Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
File:                     b237ad19586522bd4228c8593de2f297c35868d7.cer (raw, json)
Hash identifier:          GDXNmKg5DLOQeDEjZYv1pnLFqNyxpZ5xwpYq3O63QEA=
Subject key identifier:   EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E46C29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 May 2020 19:57:38 +0000
Certificate not after:    Fri 10 May 2024 19:03:26 +0000
Subordinate resources:    AS: 266845
                          IP: 45.239.32.0/22
                          IP: 2803:3ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14969897 (0xe46c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 29 19:57:38 2020 GMT
            Not After : May 10 19:03:26 2024 GMT
        Subject: CN=b237ad19586522bd4228c8593de2f297c35868d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:80:c3:aa:fa:5b:34:75:6c:08:78:ae:c9:
                    1f:85:6f:33:2d:4c:66:fe:d3:a6:1f:81:9d:52:18:
                    9a:88:90:82:d2:0d:c1:08:f6:ea:21:27:a7:be:f5:
                    c6:7e:88:39:7a:a1:a3:ee:25:45:8f:85:08:0a:42:
                    f2:80:05:5b:30:8c:05:50:30:53:84:cd:f6:63:b2:
                    a7:4b:a5:db:cb:ca:60:96:26:c2:3b:32:00:84:38:
                    29:5e:9b:d4:04:bd:c7:4a:5f:e2:19:85:a9:07:44:
                    52:42:35:23:11:e1:c0:73:e0:99:ac:49:e4:6e:df:
                    02:1d:35:47:df:9d:50:6e:7f:6c:85:7b:9b:70:87:
                    38:0a:b7:fc:f5:8a:f2:bb:7a:c0:5e:1c:2c:27:e1:
                    1b:c8:a2:a3:65:6f:c5:9c:28:e7:da:5e:9a:48:a3:
                    bb:7a:ba:6d:fb:df:ee:cd:74:a8:a7:f6:58:50:41:
                    6f:e6:94:7a:97:80:93:30:68:e1:ec:96:dd:b1:34:
                    05:e4:1f:44:4c:50:35:0c:3c:81:cf:39:f3:66:19:
                    9e:b8:04:93:56:7d:8c:a6:0a:a8:24:86:51:9b:32:
                    51:da:87:c1:e5:57:e0:5f:5f:8e:4f:7c:a1:2e:b2:
                    59:e9:91:2e:5c:be:64:9c:be:03:f0:fe:7e:b9:c2:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.32.0/22
                IPv6:
                  2803:3ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266845

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:a7:cf:dd:a9:a1:e1:01:9e:b6:8c:e4:a5:83:01:fd:9b:
         41:3b:2e:62:55:94:9c:c0:63:66:02:51:65:9c:aa:2f:63:f8:
         8f:9c:a0:18:8c:3b:bb:12:1e:03:bd:9a:63:b7:04:39:69:b9:
         bb:76:f7:3f:e7:63:34:3c:74:7f:51:f9:1b:09:19:a1:09:7b:
         06:c5:3c:4b:dd:8c:ea:b4:85:5f:40:f9:c3:14:9c:85:92:6f:
         9d:b0:fb:d3:49:6d:9e:34:2d:f5:54:9c:ce:cf:6a:3d:8b:fa:
         8d:f3:74:b4:ab:fe:7f:3c:31:86:54:7c:82:34:7e:ea:0d:7f:
         f1:24:53:83:b2:5f:92:10:83:50:a8:25:70:51:69:84:cb:93:
         97:92:f9:f4:b5:ef:97:35:5a:b0:9a:b0:69:22:95:a3:a5:cc:
         5d:51:7c:73:20:d4:00:cb:90:72:41:ae:29:40:86:29:33:c4:
         e5:bf:94:5f:16:0d:87:5b:ab:4a:a2:0e:b4:84:b1:cf:56:b5:
         0a:e9:97:da:cb:2d:f8:1c:d5:72:01:58:7f:ff:c8:d1:23:b3:
         24:34:42:8f:2e:7f:3e:bb:f1:9c:33:b4:c0:89:57:70:55:78:
         3c:cd:72:20:28:fc:26:5d:52:76:81:95:2a:46:ce:0f:53:a9:
         be:3e:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----