Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb715446e64862c812107e0525de2355a334a3ad.cer
File:                     cb715446e64862c812107e0525de2355a334a3ad.cer (raw, json)
Hash identifier:          Bj2e2hti8Aa/77qqtUmBhvt8Qekdb+l0iq+1A+chGkQ=
Subject key identifier:   48:81:D7:43:26:37:FD:B3:68:1D:35:4F:80:0A:4C:E0:BE:36:DB:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E33D88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4d337e4-fc44-4587-a9ee-c3ef67e9c422/cb715446e64862c812107e0525de2355a334a3ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4d337e4-fc44-4587-a9ee-c3ef67e9c422/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 Jul 2020 18:48:08 +0000
Certificate not after:    Fri 03 May 2024 21:50:35 +0000
Subordinate resources:    AS: 270050
                          IP: 191.37.252.0/24
                          IP: 2803:2de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14892424 (0xe33d88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  6 18:48:08 2020 GMT
            Not After : May  3 21:50:35 2024 GMT
        Subject: CN=cb715446e64862c812107e0525de2355a334a3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:f9:ef:f0:29:8d:69:89:e1:e8:21:ec:dc:
                    b2:b4:da:12:6d:3c:d6:46:bd:18:1a:98:08:13:4f:
                    7f:aa:0c:04:db:77:fc:15:9e:ea:50:f7:76:fe:08:
                    a2:4b:81:fa:3e:9c:c8:db:35:2e:7e:45:85:a2:5d:
                    63:d1:91:47:f5:e4:45:af:56:8b:25:3d:68:7f:1b:
                    fe:72:90:9e:3d:bd:c8:c1:cb:9d:f1:c9:01:78:b0:
                    c7:cf:2f:cd:d5:ca:eb:2f:e3:73:b5:fd:aa:a4:2f:
                    6f:91:3e:f2:6c:fe:b8:73:4c:1e:4e:18:4e:26:bf:
                    97:0a:4a:97:e5:74:43:79:4e:e7:c1:9c:fa:c6:21:
                    da:16:21:73:73:45:d6:07:b5:69:56:89:ce:40:1c:
                    d4:63:71:70:24:e8:2a:37:b3:c1:f0:78:06:25:dd:
                    2b:45:ed:76:d6:21:cc:04:49:2f:2e:36:72:2d:82:
                    8a:11:f3:a3:9b:bf:6c:03:ee:83:fe:43:c8:4f:69:
                    ef:15:ca:4f:ad:72:bd:2c:c5:f3:47:18:d0:47:b6:
                    3f:7d:1d:0e:32:50:13:0a:94:90:1d:3a:df:cc:b2:
                    4a:ac:09:1c:ba:64:2c:59:f0:e2:0a:2a:74:43:61:
                    22:f2:58:1f:42:01:45:89:c9:24:b5:68:5c:69:29:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:D7:43:26:37:FD:B3:68:1D:35:4F:80:0A:4C:E0:BE:36:DB:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4d337e4-fc44-4587-a9ee-c3ef67e9c422/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4d337e4-fc44-4587-a9ee-c3ef67e9c422/cb715446e64862c812107e0525de2355a334a3ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.252.0/24
                IPv6:
                  2803:2de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270050

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:d6:a5:6f:4e:13:f6:d3:bc:a5:66:0d:18:6b:a8:b2:ee:
         3d:cb:4c:51:08:66:f3:52:b2:c4:af:fb:11:db:93:f4:ed:07:
         20:9f:9e:ab:2f:66:8e:c6:09:dd:bd:21:3d:ea:73:8b:f0:42:
         f3:86:ac:03:28:a9:d9:10:f2:81:68:ea:cc:d8:ea:f8:0d:7e:
         5a:f9:18:7d:a4:35:bb:76:49:a0:e6:2a:74:0a:5f:c1:f4:82:
         8f:37:38:14:4d:ec:05:ae:93:9e:d3:31:14:ec:bf:c6:b5:5d:
         31:fc:4d:06:e1:ea:78:18:63:11:71:f4:c6:6b:a0:51:1c:1a:
         75:f2:f1:d3:a8:49:ef:a2:6e:69:18:cc:05:e8:87:a2:d7:62:
         47:ab:63:28:73:2f:d9:89:21:3b:a4:d4:27:f1:4a:50:fc:62:
         f1:db:6e:ad:99:aa:a1:85:05:ac:69:21:70:8d:13:a6:63:83:
         c7:52:ae:9d:cf:fc:d0:8b:a5:82:c4:02:b8:fd:8d:fe:fe:59:
         a6:61:d0:01:51:e9:2d:27:59:b1:59:bd:53:82:5c:cb:6f:1e:
         64:d8:84:e3:73:2c:25:92:43:ce:4d:13:7d:92:72:05:a0:45:
         e5:7e:d6:65:68:c3:4b:84:ee:2e:60:c0:04:44:84:88:3a:eb:
         a6:f0:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----