Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa260310b82e22ae6bf6a815bb8fe880c81b2d08.cer
File:                     aa260310b82e22ae6bf6a815bb8fe880c81b2d08.cer (raw, json)
Hash identifier:          IyqZ2Vp40STcmEk6k+yBA6mn8GldBvciLoBQsNMfZUI=
Subject key identifier:   3C:7E:A0:78:FC:C0:88:F9:7F:D6:18:01:64:59:DB:BD:F9:B9:61:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED409F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b0a730e8-e294-4b0e-be6f-9d347f14a224/aa260310b82e22ae6bf6a815bb8fe880c81b2d08.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b0a730e8-e294-4b0e-be6f-9d347f14a224/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Oct 2019 17:34:29 +0000
Certificate not after:    Wed 10 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 52397
                          IP: 200.7.144.0/22
                          IP: 2803:ae00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15548575 (0xed409f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  8 17:34:29 2019 GMT
            Not After : Jul 10 06:00:00 2024 GMT
        Subject: CN=aa260310b82e22ae6bf6a815bb8fe880c81b2d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:40:39:a9:de:ef:dc:0b:08:44:1f:dd:a4:
                    c7:78:b4:38:5c:5e:45:49:22:d1:83:8c:58:de:e9:
                    36:04:5a:02:ed:6e:8f:3c:6c:a8:0b:8a:3f:42:5e:
                    43:19:e6:27:54:3c:87:49:17:38:1c:20:a4:2f:31:
                    d9:0c:0d:b2:25:8c:46:a4:a3:03:af:65:96:46:15:
                    60:78:00:65:68:22:13:c5:0a:40:ba:0e:2d:1d:2b:
                    ab:9f:63:e8:64:7f:df:a8:69:d3:27:75:0c:8f:1c:
                    d3:04:91:2e:fd:91:f8:f7:dc:f6:bf:76:b6:36:72:
                    b4:4c:35:ee:4f:42:b3:fa:a9:08:66:df:15:13:9c:
                    3b:b6:54:92:d8:5e:d0:00:52:5d:3b:5a:d1:64:f3:
                    25:65:10:18:62:36:6c:44:27:80:20:a3:7b:40:ba:
                    84:b8:d4:6b:52:e1:33:b7:2e:e2:f7:bf:51:d5:61:
                    a1:a7:7a:de:bf:d5:fb:04:55:97:1e:fa:0c:f6:5c:
                    bc:1e:19:b6:e4:a2:ec:3c:1c:48:80:73:6a:60:ea:
                    8c:be:a2:aa:5b:8a:ee:30:63:27:9f:b3:fe:d5:e6:
                    28:5e:a2:7e:52:fc:b0:37:8a:db:c4:be:36:9c:a2:
                    6a:cd:9f:7a:cb:e2:d4:e9:0c:ab:74:78:c8:98:1a:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:A0:78:FC:C0:88:F9:7F:D6:18:01:64:59:DB:BD:F9:B9:61:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b0a730e8-e294-4b0e-be6f-9d347f14a224/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b0a730e8-e294-4b0e-be6f-9d347f14a224/aa260310b82e22ae6bf6a815bb8fe880c81b2d08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.144.0/22
                IPv6:
                  2803:ae00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52397

    Signature Algorithm: sha256WithRSAEncryption
         c7:2f:ea:bd:63:3e:d6:dc:80:f6:b0:ec:1d:14:e8:57:2f:16:
         e8:f6:4d:79:32:78:07:47:21:e1:3c:4d:40:81:2b:4b:6d:5b:
         0e:e4:3c:e8:d9:b4:89:22:7b:a1:c6:0f:c8:6a:99:02:f7:e2:
         3d:33:61:e0:56:f3:99:d3:6c:02:a2:ac:8a:d4:84:0f:ff:2a:
         13:2c:ff:ee:5c:a9:6b:43:81:d5:d5:27:ed:3c:8b:6b:59:53:
         6f:25:77:6c:0f:cf:0c:5a:26:40:a5:51:5e:ad:22:80:09:09:
         52:71:a0:9b:cb:e7:1b:74:10:a4:7d:0f:5e:a9:56:37:98:b8:
         df:cc:e6:2a:04:35:5f:f1:21:e3:2f:8f:9b:69:e5:8d:2d:fd:
         33:8b:e0:d9:23:42:63:10:57:f5:1c:38:70:c1:ab:a1:f3:66:
         0a:58:c3:17:58:91:2b:dc:08:77:d1:fc:79:32:38:d5:ea:73:
         a4:9d:f0:af:f9:4f:e5:a7:3b:02:b1:d0:99:cb:00:42:b5:23:
         c3:64:85:a0:0b:68:8a:d4:a4:c5:e7:47:e8:e9:36:3c:f8:d2:
         47:f4:76:90:2e:98:e1:6a:e5:ab:b8:40:6a:02:3f:bf:ff:e7:
         a5:1e:0c:09:bf:87:15:7b:2f:95:89:8b:de:a7:58:1b:45:df:
         81:b5:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----