Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcae9c743eec0954d88147787d8e521760114b89.cer
File:                     bcae9c743eec0954d88147787d8e521760114b89.cer (raw, json)
Hash identifier:          k4PIx6jNwwWxgsuqUot1Me5ac6hJfE81hDbPJTpPsrM=
Subject key identifier:   F8:EA:89:3C:CE:8D:25:CF:80:FD:09:5C:AC:C8:87:F1:C8:17:A8:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E091C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/bcae9c743eec0954d88147787d8e521760114b89.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 12 Jul 2020 15:42:59 +0000
Certificate not after:    Fri 05 Apr 2024 21:04:29 +0000
Subordinate resources:    AS: 270026
                          IP: 189.127.166.0/23
                          IP: 2803:f9e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14717380 (0xe091c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 12 15:42:59 2020 GMT
            Not After : Apr  5 21:04:29 2024 GMT
        Subject: CN=bcae9c743eec0954d88147787d8e521760114b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:e5:1e:7f:00:04:15:a4:ab:2e:fa:de:60:
                    2c:69:05:73:64:66:9a:bf:8e:2a:8f:91:3c:65:ba:
                    ea:11:37:f4:60:63:71:39:5a:99:fe:69:27:6c:bd:
                    1a:c5:a5:78:81:53:a2:a8:fc:c9:0d:94:6e:bf:1e:
                    25:9f:86:02:be:d8:d7:62:25:21:fe:14:dd:f1:92:
                    d3:ef:7c:f8:af:e6:c0:37:63:f2:4b:64:6e:a0:4b:
                    31:a3:37:46:62:64:12:b6:77:3c:00:b6:c5:85:0e:
                    da:a6:77:aa:ba:59:cf:c5:23:46:ab:66:0f:57:36:
                    d2:a0:ba:b3:dd:4c:1d:57:6b:44:bb:d1:b9:af:ba:
                    65:96:4f:d2:d0:0f:82:49:13:25:03:ca:70:ac:d0:
                    a2:2f:4c:b3:d0:6c:dc:14:28:f7:69:7a:2b:43:60:
                    7a:5c:65:ff:7f:db:32:01:a2:cc:9f:91:c0:77:b6:
                    1b:f8:9f:d9:71:37:01:dd:a8:6c:0c:04:6a:26:91:
                    41:8d:90:93:fe:65:57:64:dd:b2:0a:41:87:31:e6:
                    f8:db:f3:c2:cd:a1:de:2b:30:66:14:4e:28:2b:34:
                    8b:5b:8a:c6:2b:2b:fd:84:57:90:35:80:50:c4:6a:
                    3a:55:cd:6a:4a:ba:78:37:da:87:54:2c:ed:fa:52:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:89:3C:CE:8D:25:CF:80:FD:09:5C:AC:C8:87:F1:C8:17:A8:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/bcae9c743eec0954d88147787d8e521760114b89.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.166.0/23
                IPv6:
                  2803:f9e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270026

    Signature Algorithm: sha256WithRSAEncryption
         76:28:80:48:bd:7a:86:a2:c1:4e:7a:60:22:2d:f1:0a:70:73:
         f5:84:8f:97:2d:6a:2b:5b:23:c3:a4:3a:ad:0f:50:e4:82:61:
         2e:c3:1e:e8:8a:b1:7e:ba:23:9a:b9:81:db:38:c0:06:96:ca:
         6d:28:19:92:c9:b7:56:68:a7:45:14:99:bf:47:04:cd:9d:51:
         5b:5c:08:47:a8:64:da:ef:86:e4:67:82:f9:b4:bc:46:ed:87:
         7b:d5:71:12:89:ed:e0:d1:97:c3:d3:d2:24:60:e2:44:f4:2f:
         dc:37:b9:9c:d7:7b:a4:e9:66:a8:6a:a8:25:95:5c:7c:a2:9d:
         8c:29:b4:91:f5:14:d0:73:78:d0:50:f0:84:92:20:29:5a:8b:
         66:45:7c:72:ae:f2:7f:3f:e0:18:76:c0:95:70:93:3f:c0:83:
         35:1c:ea:e2:8e:a0:9d:74:f1:24:68:4d:b7:8a:45:3d:3f:d2:
         8a:19:7b:48:55:ed:90:a4:86:35:17:c1:f8:07:58:5c:a0:5a:
         88:fa:c2:4a:d2:e0:3f:f5:60:7f:69:ca:92:42:8c:ac:f8:3c:
         34:7b:b7:a6:8a:36:73:0b:1b:2e:bb:5a:30:df:ce:f2:8d:85:
         86:54:df:09:df:63:59:2a:e6:65:3c:03:70:24:5b:55:40:4c:
         67:b3:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----