Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer
File:                     b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer (raw, json)
Hash identifier:          97UtbuZborQbxphtcUi6fSUTRgN7ipKpYyU9TBoXhgQ=
Subject key identifier:   FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1AD23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Aug 2020 20:19:05 +0000
Certificate not after:    Tue 16 Apr 2024 15:00:00 +0000
Subordinate resources:    AS: 16592
                          IP: 190.5.128.0/19
                          IP: 2803:9200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14789923 (0xe1ad23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 28 20:19:05 2020 GMT
            Not After : Apr 16 15:00:00 2024 GMT
        Subject: CN=b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:6c:64:25:0e:8b:24:08:fe:df:f5:53:97:
                    66:d5:b1:a1:b1:c1:15:cb:b3:94:3f:62:bd:8f:e2:
                    7a:11:c5:84:87:86:49:05:c5:62:8c:0c:21:90:b8:
                    a8:58:70:8b:63:18:4a:af:4b:66:94:d8:51:3e:e0:
                    80:2c:2c:aa:fe:49:7e:d2:f4:c6:4c:7b:b0:ab:3e:
                    26:8c:32:5e:24:3d:a5:fe:81:ad:a8:62:cb:b2:49:
                    f4:25:71:80:6f:7c:b7:47:fe:4a:4f:40:49:6d:c4:
                    ed:9f:41:1d:dc:62:8a:c3:ee:cc:23:e4:56:37:1f:
                    83:37:2c:a6:26:a2:76:af:3c:1d:c8:9d:5a:7c:dd:
                    e9:b6:87:24:c5:74:e7:1d:03:b3:6c:88:f0:79:14:
                    cb:54:34:de:33:f5:1c:99:e3:f1:9e:87:31:b0:e8:
                    a7:8f:df:1b:d4:70:62:c0:6d:c5:e9:c8:61:69:7d:
                    e9:32:ec:fb:34:a7:d8:27:1e:11:04:22:3e:71:13:
                    88:30:68:17:d7:81:90:5c:ec:af:5b:13:fb:3b:42:
                    43:62:d5:0c:7b:25:fa:a4:d6:36:f7:06:0f:56:d3:
                    e8:7f:35:c6:3f:9a:a5:7a:c1:c6:df:c7:fe:62:72:
                    98:ab:a6:05:0d:0f:e2:74:dc:9d:09:cb:1f:97:5a:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.128.0/19
                IPv6:
                  2803:9200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16592

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:d6:02:fa:6b:b2:70:50:73:62:8b:a7:6f:b0:b0:0e:7d:
         4c:27:bd:e8:87:2f:98:6c:4a:75:eb:c1:e1:4c:5a:e3:02:81:
         da:26:33:ae:6f:41:a3:e9:c4:a9:0b:f2:28:cc:b1:37:db:bb:
         be:51:95:f7:25:c3:ad:97:1f:3f:40:e3:6b:2e:6b:f0:12:a7:
         16:fe:9c:62:1d:ce:55:57:50:65:03:5d:92:bf:de:2b:b7:b8:
         51:94:c1:4e:b8:31:72:e6:3e:d8:1e:12:3b:25:d8:6c:6f:9f:
         4f:94:d4:ce:88:29:12:38:22:60:9b:a3:72:cd:71:2e:fb:36:
         8f:f7:d5:91:d1:10:01:68:50:24:2b:f5:a2:a8:95:7b:a0:81:
         12:28:88:53:e1:25:6a:d5:bf:dc:fe:16:49:b7:fa:ee:8a:95:
         7f:91:bf:a1:7a:54:90:a4:af:68:40:45:01:d3:4b:a8:b1:ce:
         d2:73:97:a5:db:4b:61:75:d4:7a:d4:14:e8:ac:a4:68:52:82:
         a8:6c:22:03:bb:b5:0a:ba:1b:54:74:87:76:2b:00:b4:75:99:
         5f:ff:51:52:7f:05:32:f4:35:15:e4:20:a5:a4:9f:76:e4:b2:
         73:da:6d:66:c6:b3:8f:a4:35:ac:88:77:9d:5f:85:3d:de:8c:
         92:36:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----