:0c:39:6b:88:
         52:c6:dc:1d:6f:35:c9:91:86:77:dd:5b:6c:51:c7:b0:36:70:
         ce:94:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----