Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcd0175219ae8a3b799bba0a1007684da4802bbf.cer
File:                     dcd0175219ae8a3b799bba0a1007684da4802bbf.cer (raw, json)
Hash identifier:          URqHB0lOXC3is9+SzDXV+5MAXGQNwQ1/emrp+C9dCRk=
Subject key identifier:   8C:AD:49:52:BF:91:FF:10:4A:1B:59:37:BF:BF:45:63:98:91:C2:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCC3E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/dcd0175219ae8a3b799bba0a1007684da4802bbf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Nov 2020 22:17:10 +0000
Certificate not after:    Thu 22 Feb 2024 17:31:40 +0000
Subordinate resources:    AS: 61502
                          IP: 201.131.110.0/23
                          IP: 2801:1e:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14468072 (0xdcc3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 22:17:10 2020 GMT
            Not After : Feb 22 17:31:40 2024 GMT
        Subject: CN=dcd0175219ae8a3b799bba0a1007684da4802bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:b8:82:fb:38:5a:97:cf:e8:9d:d6:2c:4e:
                    27:98:7b:7e:e5:21:cf:8e:59:b0:7e:52:e3:e8:b3:
                    d1:d9:4c:9a:45:ca:28:18:07:cb:54:9c:29:a7:11:
                    97:ae:e6:aa:4c:31:d0:36:fb:db:72:a7:f3:53:43:
                    d9:aa:2a:13:c3:97:f1:d9:9d:44:57:e1:4f:b3:a4:
                    2b:79:61:0b:bd:e5:b9:78:f2:cc:ae:31:46:35:83:
                    23:74:be:4f:d7:27:2c:ab:95:cd:bd:97:c0:5d:13:
                    23:d3:6e:2f:40:25:fb:78:71:45:99:51:25:90:b1:
                    b0:56:48:1e:b0:0e:66:38:9c:93:a6:29:fa:d5:76:
                    c1:05:8b:1e:d8:ff:2d:4a:95:e0:d0:ce:10:3c:12:
                    9c:fd:e7:b1:1f:b2:38:59:7d:aa:f7:02:36:36:1e:
                    3a:f6:ec:b3:e0:74:63:2e:ff:f5:0c:7f:d5:82:a6:
                    e8:7e:33:19:28:8b:c8:da:4f:65:31:00:3f:13:e2:
                    bd:72:6d:61:2a:11:71:24:b2:73:b4:91:28:21:ca:
                    93:c1:cf:a5:10:05:2d:83:a0:28:14:66:51:05:c7:
                    4d:81:18:25:a8:c8:85:d9:32:8a:86:b8:2c:09:b1:
                    f1:49:b7:9b:80:56:ab:98:ef:18:2a:b6:b1:a3:00:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:49:52:BF:91:FF:10:4A:1B:59:37:BF:BF:45:63:98:91:C2:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/dcd0175219ae8a3b799bba0a1007684da4802bbf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.110.0/23
                IPv6:
                  2801:1e:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61502

    Signature Algorithm: sha256WithRSAEncryption
         91:56:08:1f:ab:c8:ed:c8:b0:a5:0b:09:d8:11:ab:2a:79:b2:
         52:29:87:91:a0:7a:b0:ee:31:98:dd:21:68:99:5d:18:67:36:
         cf:e7:84:5f:40:ce:41:c8:62:89:5c:d8:f8:f0:de:94:96:7e:
         db:e9:a6:26:1a:ff:d2:63:5d:54:f7:8c:50:52:8a:cf:e2:76:
         05:18:05:e1:12:80:3f:98:e4:6b:6d:06:b3:43:d7:ae:95:3d:
         f1:d5:e8:ca:34:84:d6:da:23:42:3e:c2:12:19:dc:5f:ee:bc:
         9d:eb:e2:04:0a:7d:dd:4f:45:59:1a:8d:3d:0d:c7:89:e9:66:
         84:83:f6:24:95:31:91:ce:33:b1:8b:4f:42:91:20:35:d2:03:
         1c:67:ea:16:2b:8e:f1:e7:65:08:ee:6c:97:91:ad:5f:2c:a2:
         5c:19:0c:5c:c2:d3:c5:5b:d3:59:38:b6:77:4b:01:f0:c5:5b:
         95:4e:d5:cb:8d:54:d3:88:63:f5:86:74:2e:94:da:ec:e2:ff:
         9d:52:6f:f5:69:78:81:fd:62:a0:09:e8:2e:5d:f7:65:1d:16:
         75:65:a1:9f:98:66:71:0f:e9:5d:ba:f9:83:e7:c4:cf:c5:72:
         b5:74:62:20:5e:b2:7d:a1:7a:eb:8a:c1:e3:8f:d5:25:99:f3:
         60:19:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----