Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb6445348fda58c2a60a9db541fbbec77e7a759a.cer
File:                     cb6445348fda58c2a60a9db541fbbec77e7a759a.cer (raw, json)
Hash identifier:          LHUBo6qZB7FT/1mLyrAbtC6roUiB84yv+gWhEQer3Po=
Subject key identifier:   A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDC35B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/cb6445348fda58c2a60a9db541fbbec77e7a759a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Sep 2020 19:59:18 +0000
Certificate not after:    Tue 05 Mar 2024 17:35:36 +0000
Subordinate resources:    AS: 263230
                          IP: 179.0.224.0/19
                          IP: 2803:f680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14533467 (0xddc35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 16 19:59:18 2020 GMT
            Not After : Mar  5 17:35:36 2024 GMT
        Subject: CN=cb6445348fda58c2a60a9db541fbbec77e7a759a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:51:ea:16:0e:ea:63:1f:17:30:fa:55:a2:
                    1d:0c:74:e8:8c:2c:ad:87:b1:08:a4:0a:cf:cd:49:
                    ec:a6:b7:35:9d:79:b1:37:22:b6:78:c4:df:af:7a:
                    fa:39:fb:17:b3:3b:3b:c6:37:34:c7:a4:3d:c9:ac:
                    13:2f:a7:23:a7:fe:45:a8:9b:ac:14:9d:77:24:c5:
                    71:14:85:64:f6:97:61:ab:c6:7a:93:5e:a8:d3:6c:
                    0c:64:e6:15:72:82:2f:30:1f:f3:e7:6a:9a:0a:a5:
                    c7:bd:3e:77:ec:c1:39:f5:7e:fc:f9:a9:1b:27:59:
                    75:0e:a9:e3:ab:be:a7:d1:53:61:3b:c5:fe:cb:47:
                    0e:a8:f1:1e:96:b3:b3:3e:ce:38:52:ea:6c:d4:33:
                    3b:ad:3e:85:51:c5:80:b8:e2:b6:74:88:44:25:99:
                    82:22:16:56:dc:ed:8c:fe:54:1c:35:4d:9a:e6:ca:
                    bd:7d:e1:7b:74:87:0e:a2:b7:2c:68:b1:48:28:d4:
                    64:42:42:d2:37:0f:c4:ea:52:1d:ca:eb:7c:4c:b4:
                    9f:7d:63:ad:f9:79:6b:cf:c2:2c:e8:c4:6f:c9:0b:
                    fc:9d:5d:f2:f8:13:8a:f9:12:02:9c:01:f0:25:0c:
                    28:85:aa:1a:38:0c:d0:56:92:08:64:02:31:ac:ab:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/cb6445348fda58c2a60a9db541fbbec77e7a759a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.224.0/19
                IPv6:
                  2803:f680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263230

    Signature Algorithm: sha256WithRSAEncryption
         91:b5:80:35:af:9a:01:42:d2:74:6c:c9:49:9f:2f:c1:0a:d8:
         da:c1:9b:08:58:46:f6:3a:31:07:30:1d:93:94:f6:d8:5f:bf:
         dc:b7:ee:a8:0e:fe:05:b1:c8:13:90:b1:19:b2:96:31:37:29:
         14:76:4b:5f:2f:2a:f0:0b:48:12:2d:8a:94:28:17:2b:f8:a7:
         9f:ed:58:3e:6d:d5:93:71:e2:f2:9d:75:65:b8:77:6e:8b:e8:
         d7:48:53:92:1e:c9:16:71:9c:13:53:00:3a:83:ae:4a:ae:05:
         1e:18:85:30:19:0a:39:d9:3c:2d:2e:15:4b:32:7d:dd:d3:84:
         39:1b:df:d5:3c:bb:c2:48:cc:a1:ba:68:bd:21:0d:3f:91:29:
         ea:61:0a:da:5f:60:ba:69:aa:7c:9e:f4:30:f7:48:95:64:f1:
         c0:eb:c5:46:d4:1a:5e:e3:7e:54:48:2a:05:3e:25:7c:e2:a3:
         b8:8a:08:c1:61:90:01:87:5d:fc:ed:ec:23:49:c5:0c:c1:f2:
         60:3c:0c:0b:92:6a:15:03:23:3f:fe:e3:dd:a0:50:f8:3b:4f:
         67:1e:0a:25:b5:e1:d3:29:75:53:0a:25:06:23:4e:d0:51:ac:
         6c:c9:43:b4:dc:ad:55:83:6b:88:dc:ed:fc:25:94:4a:7e:84:
         bb:33:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----