Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5180db106b417933418eb32a3631359412404cd.cer
File:                     b5180db106b417933418eb32a3631359412404cd.cer (raw, json)
Hash identifier:          /x/CKaZ3X7ZP8Tfp4YmrXd7vF6/SMins/qlgzkzwYIY=
Subject key identifier:   84:30:AC:F1:2D:4E:C7:C0:82:85:AC:72:E4:A8:AB:97:1E:9B:87:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA4D28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/b5180db106b417933418eb32a3631359412404cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 13 Jul 2020 12:38:44 +0000
Certificate not after:    Mon 21 Oct 2024 16:14:16 +0000
Subordinate resources:    AS: 266680
                          IP: 45.229.28.0/22
                          IP: 2803:520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16403752 (0xfa4d28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 13 12:38:44 2020 GMT
            Not After : Oct 21 16:14:16 2024 GMT
        Subject: CN=b5180db106b417933418eb32a3631359412404cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:df:d9:b7:ee:b2:86:34:7d:e1:b3:66:5f:70:
                    9b:8c:97:24:8c:c5:17:f5:c3:a1:83:9c:59:3c:b8:
                    14:14:15:61:83:1e:e1:f9:59:7f:38:f1:bb:4b:d2:
                    a1:25:63:5c:14:49:e0:27:25:e1:be:72:6b:03:31:
                    a9:d0:76:86:4e:5f:35:9b:4e:b7:19:62:1d:1d:96:
                    a6:31:0e:be:71:bc:e7:53:11:d4:c9:c2:5f:ed:72:
                    aa:06:f4:8f:8f:18:6a:22:7d:ab:e7:53:db:08:bb:
                    b2:37:b0:fa:92:b5:f3:bd:35:07:cd:65:94:d7:31:
                    7e:39:df:f7:92:14:4a:c5:27:49:2a:3e:7e:44:77:
                    62:e3:f3:28:c5:07:e5:ba:79:0f:35:5e:4b:19:81:
                    83:85:ce:ad:b3:da:28:63:19:21:be:4b:30:90:8c:
                    98:cd:34:22:7a:8f:e9:5c:38:e2:59:1f:ab:9f:24:
                    a0:af:b9:99:38:db:48:85:76:c1:c1:20:18:47:b0:
                    ba:9c:58:84:44:5f:7a:8b:18:6c:e6:2e:b5:e0:a4:
                    c8:24:70:6a:a6:8c:14:0a:b6:1c:8d:c2:7f:d6:ef:
                    dd:af:20:84:05:ab:04:dc:a9:19:1a:e7:22:b3:f6:
                    6b:c5:fe:22:4a:d4:1c:d2:04:ec:5b:97:20:34:14:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:30:AC:F1:2D:4E:C7:C0:82:85:AC:72:E4:A8:AB:97:1E:9B:87:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/b5180db106b417933418eb32a3631359412404cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.28.0/22
                IPv6:
                  2803:520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266680

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:cb:74:25:62:ec:9a:a3:2d:b6:69:b4:31:c4:c7:0d:2b:
         6e:a6:7b:9b:a3:ab:1c:ca:d5:86:59:7f:0a:4e:96:5a:88:6f:
         b8:9d:f6:47:f7:3a:3a:48:70:15:d7:b9:32:2f:4c:39:cd:bb:
         c1:eb:fb:a0:c7:66:f7:b6:f4:ff:f0:b6:27:aa:0a:be:5a:3a:
         85:b2:e8:0a:ad:3a:81:d1:2c:0e:ad:41:c0:07:6b:78:ea:95:
         4e:db:0f:2c:ad:5b:1c:92:6f:5f:61:ca:8c:cb:96:f7:56:c5:
         4b:19:15:8a:14:f4:21:ba:3f:b0:00:c7:6b:89:42:26:6b:de:
         16:2c:a5:7d:9f:5d:12:bf:80:e3:13:2c:e7:a1:a0:7d:81:bb:
         e0:a6:78:49:da:0d:b9:05:62:f2:0f:8b:c1:0d:59:b0:8f:53:
         47:45:ce:bf:35:3e:a8:b8:98:f4:4a:6e:bc:f7:21:ce:c1:bc:
         17:25:f5:4d:c5:3f:a3:3d:83:14:e0:c2:7c:c5:0d:e0:58:b6:
         d9:e4:49:9a:7e:61:b0:53:b3:b0:b8:c5:d9:90:b8:b2:d6:06:
         a2:ff:20:d2:3c:89:7e:b6:d0:2c:6b:f8:68:3c:53:90:a4:57:
         b9:5a:4f:56:d6:da:49:e7:e1:56:36:c0:ab:0d:dc:1b:bc:4c:
         bf:de:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----