Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
File:                     b4cd293c91ec205157dbfa9b56d9881f8f695255.cer (raw, json)
Hash identifier:          moDV682q3XlJGkunegoZwMCWYD/3Q2Rvi28Kp88xTHw=
Subject key identifier:   9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBFB6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 24 Jun 2020 00:54:39 +0000
Certificate not after:    Thu 15 Feb 2024 19:34:52 +0000
Subordinate resources:    AS: 264637
                          IP: 170.80.20.0/22
                          IP: 190.113.88.0/22
                          IP: 2803:5300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14416748 (0xdbfb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 24 00:54:39 2020 GMT
            Not After : Feb 15 19:34:52 2024 GMT
        Subject: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:ea:fc:b7:bb:21:a9:b4:da:6d:51:67:17:
                    e4:8d:77:57:7a:55:20:67:89:ae:0e:51:e4:35:ec:
                    65:15:46:fb:a3:1f:95:87:5d:04:eb:28:ca:98:28:
                    d5:1b:be:fc:b1:91:3e:30:12:12:41:6f:1d:2b:ff:
                    bd:2e:20:d1:26:be:bb:e1:7e:55:bc:85:80:c2:3e:
                    3a:9e:00:d4:fc:b0:94:7e:07:db:af:15:40:e6:e9:
                    7f:f8:30:51:36:10:f5:f8:ba:09:e2:42:30:66:1c:
                    03:ba:e6:16:ca:27:c7:ed:41:5b:1f:6f:a6:9b:8a:
                    be:7a:da:24:de:f0:5b:45:ab:21:a4:30:64:e0:a2:
                    6f:61:16:4e:58:c2:fe:2c:97:3b:a1:5e:d4:56:79:
                    63:07:21:e0:55:f8:87:86:64:d8:6f:f2:7f:00:06:
                    04:be:63:f4:3a:29:a8:15:37:e6:d2:75:e5:55:2d:
                    23:cc:72:19:9f:1c:c5:fe:55:44:5e:c4:d3:bd:18:
                    ae:99:62:f3:0e:42:bb:d6:4b:1a:0e:78:8d:90:d7:
                    b3:42:11:4e:66:31:af:c0:9b:74:a2:27:dd:44:2b:
                    8b:ad:50:20:a9:85:cc:5f:4f:3c:25:20:ff:5e:34:
                    c3:2c:bd:e1:5b:6d:32:70:94:39:63:9d:95:3e:b5:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.20.0/22
                  190.113.88.0/22
                IPv6:
                  2803:5300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264637

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:b7:43:bb:f5:0a:07:aa:57:e1:db:c5:74:34:4f:1e:56:
         6f:58:79:e3:0f:52:e3:a9:0d:af:ce:e6:ea:94:2b:a3:97:4e:
         79:e4:07:a2:5e:df:fc:b0:6b:99:50:cf:d1:a4:b9:b0:8c:ce:
         78:d7:f3:80:d7:83:41:13:f3:60:04:f8:6e:82:af:90:11:c1:
         67:4f:06:f7:c9:4d:9c:92:e0:ba:d3:ef:a1:4d:41:9f:c6:db:
         87:5a:17:e4:23:2c:53:e2:98:59:0e:53:e4:79:df:d9:8a:a5:
         e3:22:c6:34:34:76:a8:60:b7:12:b1:6b:d7:c6:dc:52:cb:b9:
         66:6e:8c:36:1e:cd:64:00:79:37:fb:7a:43:d8:ab:90:20:71:
         95:f4:9e:c7:75:a3:90:14:eb:5e:b3:b4:79:f4:0f:8f:1d:1d:
         28:81:cb:67:20:1b:bf:e0:de:0e:37:c2:91:8c:5e:00:fa:f2:
         ca:f9:d6:e7:84:47:b5:8f:42:43:de:11:a0:4c:40:ae:37:b6:
         a0:b1:9d:1d:67:14:2d:cd:62:3e:0f:93:a4:20:33:94:84:ae:
         7b:97:ba:e3:b7:d6:43:cb:6c:00:a4:44:11:24:76:ec:2a:ab:
         19:fc:59:0f:d2:0d:00:cf:8c:43:d0:dd:d6:29:aa:a4:82:97:
         f9:26:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----