Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9df42accb42ae0dc974df4ee3b46e48d9105526.cer
File:                     d9df42accb42ae0dc974df4ee3b46e48d9105526.cer (raw, json)
Hash identifier:          EsepFeSZq33ZeZX9Pmh7lphDIJzirRpTv0xOSMT1H9A=
Subject key identifier:   B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F13A67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 Jul 2020 14:48:14 +0000
Certificate not after:    Sat 10 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 262259
                          IP: 190.99.112.0/22
                          IP: 191.102.16.0/20
                          IP: 2803:6100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15809127 (0xf13a67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 27 14:48:14 2020 GMT
            Not After : Aug 10 06:00:00 2024 GMT
        Subject: CN=d9df42accb42ae0dc974df4ee3b46e48d9105526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:8e:55:ee:ea:f4:35:7c:d0:e0:fa:b2:c0:
                    8a:24:d2:07:bb:fe:db:c9:75:73:b8:98:85:33:b7:
                    92:d3:02:68:0f:b8:11:c2:7e:45:28:ab:7c:75:8d:
                    13:54:e9:07:54:20:f6:f9:b0:77:5c:c6:50:b9:51:
                    fb:1e:41:13:f1:a1:a0:c5:19:37:27:36:d4:24:88:
                    22:ea:2d:5e:c7:2e:b6:d7:49:41:a1:32:e4:12:0a:
                    c6:69:68:d2:71:59:a6:3f:8c:8c:1e:a0:a2:2f:b5:
                    f1:1c:4e:d3:d5:dd:90:9b:e8:89:80:6c:83:30:1a:
                    95:27:84:e8:1e:b0:73:10:07:26:0a:ca:03:43:66:
                    33:03:97:b9:e1:cf:90:e2:a6:d8:36:ce:6e:d6:e7:
                    5a:ea:b6:ba:77:c2:db:dc:25:99:b1:20:51:31:54:
                    b3:c1:2a:b1:5a:cf:12:17:32:d3:3c:ce:0a:e8:73:
                    a7:da:e3:c4:81:42:29:71:26:19:82:2d:c9:ec:ad:
                    d3:61:cd:3e:92:67:06:d9:6b:01:81:37:16:f9:3f:
                    96:c3:a5:82:1f:8f:f5:20:6b:74:f1:f1:03:ff:ba:
                    b5:26:6e:00:f4:c4:af:c7:01:55:4a:e2:dd:49:25:
                    7b:52:90:45:06:5b:0a:3e:f7:8c:bc:99:de:5a:ec:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.112.0/22
                  191.102.16.0/20
                IPv6:
                  2803:6100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262259

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:70:b0:7f:07:35:e0:fe:a9:0a:42:f9:26:0d:77:01:be:
         5f:24:af:67:f7:a4:64:94:f7:eb:95:02:c2:e1:9c:9a:13:b3:
         20:15:0e:9b:1b:dc:10:37:2d:5a:c2:eb:a4:f7:34:19:1c:38:
         c7:2b:47:e6:23:e7:93:4d:e4:bb:6f:a9:87:cb:86:ed:4a:8c:
         b8:e9:e4:7b:f9:a6:af:67:5c:6f:ab:64:11:7a:d3:11:73:b4:
         ba:80:e5:ef:f6:1b:be:36:9f:40:1f:14:83:49:1c:92:77:32:
         73:e0:65:81:f4:a9:84:d5:ae:a9:c8:7e:90:64:8f:c8:ea:1a:
         8d:ef:c0:26:61:50:6c:fc:3f:ea:81:43:9b:29:f0:92:5b:43:
         2e:a8:cc:5c:e4:d4:ec:3f:d5:08:16:c5:8b:af:8d:c1:fa:26:
         15:ef:01:fc:61:83:bd:38:32:8f:8a:1f:4e:94:34:36:1e:19:
         b1:91:66:2e:99:c6:0f:75:4c:d8:7e:bb:18:c4:b0:74:28:c1:
         0c:47:a5:2e:ef:b6:43:33:41:b2:61:8a:80:9c:15:16:97:d4:
         cb:c2:29:f7:f9:4c:b0:ed:80:bb:70:ac:78:95:37:3f:80:ee:
         2a:70:71:b4:a0:3c:2c:c8:5f:0a:ec:e2:0e:5f:f5:32:94:a1:
         db:40:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----