Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8ee6d0b2ab93217120c81912e01b4d31ea04032.cer
File:                     a8ee6d0b2ab93217120c81912e01b4d31ea04032.cer (raw, json)
Hash identifier:          qNTclXUOj8n4ndoApHldFjXcc1yVYExi2LnWj1hEhsA=
Subject key identifier:   B6:02:41:02:D0:F9:2C:C6:04:18:B7:09:71:2B:B0:8D:C4:78:6E:8A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D78016
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/a8ee6d0b2ab93217120c81912e01b4d31ea04032.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Oct 2020 20:17:57 +0000
Certificate not after:    Mon 18 Dec 2023 19:00:21 +0000
Subordinate resources:    AS: 267774
                          IP: 45.171.64.0/22
                          IP: 2803:a7a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14123030 (0xd78016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 30 20:17:57 2020 GMT
            Not After : Dec 18 19:00:21 2023 GMT
        Subject: CN=a8ee6d0b2ab93217120c81912e01b4d31ea04032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:5f:a0:6b:85:6d:cb:b6:de:d2:11:a9:ba:
                    de:51:5e:6e:47:2a:24:71:63:91:51:94:13:1b:ec:
                    9a:a6:5d:78:31:eb:4f:71:ee:54:6c:f8:37:e2:79:
                    68:a5:b0:69:9d:11:57:bc:25:42:1d:de:9b:47:4c:
                    4f:15:29:c5:18:43:b1:4e:82:84:b0:20:04:b2:92:
                    db:f6:7d:39:b7:00:81:2b:2d:56:45:d5:1d:b6:cb:
                    cd:f9:c1:c5:2b:ae:06:84:86:c1:4a:92:4c:65:01:
                    30:93:10:c7:c3:e6:f9:97:de:77:a5:11:be:58:e9:
                    9a:5c:24:b1:3e:93:64:69:5f:4e:9f:46:58:5f:ea:
                    3b:cf:35:92:8e:77:72:c8:68:57:de:b0:06:4f:d0:
                    34:61:0b:5d:d5:c7:29:71:fa:3a:a9:18:1a:60:eb:
                    65:09:db:b6:59:54:bf:f9:b3:66:08:c9:89:75:55:
                    55:17:e8:6a:37:3e:71:20:60:4e:75:ad:96:e2:5e:
                    0b:ff:26:d4:bf:32:0e:72:36:fa:ab:5b:c3:76:25:
                    ff:56:06:d0:d6:9b:e4:9a:39:3d:c0:ec:60:1a:4c:
                    76:52:d1:f9:3e:3d:86:c7:ac:05:3c:20:f3:98:ee:
                    5a:a9:50:24:e4:99:42:61:9d:71:bb:73:98:67:a2:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:41:02:D0:F9:2C:C6:04:18:B7:09:71:2B:B0:8D:C4:78:6E:8A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/a8ee6d0b2ab93217120c81912e01b4d31ea04032.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.64.0/22
                IPv6:
                  2803:a7a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267774

    Signature Algorithm: sha256WithRSAEncryption
         94:78:79:97:70:2f:48:85:12:7c:cb:77:21:bf:d0:23:a4:15:
         42:36:d7:b3:fc:bb:86:e0:86:bd:9a:74:a1:78:bb:86:d1:67:
         d3:67:31:36:7a:e8:66:30:bb:24:d8:91:c5:40:95:2b:d5:2a:
         3c:36:a0:2a:ca:22:9e:7c:ec:05:63:d2:11:19:b7:c1:64:e5:
         58:5c:63:ad:1e:61:63:44:3a:dd:6d:9c:eb:aa:f6:cd:23:21:
         79:2e:6f:55:16:ae:47:dc:77:d2:09:2e:dc:f6:fb:cd:f8:87:
         1c:7a:41:79:d6:d5:f0:f0:9a:39:df:eb:e6:7b:b2:eb:8d:85:
         22:40:35:f3:ef:c5:0e:3a:8b:39:ae:75:d2:dc:eb:07:98:9b:
         5c:ec:13:2d:cb:0b:61:f3:af:36:ae:5a:a1:84:2e:e6:a6:6b:
         53:6f:d2:32:d4:36:e8:77:95:a8:36:c2:36:c2:5a:b1:81:e1:
         b5:0b:06:20:08:4c:c2:f1:30:d1:6e:d3:bb:be:a7:7a:55:64:
         b8:cc:fd:a3:b8:09:20:1a:23:49:a1:4e:93:4a:c7:2a:b8:a3:
         d7:6c:7e:a2:58:53:d1:44:e6:e9:1f:43:6d:6b:17:51:ef:59:
         4a:14:94:16:d6:09:8c:d8:b1:fd:98:18:dc:9e:50:7a:89:ee:
         a3:75:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----