Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.cer
File:                     bb0bc9a633cf9815c2e9ba979ba905b13df6519a.cer (raw, json)
Hash identifier:          pXXrCFO7y7bzTu0v4xKgqTqFztg2tuJbPpumk4MyIT8=
Subject key identifier:   FA:97:B9:E1:07:46:66:16:DD:96:B9:6C:FC:C9:D2:28:06:07:41:F3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7DBAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Nov 2020 13:54:48 +0000
Certificate not after:    Fri 31 May 2024 18:36:42 +0000
Subordinate resources:    AS: 270106
                          IP: 191.241.140.0/22
                          IP: 2803:73e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15195054 (0xe7dbae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 19 13:54:48 2020 GMT
            Not After : May 31 18:36:42 2024 GMT
        Subject: CN=bb0bc9a633cf9815c2e9ba979ba905b13df6519a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:22:2a:61:fb:90:b7:05:f4:ea:c9:3c:74:
                    e4:93:50:e7:a3:21:30:d6:e7:a0:c8:d5:09:e3:fe:
                    84:1e:bd:ef:62:4b:40:73:22:c1:3e:c1:a0:13:e2:
                    8b:e1:b0:5c:13:ec:40:33:16:1b:74:ff:11:13:5d:
                    02:b5:2a:7b:b9:cd:fe:61:1b:af:15:0c:ac:bb:f5:
                    97:d2:7a:5f:5c:e4:5a:91:4c:ca:b2:f4:71:a1:3a:
                    a8:d8:15:62:63:39:57:99:1d:98:48:b3:e4:6a:95:
                    36:50:ae:18:4a:5b:77:83:96:ac:6a:67:3a:ff:8e:
                    22:c8:fe:72:fe:c7:a1:2e:a1:48:1a:c1:19:62:e0:
                    d4:91:f9:fc:52:00:c2:d4:2d:b5:2c:c6:a7:d2:03:
                    18:fc:46:40:7f:0a:a6:b0:50:2d:b3:ff:33:81:a8:
                    38:18:6c:ad:36:a8:e5:97:b4:6b:db:ba:5b:f8:93:
                    22:a4:66:2f:34:58:de:8c:6e:14:51:de:a6:e8:e3:
                    b3:bb:30:0f:b3:42:c4:07:80:42:78:ee:a0:31:0a:
                    83:6a:a2:70:f8:a3:0e:60:94:f0:23:8a:7f:7f:0a:
                    71:98:ec:40:0d:1b:2d:ff:d1:76:9f:4f:31:88:4f:
                    c9:6d:5b:71:8c:60:1b:02:f4:38:7f:17:8d:b0:5a:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:B9:E1:07:46:66:16:DD:96:B9:6C:FC:C9:D2:28:06:07:41:F3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.140.0/22
                IPv6:
                  2803:73e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270106

    Signature Algorithm: sha256WithRSAEncryption
         bc:ef:33:01:21:41:d9:31:54:a3:8b:ca:b6:c0:97:f6:6b:7f:
         0a:e3:26:5f:8d:52:d1:94:77:b4:d1:56:da:f0:60:a0:e5:17:
         1a:77:2b:76:26:f7:fd:e2:28:07:0c:5c:5b:f4:bf:b0:32:79:
         74:fb:4c:e6:a5:0a:d5:d7:15:ed:de:5c:43:ef:28:85:dc:de:
         d9:83:07:7d:60:7f:69:2d:55:3a:57:4e:16:46:2f:cf:ce:45:
         20:96:ea:8b:73:ec:1b:60:6d:1d:6c:c9:7b:94:3f:17:9b:46:
         c5:f5:75:10:3a:54:78:36:e0:07:09:59:8c:b3:39:87:fe:ec:
         e4:de:24:c4:d4:79:f3:6a:a2:96:c5:c5:93:35:f6:bd:1e:01:
         ad:0f:97:8f:62:d2:d9:ab:1e:96:6a:df:66:b1:f8:ad:ce:97:
         5b:c9:bb:30:2c:1f:ea:fb:d1:f4:b4:87:37:f0:97:a5:f5:b9:
         ba:25:94:cc:d1:23:aa:16:9a:3e:f8:3f:b4:68:b4:51:89:5b:
         a4:01:4e:4c:43:28:be:62:3a:2c:a2:fe:2c:c2:ab:d7:30:9d:
         a2:ec:c3:f6:10:a9:6e:c3:1a:d5:59:6c:1e:2e:5f:5b:91:ca:
         3e:41:f4:a7:86:a0:17:f6:77:37:56:d4:58:af:75:fb:b2:5b:
         50:4c:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----