Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f8928f693cae2152db68b3f0f8d2832228b50c4.cer
File:                     8f8928f693cae2152db68b3f0f8d2832228b50c4.cer (raw, json)
Hash identifier:          XRWqiBprZpEk/O4REyEtuAv96yTOJOI9bB5ww/ZQP2I=
Subject key identifier:   E7:AC:F1:9D:5C:A5:ED:B0:DA:1F:95:67:BE:F2:83:F2:2F:38:B2:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBE84A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/8f8928f693cae2152db68b3f0f8d2832228b50c4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 13:57:36 +0000
Certificate not after:    Sun 30 Jun 2024 21:12:27 +0000
Subordinate resources:    AS: 266898
                          IP: 45.162.100.0/22
                          IP: 2803:36a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15460426 (0xebe84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 13:57:36 2020 GMT
            Not After : Jun 30 21:12:27 2024 GMT
        Subject: CN=8f8928f693cae2152db68b3f0f8d2832228b50c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:e4:36:25:e4:bc:1e:bb:e2:6b:3a:82:c1:
                    22:57:e7:dc:eb:9a:f5:81:53:1d:49:c9:ed:22:48:
                    a8:90:4f:87:c3:cf:13:08:2c:a5:00:84:c7:d0:b1:
                    51:69:86:00:bb:d8:ac:a1:d3:4c:68:16:2d:1a:4b:
                    9f:1e:2c:6f:fe:aa:87:67:e7:b7:9c:3e:28:d4:dc:
                    09:bb:46:3e:89:aa:71:b7:f2:c2:b5:49:2b:19:55:
                    d3:44:e4:3d:5b:db:3c:b0:6c:90:58:4e:4c:84:e9:
                    28:45:e5:e2:b6:09:b0:71:7c:05:c0:2d:a2:07:08:
                    84:d8:ee:0a:ad:cc:a1:8b:80:c4:9a:9b:1a:15:24:
                    67:a9:3f:45:07:8e:76:59:fa:4b:c6:b2:72:4e:59:
                    d3:26:d4:1f:21:cf:ea:f8:fa:51:0d:4e:b5:3d:d4:
                    39:a0:81:f5:48:98:86:79:a4:45:d5:6b:92:f5:1d:
                    75:06:b3:5e:10:25:bf:31:6d:53:b8:9f:8d:3a:55:
                    92:53:92:31:d5:ab:e0:30:c2:e3:f5:1b:dc:2c:27:
                    ff:fb:2f:3f:eb:69:fb:32:79:13:e1:ee:8f:5a:4e:
                    8b:af:76:c5:c6:b4:47:a5:3d:58:82:e5:d0:2c:88:
                    13:d8:d5:56:ea:7f:af:ae:cb:78:97:d4:69:d8:03:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AC:F1:9D:5C:A5:ED:B0:DA:1F:95:67:BE:F2:83:F2:2F:38:B2:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/8f8928f693cae2152db68b3f0f8d2832228b50c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.100.0/22
                IPv6:
                  2803:36a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266898

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:d3:d5:8e:cf:c6:49:11:39:4a:5a:66:02:cf:94:df:df:
         d6:55:bb:39:20:70:12:5d:b7:9b:2c:79:a0:af:f7:63:61:d3:
         de:72:f4:37:90:c2:f6:64:ad:34:cc:38:6a:49:8c:72:6d:e5:
         a5:d7:8f:08:f5:1e:3e:c8:27:95:bf:42:5a:72:cf:8c:e1:1f:
         d7:11:c7:fb:db:e1:6e:65:06:ab:a7:de:29:ae:9b:93:ad:0c:
         a7:6a:49:79:88:9a:5f:77:13:3b:34:71:99:ba:11:c1:f5:38:
         0a:bf:ce:3b:3c:5b:48:59:8c:08:68:94:f5:71:e7:08:84:35:
         74:51:56:b1:ea:21:0e:2e:c7:e5:77:1c:49:2e:c6:36:38:60:
         a2:0e:13:45:63:19:28:d8:4c:db:27:4f:a0:c4:7d:ae:9f:c5:
         e1:6c:9e:a8:41:5e:5e:c0:7f:d4:03:dd:eb:2e:02:55:e9:7d:
         cc:ee:e1:5e:f4:c6:16:08:17:05:0a:74:77:76:44:bb:81:92:
         6b:56:99:b1:c7:84:26:d3:41:5f:3e:7f:b6:a0:4d:d1:28:8c:
         3d:f9:fc:2d:6a:af:7c:1f:8a:e0:41:7e:ad:41:40:da:a5:4a:
         c5:35:b2:6b:fc:02:fa:ac:30:fe:9f:85:ca:6d:ce:14:0a:5b:
         e2:98:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----