Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer
File:                     962886d2caf49497dff544bb6ba251bf1ffa6220.cer (raw, json)
Hash identifier:          SF8pBX3NdjnXSQqw9Mr9NhMdy+8Em9NXc6ruDyoN4hM=
Subject key identifier:   EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E26CCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 04 Apr 2020 00:06:23 +0000
Certificate not after:    Tue 26 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 264628
                          IP: 190.89.29.0 -- 190.89.31.255
                          IP: 190.103.28.0/22
                          IP: 190.120.248.0/21
                          IP: 2803:c000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14838988 (0xe26ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 00:06:23 2020 GMT
            Not After : Nov 26 04:00:00 2024 GMT
        Subject: CN=962886d2caf49497dff544bb6ba251bf1ffa6220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:32:d7:54:8c:4f:38:6e:cb:f3:1e:1c:1f:46:
                    f2:9f:3e:47:d7:a1:76:6a:6a:6e:87:47:55:d6:dc:
                    08:f9:fb:a9:3a:73:43:e3:29:f8:41:8d:d6:46:7e:
                    1e:8a:cb:c4:0b:b6:67:00:fe:f4:55:e2:96:12:9b:
                    a4:94:75:c9:3d:c7:8b:78:83:8d:37:96:69:30:3d:
                    a7:0f:3e:b1:b2:a8:f6:df:e3:b6:46:f3:77:fa:71:
                    ed:be:49:d0:61:33:11:dc:3a:2e:ed:31:16:9b:e3:
                    a0:dd:47:cc:9c:fc:76:b6:17:a4:39:24:36:9a:2b:
                    db:12:af:a5:17:64:3d:c5:5e:f9:97:ab:e6:e9:f0:
                    85:48:8f:2a:d6:18:91:b6:73:23:5b:fe:f7:3a:b3:
                    72:f3:83:40:c7:fc:a5:8a:dc:b5:ae:52:5e:c7:85:
                    ea:43:d4:d2:32:aa:3d:56:2d:73:d4:b4:14:b3:32:
                    ec:a5:ea:75:c1:43:c0:d4:10:c9:ff:0b:e0:3a:a7:
                    47:13:d9:ec:4b:aa:52:82:2d:c1:6e:cd:a2:e3:06:
                    b2:19:0b:0c:db:7a:e8:bc:06:c7:0c:ba:d1:13:9b:
                    1d:7b:1d:50:d1:fe:b7:a7:b1:26:2c:7d:3c:22:d9:
                    76:70:df:50:d3:5f:b8:eb:83:5c:99:4b:4e:0e:6a:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.29.0-190.89.31.255
                  190.103.28.0/22
                  190.120.248.0/21
                IPv6:
                  2803:c000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264628

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:88:0f:a0:51:4f:ae:aa:72:20:89:cc:1d:f6:d4:90:08:
         95:94:43:57:da:3e:c0:bb:95:be:72:8c:55:4e:88:04:ee:b0:
         6a:3f:e9:5b:be:df:a3:13:41:a8:f4:9f:0d:d8:1b:4d:e4:b6:
         7a:66:5b:3a:e9:78:a8:92:8b:75:b3:4a:08:e7:fd:0a:7c:5c:
         70:a4:db:a3:d6:6c:17:b8:14:1b:3d:4f:e5:6b:8f:1e:ad:91:
         e2:dd:27:ca:e5:c2:d2:c7:33:6b:ac:cf:4e:23:f2:cf:40:bc:
         41:02:61:cf:08:d0:d2:42:d6:e5:14:2f:ba:14:76:1b:40:47:
         81:bc:0e:01:47:1c:58:e1:23:cb:f5:01:4d:95:2e:8b:e4:b1:
         1a:45:a0:47:47:9f:a4:d1:f7:ed:ab:3d:89:42:8e:ce:43:fe:
         5e:be:57:1d:4d:7a:87:d5:6a:21:d6:eb:a3:e6:8d:21:89:f5:
         4f:6a:38:79:9a:aa:70:de:b4:a2:11:fb:d9:56:d4:84:0a:20:
         ef:49:f5:e9:40:a3:16:42:ba:9d:bb:2f:9a:12:d8:88:55:3f:
         7d:a9:1d:03:26:3e:bd:b2:cd:6d:1a:ad:2f:21:4b:75:78:21:
         85:a3:98:47:35:18:45:f4:58:11:96:e5:8a:ae:a0:00:6f:ae:
         3c:63:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----