Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94373e51445c3d1c9effa7de1799d8fbf06485a9.cer
File:                     94373e51445c3d1c9effa7de1799d8fbf06485a9.cer (raw, json)
Hash identifier:          kAlgz9PL/9CI81AE3gnVNQCJUe9ljWv6Rwk9nxrYuxg=
Subject key identifier:   04:B0:38:1B:45:4A:84:75:75:1A:AD:A3:2A:9F:91:63:F7:6A:C5:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010FF6BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/94373e51445c3d1c9effa7de1799d8fbf06485a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Jun 2020 16:12:27 +0000
Certificate not after:    Tue 19 Aug 2025 17:32:23 +0000
Subordinate resources:    AS: 265848
                          IP: 45.224.104.0/22
                          IP: 2803:4a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17823419 (0x10ff6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 16:12:27 2020 GMT
            Not After : Aug 19 17:32:23 2025 GMT
        Subject: CN=94373e51445c3d1c9effa7de1799d8fbf06485a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:77:ca:f3:d2:79:30:bf:84:90:02:83:fb:
                    fb:59:78:a2:45:1c:b9:10:18:be:d1:b4:a5:cf:da:
                    16:35:af:ab:95:a0:92:18:20:a8:65:c6:23:94:b7:
                    60:c9:c0:06:5e:dd:5c:fa:b4:d8:81:33:ce:95:89:
                    fb:04:09:e0:a2:e9:a2:b5:cc:23:37:19:33:97:5a:
                    21:14:8b:3a:02:e0:9b:f0:53:0c:1b:70:70:d8:6e:
                    37:c9:84:fc:3f:d7:a1:9b:4e:ec:fe:bd:c9:6e:3d:
                    b4:03:2a:6c:45:c6:ef:2c:af:37:d0:31:b0:e5:9c:
                    5b:ef:ac:43:25:cd:3f:9d:6c:0b:31:21:e7:13:c2:
                    49:7f:25:c6:c0:09:22:40:6e:7f:74:a2:15:21:ab:
                    36:80:0f:a4:53:22:68:02:b8:f5:87:6d:ec:66:76:
                    a0:c7:6d:45:e3:89:ad:39:90:33:87:64:20:37:f1:
                    2d:a7:0a:5f:12:d2:79:01:67:11:b4:e0:0d:79:70:
                    d9:f5:55:8c:4a:29:67:2e:e0:c5:64:aa:30:7f:92:
                    d7:43:22:f5:4d:ad:bd:46:d6:f9:f3:3d:f8:95:18:
                    34:34:6a:8b:79:e7:cd:7f:f1:1a:67:b8:74:20:99:
                    46:c6:d1:a0:31:44:fa:0c:dd:ee:42:60:fa:6f:7f:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B0:38:1B:45:4A:84:75:75:1A:AD:A3:2A:9F:91:63:F7:6A:C5:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/94373e51445c3d1c9effa7de1799d8fbf06485a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.104.0/22
                IPv6:
                  2803:4a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265848

    Signature Algorithm: sha256WithRSAEncryption
         30:33:08:d7:3d:3b:f2:7e:c1:b0:f1:a1:cc:57:69:07:66:c7:
         79:19:0c:d2:14:4d:88:67:ff:36:48:c1:bc:10:7b:e9:7a:b2:
         58:c5:92:22:2f:e2:53:81:65:b8:4c:5e:ca:ea:1f:00:68:39:
         36:88:ab:1b:22:b0:fa:7a:bf:b6:9c:a6:ae:ff:9f:f2:1e:89:
         5f:bc:cd:c4:74:5f:80:32:93:23:79:01:72:55:86:88:8b:70:
         d0:6e:4a:53:cf:1c:6d:6c:08:9b:a6:70:51:62:1c:03:20:8c:
         9c:01:63:aa:3f:33:65:e5:68:d1:a1:7d:f9:86:66:5e:e5:2d:
         ac:52:4a:ab:11:c7:54:b0:96:4f:a5:40:11:6f:d6:ca:b4:9f:
         62:c2:3f:5f:0a:94:57:3c:a9:6b:25:ef:15:ac:92:32:5a:af:
         a2:44:05:be:41:a7:55:7a:b3:03:35:d5:cc:bb:ee:c2:57:20:
         7d:2f:54:89:fa:11:9e:dc:4c:e1:b5:f3:96:fa:93:5b:c1:f1:
         f3:60:86:aa:f0:e0:51:7c:a7:62:5c:18:e9:7f:46:ff:6e:7d:
         82:fd:2c:f8:39:46:ef:0c:e6:57:51:5b:db:a2:d8:a1:4b:fa:
         87:c3:27:32:bd:d3:48:cf:5f:5e:85:b8:0b:90:14:eb:0f:88:
         4f:a0:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----