Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d86a1849e4f865bf8f274aee01a9cd239ffb4dd6.cer
File:                     d86a1849e4f865bf8f274aee01a9cd239ffb4dd6.cer (raw, json)
Hash identifier:          JtA3woR+e0LhSuwnJBdH8Y1EGQjK7dcJAwU8kHCTTMk=
Subject key identifier:   2F:FA:F8:65:65:F1:02:5C:4C:4E:7D:B0:B8:5F:D3:C1:BF:D7:16:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8E41B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8c2ea2d2-a119-448f-a27f-8ff5c5e598d8/d86a1849e4f865bf8f274aee01a9cd239ffb4dd6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8c2ea2d2-a119-448f-a27f-8ff5c5e598d8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Oct 2020 10:25:34 +0000
Certificate not after:    Thu 10 Oct 2024 16:07:47 +0000
Subordinate resources:    AS: 267759
                          IP: 45.167.18.0/23
                          IP: 2803:ada0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16311323 (0xf8e41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  1 10:25:34 2020 GMT
            Not After : Oct 10 16:07:47 2024 GMT
        Subject: CN=d86a1849e4f865bf8f274aee01a9cd239ffb4dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:1a:d3:cd:e6:08:6f:00:ee:f0:90:75:a7:
                    a6:bb:d2:8c:80:cb:2b:e9:e4:bf:4f:1c:c1:bb:69:
                    d3:3b:43:3d:16:22:4c:ad:09:da:a5:09:fe:62:fb:
                    35:73:6c:c1:ce:9f:fb:42:42:f1:cd:29:30:56:4f:
                    f5:40:0e:03:7f:ae:9f:58:2f:a0:19:7e:52:f3:c7:
                    02:a2:1a:2f:36:68:0b:2d:71:1f:bd:ac:8b:9e:da:
                    73:d1:23:54:8c:b7:89:07:44:78:62:44:15:86:12:
                    7a:69:66:23:ba:bc:aa:c6:9f:8e:49:05:28:07:48:
                    f5:15:a6:8d:6b:16:44:43:5f:3c:14:ae:ce:d5:6e:
                    cc:c9:7f:0a:f3:d8:dc:22:94:66:3f:08:b6:23:5e:
                    3e:c8:ad:aa:20:7b:4c:bd:29:8a:92:34:45:4f:ff:
                    32:22:fc:92:86:48:88:2a:dd:86:50:b6:0b:f5:2b:
                    09:6c:21:27:af:ec:c3:88:7d:19:6d:8a:3f:d3:bd:
                    2f:59:81:33:69:f4:44:00:de:11:d7:54:6f:94:d4:
                    fe:d0:bd:e4:5c:46:0d:f4:cc:aa:1c:ab:5b:0f:be:
                    0d:38:00:e2:18:3a:64:c3:ac:6e:79:a2:54:cf:9a:
                    2e:89:19:ba:57:05:15:91:e6:5e:7a:9a:ad:e3:eb:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FA:F8:65:65:F1:02:5C:4C:4E:7D:B0:B8:5F:D3:C1:BF:D7:16:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8c2ea2d2-a119-448f-a27f-8ff5c5e598d8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8c2ea2d2-a119-448f-a27f-8ff5c5e598d8/d86a1849e4f865bf8f274aee01a9cd239ffb4dd6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.18.0/23
                IPv6:
                  2803:ada0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267759

    Signature Algorithm: sha256WithRSAEncryption
         a5:df:5d:cd:5f:40:5c:dc:11:33:52:65:db:cf:42:c0:51:9f:
         a9:16:a8:2f:24:74:6a:54:a3:e9:dc:00:12:64:30:69:5b:5d:
         f9:f3:d3:68:f0:19:23:ef:6a:56:1c:a7:ab:83:ba:a0:ec:f5:
         13:90:34:24:57:8c:4c:c6:3d:5d:80:c9:15:d4:81:b8:0d:ab:
         38:06:12:26:73:84:81:25:e8:12:f3:ad:7f:b9:54:28:5c:ce:
         9c:c0:30:31:67:3d:0f:88:16:4e:06:20:73:89:81:f2:3b:5f:
         f3:ec:a8:82:4b:e7:33:71:2c:b4:ae:96:52:87:fb:c7:a9:90:
         1f:a1:42:cd:58:b5:b7:35:ef:6a:9b:f8:53:5a:e9:3d:e2:5e:
         ef:fe:99:57:0c:38:2f:f3:d9:6e:75:89:11:41:ce:80:89:2d:
         64:b1:05:4d:30:4b:56:f0:72:30:77:76:be:73:b9:90:67:23:
         ab:8a:7e:02:6d:20:41:5e:ad:42:bc:af:fc:f9:72:c0:c4:84:
         03:d1:6d:f6:d0:30:32:51:06:75:19:28:c6:63:17:61:51:59:
         79:32:a7:19:8f:61:7f:e9:ed:bd:ca:91:38:49:0c:6a:e7:57:
         23:ad:f5:a7:d5:20:71:bc:7e:dc:ba:d5:39:5a:62:28:c4:18:
         09:f0:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----