Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.cer
File:                     d9920ef560c886b3a15f2c2a41a3944ccf2a200c.cer (raw, json)
Hash identifier:          DCZKkv9uHQpTF9sKIPpZrW9WP7tQozIQSIwRouEIoII=
Subject key identifier:   ED:20:D9:77:18:FB:F5:C1:D9:CB:1A:A9:B5:E2:80:FB:DE:FF:44:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBFFD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Oct 2020 08:03:24 +0000
Certificate not after:    Mon 01 Jul 2024 17:06:56 +0000
Subordinate resources:    AS: 271781
                          IP: 179.51.208.0/22
                          IP: 2803:2fe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15466450 (0xebffd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 20 08:03:24 2020 GMT
            Not After : Jul  1 17:06:56 2024 GMT
        Subject: CN=d9920ef560c886b3a15f2c2a41a3944ccf2a200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:69:e9:e4:7a:64:ce:62:35:6c:c3:31:83:
                    a6:39:94:a1:21:05:e2:38:ec:f9:f5:bd:19:82:aa:
                    d8:b9:87:1b:a5:0e:cd:4a:4d:be:f4:77:44:ab:e0:
                    e3:54:94:5e:90:3e:2e:ad:e8:54:54:b1:a2:9b:d2:
                    32:6a:b2:e3:c8:f9:1d:d7:8e:e4:1b:06:ac:f3:72:
                    e5:ac:13:6a:a4:c8:0e:ae:f1:bf:5c:8b:f9:aa:b4:
                    7d:4a:4e:55:67:e6:52:54:ed:17:4b:d1:69:11:8e:
                    c7:6e:d4:6c:30:1d:42:87:92:48:9d:bb:62:cd:f9:
                    1f:31:70:a8:c3:0d:98:6b:f9:d1:2e:be:8c:70:7f:
                    d8:a9:7e:ce:27:c8:74:ed:a1:52:4e:4d:37:f3:29:
                    a8:59:a6:db:40:09:b5:46:54:56:46:7f:a5:61:62:
                    d9:4e:78:92:54:2a:81:5b:b8:bc:4b:6e:ec:5c:e7:
                    5d:d6:a8:c5:14:69:13:3c:77:25:e4:61:15:d8:68:
                    1c:cd:66:f8:55:9e:4e:6b:de:17:6f:b2:83:25:dd:
                    0a:62:3f:fe:4a:6f:54:30:9a:03:34:75:10:d6:ae:
                    ec:e2:63:7c:59:40:39:fc:10:45:e1:5e:5c:86:23:
                    c7:83:ad:20:89:fa:de:b0:2f:55:37:97:ad:d1:b9:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:20:D9:77:18:FB:F5:C1:D9:CB:1A:A9:B5:E2:80:FB:DE:FF:44:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.208.0/22
                IPv6:
                  2803:2fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271781

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:95:e3:5d:4a:d5:1b:3c:b8:dd:51:6d:bc:84:b7:a1:e0:
         f5:3d:7c:e0:99:e0:68:59:55:90:0e:d1:60:40:27:b2:75:67:
         a5:be:98:96:5f:37:87:11:9c:4f:36:dd:9a:db:d1:14:f0:ca:
         f7:22:69:0f:32:08:7f:df:29:05:07:9d:a9:00:48:cd:bd:c8:
         d8:44:c9:e1:99:ef:fb:ac:23:8b:62:39:2a:2f:11:13:bb:76:
         16:ac:c6:b6:dd:11:cf:af:8f:64:34:d5:c9:1d:6c:05:d4:14:
         9e:1f:81:03:73:41:bf:dd:6b:ec:b7:3e:db:5a:ce:a4:51:b5:
         4d:ea:74:f7:43:e7:0a:f7:89:3c:c6:a8:ac:dd:7a:24:57:90:
         d3:b7:45:44:49:3f:91:0e:0f:5f:4a:c4:32:36:4e:a5:39:80:
         da:6d:52:d3:07:c2:17:8e:fd:4c:95:b7:24:fd:a3:74:0b:62:
         47:5e:43:46:1a:e9:01:ba:27:93:ed:02:cc:8d:ec:70:de:ca:
         87:7f:4e:d4:28:f9:fe:91:ba:50:ab:77:9b:74:6d:25:3c:66:
         df:48:0f:02:3f:5e:d5:53:e3:47:1f:32:d5:c7:78:ba:44:5e:
         03:62:5d:48:bb:bf:e1:7c:42:17:80:52:ce:a9:03:ae:c3:08:
         bd:77:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----