Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a8ae11894bd66edd7f3008a8c1f68deb801687.cer
File:                     d9a8ae11894bd66edd7f3008a8c1f68deb801687.cer (raw, json)
Hash identifier:          vzeGangvj/1NTXnq9+DSKG47QfmC6NR6YsVwIW2OSFg=
Subject key identifier:   30:CD:F8:9E:B8:A9:A1:6B:01:33:CB:28:EB:9A:FA:B4:0E:99:30:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D74B4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/d9a8ae11894bd66edd7f3008a8c1f68deb801687.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Nov 2020 20:55:43 +0000
Certificate not after:    Sat 16 Dec 2023 16:54:19 +0000
Subordinate resources:    AS: 52354
                          IP: 190.14.32.0/22
                          IP: 190.122.144.0/20
                          IP: 2803:ad00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14109518 (0xd74b4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 20 20:55:43 2020 GMT
            Not After : Dec 16 16:54:19 2023 GMT
        Subject: CN=d9a8ae11894bd66edd7f3008a8c1f68deb801687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:2a:bb:1a:41:87:05:98:9a:e9:fa:ef:c9:
                    a3:86:18:b2:d5:36:3b:53:a8:db:37:8b:70:28:ad:
                    48:87:8b:58:2a:9e:69:60:18:47:41:2f:fe:0b:d2:
                    77:22:e4:d6:60:17:1c:e5:6f:62:0f:6f:e5:2c:4b:
                    64:5f:63:47:3b:49:4e:97:6d:f1:35:65:d9:f1:38:
                    0f:d8:2c:d6:d7:73:a1:3b:d6:06:10:e8:f4:11:95:
                    b1:c3:fc:45:f4:77:4f:e5:a0:1c:14:a0:3b:fa:df:
                    e1:98:f1:10:ef:fe:da:a1:99:53:d0:df:04:4c:9b:
                    13:84:62:6b:3f:ed:02:42:80:0b:6a:fb:b5:f5:e2:
                    8a:4e:b4:f7:38:99:a9:96:3a:97:9c:9a:48:e2:57:
                    bb:f3:91:00:58:2e:9f:a7:14:53:50:5e:6e:62:ce:
                    e3:bf:de:2d:5e:a9:0c:1f:50:c3:2b:8b:e5:52:a2:
                    a9:d5:dc:38:c3:74:d7:45:3a:31:f0:23:df:8a:1c:
                    67:4b:2f:a4:b8:aa:be:56:f3:fc:59:a9:89:47:f7:
                    3a:f0:d2:9e:fa:3e:2e:7f:f8:5a:c4:3c:50:c6:c9:
                    09:c8:bf:87:15:13:84:49:11:97:3f:7f:e8:fd:a5:
                    0f:4b:d7:60:48:ae:aa:04:1f:ad:27:94:8b:78:39:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:F8:9E:B8:A9:A1:6B:01:33:CB:28:EB:9A:FA:B4:0E:99:30:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/d9a8ae11894bd66edd7f3008a8c1f68deb801687.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.32.0/22
                  190.122.144.0/20
                IPv6:
                  2803:ad00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52354

    Signature Algorithm: sha256WithRSAEncryption
         ae:09:f4:62:05:20:b1:73:db:61:15:bc:ab:01:14:ce:6a:df:
         6c:d3:f8:ca:ed:df:68:c8:68:51:78:de:4b:6c:e4:ad:ea:bd:
         38:f8:77:76:a8:96:78:ee:a4:9f:ed:87:e4:9f:3a:e8:f2:e0:
         ee:87:84:b7:3d:7d:b7:eb:3a:a6:78:be:ae:ec:cc:99:90:32:
         c3:29:ab:ed:e7:63:64:87:3c:5d:d2:2f:20:cb:39:9f:8a:e6:
         ed:41:48:36:c4:94:60:30:77:a1:9b:66:11:63:29:e2:7a:20:
         da:35:d7:0e:5b:81:21:5f:2e:61:47:33:04:c1:9c:df:5a:44:
         45:64:23:df:95:25:87:e1:47:07:e8:ed:3b:f9:b6:f5:64:27:
         5f:3c:44:27:33:95:c0:d8:8d:fd:0c:9b:7d:4d:2b:50:f6:4a:
         0d:65:b1:cc:59:f6:9c:4e:02:95:25:79:2c:62:34:25:81:a3:
         7c:a8:df:1b:f9:50:5f:46:fc:87:39:2d:b0:f0:0c:cc:f2:4a:
         2c:9d:2c:66:bd:24:17:2a:9b:ed:f3:eb:89:5c:72:e0:37:4e:
         7e:4d:37:a7:84:aa:8d:8d:7e:d7:bf:bf:07:15:ac:4f:5d:46:
         d9:8d:d5:0c:a2:18:5c:ed:94:1a:61:ef:e9:0f:8d:56:16:f9:
         a4:ce:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----