Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dedf8d5736c0557e727f6db72e984837a300b8ac.cer
File:                     dedf8d5736c0557e727f6db72e984837a300b8ac.cer (raw, json)
Hash identifier:          FUPi/IhmoMs29Hw/Z64St+Q2uSBvFybQ0xSHEqu5mPw=
Subject key identifier:   32:F5:45:4E:85:B9:BA:CF:E3:D6:81:55:95:CE:B6:00:EB:A5:4F:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7C396
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/dedf8d5736c0557e727f6db72e984837a300b8ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Sep 2020 17:33:42 +0000
Certificate not after:    Thu 30 May 2024 18:48:03 +0000
Subordinate resources:    AS: 272139
                          IP: 181.225.188.0/22
                          IP: 2803:53e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15188886 (0xe7c396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 17:33:42 2020 GMT
            Not After : May 30 18:48:03 2024 GMT
        Subject: CN=dedf8d5736c0557e727f6db72e984837a300b8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:37:8c:e2:2f:f7:8a:22:ce:7a:5c:18:eb:
                    42:61:5a:38:03:18:6b:c5:aa:ef:35:11:d7:ec:ae:
                    c7:8e:87:14:2c:5d:17:45:6c:f4:be:bf:11:7c:b2:
                    f4:0c:a0:30:05:a2:df:b6:5c:5a:77:03:98:59:0e:
                    c0:41:1a:9b:39:df:3e:93:c1:17:b8:64:fb:13:83:
                    b1:3a:36:2f:52:fb:87:8c:94:c3:6f:0d:b3:47:d7:
                    0f:f6:46:e9:82:eb:cd:d6:c2:89:95:e4:79:b9:30:
                    66:24:f7:d7:4b:5f:f6:1a:93:cf:20:dc:3a:e7:02:
                    bc:a4:4d:48:2f:70:e7:c1:0d:10:02:4c:2e:b2:88:
                    85:76:8b:4f:7f:3f:93:03:ee:52:9e:ba:4e:5d:12:
                    63:f1:9b:58:0c:cd:5d:db:1c:48:31:92:0f:72:ae:
                    10:50:97:60:81:c9:f4:cb:8d:9a:26:37:b7:e6:2c:
                    bf:d6:f6:ad:52:88:4c:b2:f8:11:96:96:e6:e5:fa:
                    33:a0:ec:a6:32:00:5e:6c:09:07:f1:dd:19:67:c7:
                    97:83:f8:5f:6c:c9:c0:54:c8:a5:c8:45:b3:46:5f:
                    11:49:c3:e2:a6:71:fd:86:2e:8a:49:b0:42:1a:34:
                    c3:c5:1d:b6:fc:cc:46:e7:82:27:ef:1f:88:c8:08:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F5:45:4E:85:B9:BA:CF:E3:D6:81:55:95:CE:B6:00:EB:A5:4F:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/dedf8d5736c0557e727f6db72e984837a300b8ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.188.0/22
                IPv6:
                  2803:53e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272139

    Signature Algorithm: sha256WithRSAEncryption
         19:78:5b:68:77:ec:e3:8d:89:e4:a6:41:67:a8:45:da:24:3f:
         81:8c:0e:d7:49:9f:74:22:da:ed:86:88:8e:25:c4:50:89:d9:
         58:47:74:63:79:26:fa:74:32:04:13:5e:4d:2e:c2:35:48:89:
         ee:38:58:c4:ca:6a:e1:6b:07:36:83:33:c9:5b:c7:60:0e:e6:
         8d:ca:4e:c3:26:76:49:47:56:09:bc:8c:1d:ce:a0:04:31:60:
         06:58:1b:e9:f6:4e:4e:bf:fb:43:a8:db:e4:12:dc:35:d1:d0:
         5f:3b:60:ef:f9:95:64:69:56:c3:cd:44:6b:2a:ee:a4:05:9b:
         5e:d7:96:6d:b3:f7:d1:a0:63:d4:04:25:7e:dc:6d:cd:4c:bd:
         78:b4:7c:8d:3a:4f:f2:9b:3f:3b:94:a6:fb:e2:b8:b5:e8:d4:
         6e:af:aa:59:5a:19:da:d6:cd:ec:6d:a8:ff:00:6b:bb:18:e0:
         2f:93:13:5d:e2:f0:19:21:0e:79:96:2c:43:a6:3e:2a:f4:ff:
         b9:02:1a:9e:86:c2:0b:23:95:a8:fd:15:2e:5c:8e:cc:fe:7a:
         6c:60:5a:e1:c6:12:b5:24:df:d9:1a:1b:9f:c7:c5:77:e9:d1:
         f4:7f:0e:ce:fc:b9:cd:5e:e8:04:e8:6c:32:fc:61:f4:2a:72:
         95:cb:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----