Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer
File:                     9cd1fa487cf3249dd054f9956489b848d101a711.cer (raw, json)
Hash identifier:          Yvos866s0bNWlgbeJsSLUrsPcvwfxVKO0dWBB4JagwA=
Subject key identifier:   AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E86532
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/9cd1fa487cf3249dd054f9956489b848d101a711.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 15 Apr 2020 12:21:40 +0000
Certificate not after:    Sun 09 Feb 2025 22:46:17 +0000
Subordinate resources:    AS: 272995
                          IP: 45.173.8.0/22
                          IP: 2803:f860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15230258 (0xe86532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 15 12:21:40 2020 GMT
            Not After : Feb  9 22:46:17 2025 GMT
        Subject: CN=9cd1fa487cf3249dd054f9956489b848d101a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:cb:41:b5:18:61:c2:81:58:37:cc:d3:07:
                    79:7f:2a:aa:63:4d:70:6f:3a:1d:40:10:6b:a2:3d:
                    52:cf:13:e7:13:c1:17:c2:e4:ea:36:dc:a6:a5:00:
                    7d:31:cf:b3:6c:16:d5:84:75:09:57:50:a7:9e:13:
                    27:cf:57:76:5f:48:02:3a:9e:cc:46:2f:08:11:6f:
                    df:d0:1c:9a:2e:5c:4a:3d:ab:6b:c5:f3:df:4f:e6:
                    1c:be:93:32:01:44:8b:b1:ec:8d:3e:69:9c:6b:94:
                    b8:a2:b0:b9:6c:65:9a:a9:9f:a6:00:86:27:d6:d9:
                    04:37:d8:ee:6a:be:0b:b3:d1:d3:57:b8:06:86:6d:
                    a7:f0:36:41:de:02:e6:5a:38:58:66:1c:33:cb:05:
                    40:31:ae:c8:41:df:71:de:d0:5c:79:d7:e0:c8:23:
                    47:8a:b9:d2:d7:fd:a9:1e:57:2a:2f:8c:75:d3:77:
                    04:6a:12:d5:51:e5:b1:f2:93:b9:a9:f9:cc:77:91:
                    88:ba:45:c9:2f:dd:91:7d:04:af:dd:9d:e3:8f:95:
                    48:c5:f0:30:f3:b5:06:d4:3c:fd:fc:90:9f:26:04:
                    f7:3d:21:bd:6f:88:ce:98:6f:95:b7:4c:65:a5:62:
                    05:fe:f0:b0:d2:59:82:05:80:fe:c9:c3:2a:28:fa:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/9cd1fa487cf3249dd054f9956489b848d101a711.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.8.0/22
                IPv6:
                  2803:f860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272995

    Signature Algorithm: sha256WithRSAEncryption
         23:44:4a:39:71:e9:48:bb:e8:4f:ed:30:e8:6a:88:18:3f:2b:
         2c:f9:4d:0f:1e:05:84:98:09:a2:b1:dc:68:d7:71:ce:ca:e2:
         7a:41:dd:d2:f9:1e:ef:eb:1a:6c:73:f4:ad:f8:e4:33:66:7c:
         79:64:1b:86:36:28:b6:62:33:60:bd:c2:8c:aa:6a:1c:ab:89:
         72:17:56:f2:1f:52:9e:dd:e4:f9:98:8c:b8:6d:f2:b1:6c:fc:
         97:8d:0d:a7:f6:7f:55:27:9c:18:e6:32:93:b6:88:da:10:89:
         e1:49:e2:b9:83:12:df:cb:d0:45:f6:7a:1d:65:08:29:e4:58:
         0c:9f:b3:4c:bf:19:aa:ad:06:09:65:c9:15:95:58:b7:fc:96:
         95:2f:aa:6d:f4:58:89:e2:98:0e:95:e9:ed:e5:a8:f2:67:9a:
         02:43:2b:84:c5:6d:f0:88:12:90:95:09:9e:4d:7a:4c:53:1f:
         7a:f4:10:68:dc:01:52:6b:55:4d:3a:e7:18:14:a8:75:cf:ce:
         02:7e:40:cd:24:b8:d2:35:cd:7a:87:f6:b8:ac:9c:76:84:cb:
         ea:46:de:18:92:ea:5d:aa:bd:29:3c:1e:00:b3:ff:6b:68:c3:
         73:1e:9e:f0:00:82:ff:e3:e0:8d:00:0f:36:f2:4f:38:d5:e1:
         25:e5:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----