Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer
File:                     add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer (raw, json)
Hash identifier:          Sswm9o70F7elaYj6iBh45OueVa3LdhBW18+hLFEOa/o=
Subject key identifier:   5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD4733
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Feb 2020 19:20:41 +0000
Certificate not after:    Mon 18 Nov 2024 02:57:01 +0000
Subordinate resources:    AS: 265620
                          IP: 45.189.60.0/22
                          IP: 2806:3a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16598835 (0xfd4733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 18 19:20:41 2020 GMT
            Not After : Nov 18 02:57:01 2024 GMT
        Subject: CN=add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:2b:c2:52:34:c1:85:ee:1d:70:ff:0e:8d:
                    65:e8:01:4f:d1:59:44:0d:d3:3c:e7:2f:70:4d:b1:
                    e6:67:f5:27:51:2f:5a:9a:d0:cb:7c:c2:35:de:b9:
                    b9:fd:cb:58:73:08:62:29:26:b8:50:c3:95:f2:6c:
                    c5:19:83:d8:86:33:18:a3:23:7f:5e:51:1e:25:97:
                    35:fb:94:28:16:d6:1c:b5:f3:57:84:1a:d5:c3:26:
                    43:08:6b:cb:dc:9e:5d:da:0c:e0:bc:e3:81:8d:c1:
                    d6:01:a6:ff:cf:38:93:91:da:33:a5:99:37:9a:93:
                    5b:73:cd:e7:4c:e1:4b:5f:c4:2a:c5:fe:a8:df:ea:
                    1f:31:63:c8:be:a9:e5:f0:73:b8:4f:4b:f0:f0:cf:
                    1f:cf:f6:e3:0d:8d:da:a3:16:b6:bd:b0:fe:a7:25:
                    6b:2c:b2:07:2c:a2:cd:e6:80:6e:2d:59:50:fd:c8:
                    d9:66:87:e3:63:df:10:48:ac:4c:25:6e:50:bb:ae:
                    08:48:91:50:4d:82:95:09:e6:9c:74:56:c9:18:d8:
                    f2:dc:0c:d6:dc:fe:ee:9d:7b:0b:fd:ae:f1:9b:80:
                    4b:37:be:b8:f0:5c:ca:01:4c:cb:a5:3c:65:0c:82:
                    b1:9f:1b:f3:9e:f4:2c:4c:90:7b:58:f0:99:09:54:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.60.0/22
                IPv6:
                  2806:3a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265620

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:bc:6e:1a:28:5b:4b:c7:58:f2:66:e0:f9:b3:7e:67:28:
         b0:4a:a4:9b:f1:27:99:fd:77:23:7c:fb:ea:8a:a4:0e:7d:2d:
         43:8b:50:d5:0b:53:01:f3:be:25:a1:1a:1b:d1:18:dc:69:a6:
         05:05:3e:4d:c2:c6:b3:0c:05:44:cb:59:a4:96:5e:49:88:00:
         8c:e5:57:1d:51:1f:c2:82:f2:66:bb:df:71:3f:a9:19:80:95:
         1a:02:84:fa:0f:53:38:0f:4b:6b:39:97:42:d9:5b:a4:37:f5:
         ab:67:d8:07:39:19:4a:ab:4e:15:36:b1:76:a9:31:d1:99:2d:
         4c:15:67:75:3a:00:bd:5d:57:6f:81:31:2a:61:39:cd:21:2c:
         79:0c:a3:b3:8c:37:c4:bb:0e:e5:79:68:22:29:2d:ae:f1:ea:
         6d:43:72:c3:cd:67:54:5d:7f:53:65:07:ef:0c:65:92:f2:94:
         b3:79:c8:56:eb:c6:24:17:d2:e5:4c:04:1a:6f:45:54:4a:f1:
         7e:bc:f1:a8:47:bd:2f:0c:2b:66:42:d5:ac:45:a1:d4:04:ec:
         98:05:92:60:03:a3:56:e5:88:9b:e3:30:a6:2f:96:42:8a:ed:
         80:d7:c3:10:37:54:9d:16:ec:af:8d:3c:1a:24:0b:84:ba:37:
         72:f6:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----