Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9822324130ff130f6e927415dc987319696bc18.cer
File:                     a9822324130ff130f6e927415dc987319696bc18.cer (raw, json)
Hash identifier:          KAu+ndSf8T9a26cfn++GLHqC66VVfv66z7qTEekx2gE=
Subject key identifier:   D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6BB82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/a9822324130ff130f6e927415dc987319696bc18.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2020 15:18:48 +0000
Certificate not after:    Thu 26 Sep 2024 21:21:52 +0000
Subordinate resources:    IP: 170.246.92.0/22
                          IP: 181.174.184.0/21
                          IP: 2803:2c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16169858 (0xf6bb82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 14 15:18:48 2020 GMT
            Not After : Sep 26 21:21:52 2024 GMT
        Subject: CN=a9822324130ff130f6e927415dc987319696bc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:56:fc:76:bf:ad:2f:d3:be:e8:99:c9:af:
                    34:f1:e7:b8:51:e2:d2:d6:f3:e0:ed:c3:5b:ac:d8:
                    3b:a9:64:62:57:ca:11:f7:14:1c:b9:ff:7b:e7:8d:
                    42:cd:23:d8:36:2b:e4:14:d7:c2:ea:fe:40:43:4b:
                    d1:ff:57:76:cf:75:61:d6:85:5c:b1:66:b5:cd:5c:
                    28:dd:d7:a8:cf:21:61:7f:92:3b:57:10:45:75:78:
                    40:08:b4:c5:a3:41:1e:6c:a5:d7:bc:40:74:1a:ee:
                    4a:e9:f3:d6:f1:8f:3c:6d:a7:a6:5e:8b:c5:82:62:
                    85:c9:59:85:61:c9:47:3f:ac:96:7d:a4:43:6a:82:
                    d7:e0:4f:e5:29:63:9a:71:a7:36:e5:02:ca:de:df:
                    e9:bf:98:24:21:13:f3:54:08:e6:7a:6c:bc:c1:cd:
                    8a:34:4d:3f:52:80:5d:06:79:9d:b9:51:50:d4:58:
                    65:73:9d:39:ca:ef:af:54:1e:b7:2a:ef:ff:cc:f7:
                    b4:e0:8f:69:fc:ba:c6:b7:e5:c8:1f:27:09:66:a1:
                    19:af:b2:ab:d9:ad:ed:7c:b7:22:c0:1e:33:d9:2d:
                    7e:d7:2b:e0:65:b3:5e:9e:db:56:4f:f3:ae:cf:20:
                    97:fd:c7:59:f9:73:a8:bf:fc:60:7e:eb:7c:76:40:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/a9822324130ff130f6e927415dc987319696bc18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.92.0/22
                  181.174.184.0/21
                IPv6:
                  2803:2c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:48:6c:fc:4d:d3:48:d9:c2:19:98:98:d9:df:2e:2c:e5:b6:
         fb:68:fe:77:00:75:e8:f4:a3:c6:fd:90:94:52:8f:1c:65:7d:
         da:ae:e1:d7:8b:b0:64:b5:e4:07:65:2f:28:77:97:a3:ac:41:
         9c:27:60:5d:98:10:70:3b:88:2a:c9:83:5d:5c:a3:42:6a:d1:
         22:20:34:98:39:d7:7e:a9:6d:87:28:a1:0f:f4:5c:ae:84:bb:
         f5:6e:f1:78:5e:b7:ad:52:0e:e6:20:ea:ca:e2:8a:95:60:fe:
         9d:b5:47:92:cf:63:18:d4:d6:a8:68:07:35:ff:bd:61:a7:8e:
         44:7c:16:e3:6b:b0:ea:39:a1:42:37:8a:96:be:cf:01:a4:a8:
         6e:cd:43:61:11:f2:2a:4e:bb:b5:70:09:dc:21:37:7e:c3:a2:
         34:88:80:8c:93:78:e6:62:47:e5:8c:0c:d0:32:9a:39:3f:fe:
         ca:82:76:2d:07:3a:13:08:8c:d1:85:bf:02:fe:3a:6c:c4:1f:
         51:4c:13:12:a3:e0:8c:2c:29:b7:38:62:1d:5e:3e:4c:07:0f:
         f4:14:dc:28:a4:0c:70:8f:fd:59:6e:df:d9:22:85:9f:b3:4a:
         8a:17:8b:09:7c:43:6f:35:17:bd:51:53:78:fd:c5:a8:2f:e0:
         c5:d5:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----