Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddc87dab64fa190dbee15f240971902c2972f198.cer
File:                     ddc87dab64fa190dbee15f240971902c2972f198.cer (raw, json)
Hash identifier:          NYgk2P9DnKTYBr9vAEKe+zqsj++8klo/ltI6r/gwGBg=
Subject key identifier:   AA:8E:D4:43:9E:18:23:59:0C:8A:9E:73:4F:29:4A:4B:82:9D:7B:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA6B3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/ddc87dab64fa190dbee15f240971902c2972f198.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2020 20:11:23 +0000
Certificate not after:    Thu 03 Jul 2025 06:00:00 +0000
Subordinate resources:    AS: 64113
                          IP: 200.10.167.0 -- 200.10.172.255
                          IP: 2801:11:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16411454 (0xfa6b3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  7 20:11:23 2020 GMT
            Not After : Jul  3 06:00:00 2025 GMT
        Subject: CN=ddc87dab64fa190dbee15f240971902c2972f198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:45:67:14:80:45:38:56:e8:bd:66:e7:36:
                    45:81:34:dd:4e:db:22:d4:d1:a3:ce:f0:61:c3:54:
                    5b:f4:80:f9:cd:63:44:e7:9b:38:8e:e7:47:f5:68:
                    60:c6:0f:db:ae:34:2d:a6:8f:53:22:31:b7:87:82:
                    7d:c7:71:25:8f:72:1d:8d:08:74:08:d6:a0:87:bd:
                    e9:84:d9:32:24:53:15:df:e7:31:5c:11:55:ef:96:
                    49:fc:97:43:bc:de:9a:e6:42:6e:a3:27:e6:1b:9d:
                    36:3d:79:fb:da:e4:b6:f0:78:56:89:d5:44:97:00:
                    ab:47:78:03:8c:09:9e:c9:58:cd:4d:4a:cf:4b:0e:
                    a2:76:60:77:33:96:8f:d7:1d:12:30:bf:70:52:5b:
                    3d:d1:2a:7b:fd:ae:9a:d7:98:cd:6b:f8:9b:e8:4e:
                    1f:d2:18:f5:e9:7c:51:f9:9e:92:dd:4d:59:ab:ba:
                    33:24:18:1a:d0:0f:3b:4f:8c:5e:db:7d:ab:d3:a8:
                    aa:85:01:91:b3:fb:f5:d4:f4:9f:55:6c:78:3e:e9:
                    73:c9:4a:bc:32:fb:b0:83:c7:89:f7:76:ad:0c:72:
                    d4:28:6c:3c:63:2e:87:bb:4a:5a:f0:46:c6:47:90:
                    43:fa:65:0f:25:d3:42:e9:50:28:0c:c7:4f:00:3b:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:D4:43:9E:18:23:59:0C:8A:9E:73:4F:29:4A:4B:82:9D:7B:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/ddc87dab64fa190dbee15f240971902c2972f198.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.167.0-200.10.172.255
                IPv6:
                  2801:11:b800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64113

    Signature Algorithm: sha256WithRSAEncryption
         22:29:82:9f:d4:16:e0:d6:06:1c:3e:51:ce:ab:91:40:2a:29:
         a3:c7:0f:ef:ee:15:b2:71:c8:ba:67:3c:fd:22:2e:f1:f2:8a:
         7b:d8:66:79:7e:c8:22:84:9c:46:a0:1b:79:71:6d:10:d2:6f:
         58:f0:b5:68:42:9c:d0:ff:05:5e:d8:1c:6d:52:17:e0:66:36:
         8c:6d:66:f7:99:c8:ad:b4:3a:bf:bf:ea:14:60:64:e5:51:b5:
         2b:fc:f2:54:1e:99:58:2e:68:9c:2d:8f:e5:cc:10:2a:f7:94:
         56:8d:9d:21:39:d2:99:d0:e8:79:e9:69:11:73:c5:81:a4:2f:
         32:ae:b4:6a:a6:65:21:10:d6:59:84:bd:3d:30:0e:cb:58:94:
         ad:a0:73:9e:97:b8:bf:2a:24:fc:79:95:6c:5e:b7:1d:33:e7:
         66:62:f6:06:82:64:52:89:55:76:b4:4c:e7:f8:d9:95:da:12:
         0e:3d:5a:03:8b:c0:0d:ec:55:1b:16:78:dd:b6:f1:51:db:1b:
         62:57:f6:74:89:ce:35:eb:ae:62:eb:e2:39:38:1e:56:56:98:
         d7:8d:7e:21:a9:66:db:08:51:52:0b:76:9d:e7:ee:a3:c0:39:
         20:fc:71:a7:df:36:a8:36:70:3b:ef:7d:67:35:da:a1:aa:19:
         bf:a7:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----