Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer
File:                     bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer (raw, json)
Hash identifier:          O0VbQAna3w3rcdwba/PadaQS6+d1qiYSMGIvBKcoT1Y=
Subject key identifier:   EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8DAD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Nov 2020 22:09:43 +0000
Certificate not after:    Thu 10 Oct 2024 15:24:07 +0000
Subordinate resources:    AS: 271818
                          IP: 181.233.60.0/24
                          IP: 2801:12:100::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16308948 (0xf8dad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 22:09:43 2020 GMT
            Not After : Oct 10 15:24:07 2024 GMT
        Subject: CN=bb85d8416a3a6cc72fec0191c797cfa9f558ee3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:89:da:70:31:05:63:b9:6f:31:95:b4:9c:
                    00:74:cb:66:50:93:20:94:82:ed:e6:7f:47:89:39:
                    d5:09:1c:f1:52:94:72:12:94:94:22:bf:63:ab:75:
                    a0:8b:87:5f:d7:0a:45:34:1e:b1:e6:ef:8b:a0:e8:
                    92:16:2b:43:14:78:68:5d:f8:31:a1:60:ef:5a:9e:
                    ac:21:da:1c:e5:cb:54:27:95:10:5a:78:84:21:58:
                    b5:ba:04:1f:7a:e8:ec:27:ab:f5:c5:f5:8e:db:a2:
                    54:80:a1:24:a2:4f:d4:6c:ab:38:5d:e9:f2:59:bd:
                    a1:98:96:c5:4f:e9:25:e9:4d:84:fb:20:7f:91:8a:
                    04:01:e9:c1:7e:65:63:bf:83:98:66:b1:31:a7:5f:
                    c9:15:1a:ef:dd:70:a5:24:af:9e:90:2c:c0:67:2a:
                    23:53:ef:fc:e4:e8:cd:d6:8a:ba:18:b0:b3:54:18:
                    7e:e2:a9:39:f0:fd:a1:84:94:7f:9b:bb:cf:2f:d2:
                    81:fc:49:31:11:25:25:4d:cd:a3:9d:79:30:40:a9:
                    76:da:73:9a:93:70:3a:2f:4c:7f:01:c4:02:51:c4:
                    6c:58:79:35:4f:6b:15:04:9f:cb:7a:ce:b2:92:35:
                    88:54:5f:9e:dc:d1:8c:86:dd:e4:dd:c5:7f:29:e3:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.60.0/24
                IPv6:
                  2801:12:100::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271818

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:32:9c:69:ae:13:82:76:ed:40:a0:4f:89:28:d1:c3:c5:
         4f:27:a8:c2:45:9a:25:87:90:d4:7e:d3:75:dc:23:cf:b5:90:
         5f:30:0d:28:d6:eb:6b:f7:f7:bd:81:ad:1b:63:9f:ca:a4:05:
         6e:93:db:bc:1b:dc:71:7a:f5:ac:d8:1d:0b:28:a2:3d:c0:7f:
         14:2c:38:67:ee:ab:9b:12:48:4f:c5:89:77:24:59:c0:ea:af:
         07:60:2f:e5:bd:3b:dc:fe:71:5f:96:7b:ec:43:bd:58:f1:e9:
         d5:4c:02:a1:81:b4:80:87:2f:7e:f2:56:e8:29:06:c6:6a:ac:
         97:14:ea:2d:fe:2d:aa:50:15:5c:95:5c:78:5e:19:e6:eb:75:
         6b:e9:5d:13:6f:da:2f:92:41:f6:2c:36:a1:0c:d2:26:0c:2d:
         dc:4e:7f:08:97:54:09:9e:5a:e5:22:1c:53:5c:73:e5:b7:1e:
         f1:0e:fd:7c:00:53:8d:73:be:34:af:e0:22:fc:aa:f0:37:a7:
         47:63:db:ff:e9:d7:cb:d8:b5:2f:9c:0b:3d:d5:25:d0:dd:f5:
         69:68:22:57:9c:d5:1c:b8:a0:47:1b:ab:bd:37:fb:92:63:c1:
         6a:ae:9e:68:e2:ea:45:83:1e:dc:cd:96:08:03:df:7b:0e:7f:
         22:68:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----