Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/964a21ff7c1fd56e60119cb717b0e0a16f85e7d4.cer
File:                     964a21ff7c1fd56e60119cb717b0e0a16f85e7d4.cer (raw, json)
Hash identifier:          kqBqk1cLlIvM/F7eJoPWXTHjgkxVuwz7YaORoF2OHkE=
Subject key identifier:   62:1E:53:9D:6D:E0:5F:59:D3:77:CD:57:97:ED:EB:3F:02:D0:8A:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E10F20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e70ffa56-ac19-410a-a9e0-0efc375f40f5/964a21ff7c1fd56e60119cb717b0e0a16f85e7d4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e70ffa56-ac19-410a-a9e0-0efc375f40f5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Jun 2020 18:54:14 +0000
Certificate not after:    Tue 09 Apr 2024 18:54:04 +0000
Subordinate resources:    AS: 270032
                          IP: 200.233.44.0/22
                          IP: 2803:25e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14749472 (0xe10f20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 18:54:14 2020 GMT
            Not After : Apr  9 18:54:04 2024 GMT
        Subject: CN=964a21ff7c1fd56e60119cb717b0e0a16f85e7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6a:3e:5c:55:34:cc:cb:48:22:2d:1d:4e:bc:
                    b6:4d:83:ee:0c:70:47:ac:23:12:07:fc:ff:a9:5f:
                    2d:e0:5c:55:06:cd:6d:6e:09:1c:39:e2:77:63:40:
                    da:84:a7:ac:46:9e:f2:f8:4c:80:55:70:5c:6a:e4:
                    8c:99:2e:eb:f3:07:90:f0:91:7f:4b:07:11:87:e1:
                    b8:94:98:c6:53:2b:59:da:60:d1:10:2c:58:e5:f6:
                    e5:38:d6:ae:4d:54:c1:c3:e3:02:83:53:14:db:e1:
                    88:68:a4:e7:db:94:df:8e:89:3b:22:8d:61:7a:f4:
                    eb:78:35:ea:47:94:44:6b:5b:4b:a4:59:d6:5c:58:
                    89:82:2e:19:aa:88:a8:ec:90:fc:61:15:52:23:d3:
                    27:2e:f0:8e:cc:9e:d7:e1:d9:1d:da:8c:b9:79:a7:
                    1d:17:84:c9:ec:41:96:75:8b:3a:ca:4f:16:ca:f4:
                    2d:42:b2:a4:90:43:84:2d:77:06:3e:52:0a:0c:03:
                    ef:09:f5:4d:ca:cd:ff:ae:c1:0b:56:a4:71:e1:f9:
                    47:88:51:4d:34:b9:b7:86:0f:4e:9c:ca:88:a9:aa:
                    ca:48:a0:c7:a5:84:ee:1b:87:51:41:f6:f7:8e:f0:
                    d7:7c:6c:35:60:b3:ce:e1:d9:db:c9:80:ef:be:77:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1E:53:9D:6D:E0:5F:59:D3:77:CD:57:97:ED:EB:3F:02:D0:8A:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e70ffa56-ac19-410a-a9e0-0efc375f40f5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e70ffa56-ac19-410a-a9e0-0efc375f40f5/964a21ff7c1fd56e60119cb717b0e0a16f85e7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.44.0/22
                IPv6:
                  2803:25e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270032

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:9a:b9:92:51:4b:82:9b:e8:c1:70:f4:ee:66:1d:21:a2:
         5a:75:1e:0d:8f:36:5a:93:41:c6:67:13:77:cd:b1:c3:77:27:
         8f:b4:f6:25:fc:c2:a7:ca:f3:31:ef:3b:8a:c7:b3:31:b7:7d:
         1b:17:e0:59:1e:ed:d3:28:3a:15:5c:82:60:d2:95:69:4c:57:
         a8:3b:af:df:f3:0d:3b:09:7d:e1:da:b8:71:4b:18:b4:ae:dc:
         6f:15:c3:24:bd:f7:76:e1:89:94:37:9e:91:5e:c6:09:16:59:
         e1:1c:10:cc:cc:42:9d:f9:3e:1a:cd:76:c4:b8:01:02:c1:5a:
         10:1e:61:04:ee:36:e1:24:26:66:69:35:d1:72:9d:5b:55:70:
         f1:7c:92:23:a9:c6:86:d8:5b:57:64:56:a8:0e:69:a2:e1:66:
         e8:24:ed:c0:11:81:e9:e0:1a:2e:ad:68:7a:0e:df:4b:33:a5:
         5a:2f:51:77:28:9c:08:cc:b4:56:7e:84:cd:34:a2:f8:dd:fa:
         20:95:2b:65:e5:54:25:fa:fe:ca:aa:6b:9d:8f:af:09:ba:36:
         2d:f1:a9:ca:ca:f7:1e:aa:c5:60:39:00:42:a5:21:4d:ab:6f:
         5a:61:37:05:07:65:da:22:60:cf:1e:21:76:01:fa:dd:e6:d3:
         1b:03:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----