Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a142b246def171452a54ef8b8244c598c34ccff0.cer
File:                     a142b246def171452a54ef8b8244c598c34ccff0.cer (raw, json)
Hash identifier:          5dTYMYmFy26FRQF+QtKUDPpxbVQ/5Yvc0WjJTJjoC1I=
Subject key identifier:   ED:5F:4A:84:5C:88:A9:FD:FF:09:3E:84:FB:FF:7D:42:2A:25:9F:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D70AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/a142b246def171452a54ef8b8244c598c34ccff0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Feb 2020 21:29:59 +0000
Certificate not after:    Tue 12 Dec 2023 13:45:44 +0000
Subordinate resources:    AS: 269935
                          IP: 190.83.12.0/22
                          IP: 2803:2ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14092998 (0xd70ac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 21:29:59 2020 GMT
            Not After : Dec 12 13:45:44 2023 GMT
        Subject: CN=a142b246def171452a54ef8b8244c598c34ccff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:d4:8b:12:82:0d:c8:6c:55:7a:93:c3:79:
                    83:bc:a4:b5:74:ac:89:49:f5:2b:49:8e:79:02:cb:
                    c1:91:15:af:a2:31:79:94:e0:a9:40:9a:77:fe:13:
                    53:43:f3:81:92:20:22:16:cc:ad:d6:3c:91:75:28:
                    4f:82:0a:ff:e1:5f:2f:2c:b0:ab:7c:81:e0:75:c5:
                    c3:70:dc:50:92:e1:83:75:05:f4:32:d1:63:0a:87:
                    2c:04:f8:44:c5:f5:53:74:ac:bc:9d:8b:16:cc:e8:
                    1e:f3:52:d4:02:13:ce:64:23:b6:9e:49:89:21:ff:
                    82:b7:bf:ce:e6:df:98:ec:93:28:52:cd:5d:b4:82:
                    8a:c0:ea:49:0f:0a:1a:66:61:c0:fc:11:87:fa:6c:
                    d4:b2:0a:eb:34:4a:a0:e8:60:a3:01:3b:7a:af:be:
                    54:2c:8d:d8:ae:01:4b:31:4e:4f:26:6a:ad:9b:bd:
                    98:2e:ed:85:8b:05:83:a8:0b:21:64:c0:eb:47:52:
                    43:2b:49:7b:7e:27:17:7d:01:47:72:e9:73:24:96:
                    e0:a5:c7:91:0a:07:8d:f7:74:5b:12:18:2d:c7:9f:
                    56:3c:72:79:a0:8e:bb:69:37:f5:e1:a4:cc:f9:4b:
                    28:b2:8d:2c:b1:96:f0:17:58:3d:b3:c5:fe:a3:0e:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:4A:84:5C:88:A9:FD:FF:09:3E:84:FB:FF:7D:42:2A:25:9F:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/a142b246def171452a54ef8b8244c598c34ccff0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.12.0/22
                IPv6:
                  2803:2ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269935

    Signature Algorithm: sha256WithRSAEncryption
         3a:1c:77:5f:a0:52:4b:35:6e:d4:29:eb:d7:7f:cb:4b:a5:fc:
         14:d4:20:bc:0e:9f:4b:b4:d7:64:7c:aa:45:78:86:e9:87:01:
         eb:52:ed:76:1b:18:10:45:22:97:3f:45:fe:a0:78:17:a9:7a:
         61:3b:16:f7:1b:ad:65:ad:6a:7f:c7:34:be:2c:04:b0:7e:c6:
         2a:dc:fd:99:90:c6:57:0b:64:2c:72:b8:40:23:8c:3e:cd:a9:
         71:4a:ad:1d:c8:70:52:ab:87:54:24:24:f0:a8:4e:b0:26:53:
         20:19:9a:cb:4d:1a:05:a5:69:24:02:b6:d3:db:fb:86:fe:b2:
         94:75:79:06:fa:6e:c1:a6:f8:67:a4:d2:a1:1a:9c:3a:6b:89:
         26:77:88:10:ab:be:e7:42:ad:e3:30:e6:16:d0:2b:8f:20:c4:
         1c:68:ed:59:ac:ec:be:a2:b0:95:80:a3:b5:24:b7:a8:db:bf:
         61:ba:d4:94:71:75:02:ff:a5:27:55:5f:d5:47:fb:66:09:39:
         89:f4:13:50:af:f5:11:49:6d:db:5b:e8:34:3b:39:86:b3:57:
         f2:00:7a:a9:58:89:f0:9a:d1:38:87:98:52:48:ec:b0:bd:e2:
         92:34:f3:c5:3d:58:4e:da:20:e7:96:9d:36:ce:08:72:c7:d0:
         c9:d2:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----