Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df3ed304f279cd1a26f829d0aaec961d5ab9b301.cer
File:                     df3ed304f279cd1a26f829d0aaec961d5ab9b301.cer (raw, json)
Hash identifier:          +Bfvaoz2xsZrL9rif4nsfbo1kPTV0TI8O/4x+7A9pTQ=
Subject key identifier:   4E:42:72:4D:DC:80:C9:B9:03:F1:F5:B1:E2:F8:96:90:D4:C7:D7:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB75F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/df3ed304f279cd1a26f829d0aaec961d5ab9b301.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Feb 2020 16:23:23 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 3603
                          IP: 157.253.0.0/16
                          IP: 2800:2d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16479736 (0xfb75f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 16:23:23 2020 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=df3ed304f279cd1a26f829d0aaec961d5ab9b301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:ba:1d:cb:fa:41:4d:ce:4a:6d:e5:bd:b8:
                    86:72:86:56:56:4b:73:bf:30:7e:23:f9:4b:ee:0e:
                    49:bd:19:44:77:7f:a2:3f:f6:af:96:3e:50:81:9c:
                    44:f6:49:27:ec:e0:f0:39:2f:d7:c5:a0:05:6e:c8:
                    c5:26:58:3c:69:40:56:4f:3a:bc:b1:c4:90:b1:10:
                    a0:4a:d9:b5:dd:c3:59:60:6e:cb:0a:55:a8:ba:e8:
                    e1:98:3f:52:d2:ae:79:b2:96:0f:ca:28:e1:1a:7b:
                    a5:58:75:60:b3:ed:e6:80:49:a3:b5:36:97:b8:15:
                    21:26:4f:b2:dd:64:7d:17:ee:e1:44:af:7b:17:f5:
                    9e:a9:06:95:aa:2d:eb:1c:3c:1d:50:5e:62:cf:80:
                    53:f4:ed:89:76:16:96:bd:97:51:bc:93:a6:79:b2:
                    4b:1b:a3:0d:28:28:ec:89:83:b9:32:79:42:a5:7d:
                    70:db:65:be:6b:5e:1c:5c:6c:6c:cc:a3:9f:f9:f8:
                    24:a1:41:59:ee:0d:c0:4d:38:c7:47:4a:89:34:af:
                    13:14:f1:9d:d0:67:93:3a:ee:b4:15:39:8d:8e:23:
                    e5:27:fb:b0:d5:ae:1a:b9:4a:f0:4f:d2:61:ba:15:
                    61:38:de:49:61:f5:7b:12:36:03:92:d4:b2:79:a8:
                    81:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:42:72:4D:DC:80:C9:B9:03:F1:F5:B1:E2:F8:96:90:D4:C7:D7:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/df3ed304f279cd1a26f829d0aaec961d5ab9b301.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.253.0.0/16
                IPv6:
                  2800:2d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3603

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:b2:72:ee:18:c8:b9:7b:4e:e5:3e:25:15:33:4e:6e:f4:
         55:85:c7:4f:9f:96:02:f0:e0:2b:33:0e:c3:68:1e:6d:61:64:
         b6:37:0f:17:30:75:f9:51:dc:d0:08:39:9f:87:a7:ff:21:fc:
         9c:7c:01:7b:b6:a2:93:58:99:0a:e0:b6:7d:0f:2c:fc:d9:e7:
         c3:99:33:d9:f9:a2:e6:4e:fa:e3:60:c5:e0:99:c8:71:4a:d8:
         7e:90:d7:d6:39:d5:e4:20:f4:98:77:94:41:13:26:89:14:36:
         39:7d:20:1d:46:af:72:18:16:f2:61:4c:22:e2:a5:15:31:7f:
         d2:32:e4:2d:d3:f4:7b:72:59:37:2f:82:44:30:90:96:3f:8c:
         14:b2:86:30:91:2f:50:0d:72:fb:f4:1a:ca:b7:01:c3:aa:97:
         15:cf:6a:bc:b7:ba:f1:5a:65:1a:aa:d7:8c:d8:3f:eb:04:ce:
         54:97:49:6e:d4:96:b6:d1:45:26:51:ff:23:5c:47:ee:31:4e:
         9c:c9:20:40:ce:38:93:19:18:29:a4:09:fb:e6:c8:a1:5d:da:
         06:e2:6b:4d:38:73:ee:c9:a0:86:3c:5d:39:5f:85:c4:1f:92:
         7f:88:db:99:fa:8f:0e:7e:2c:9f:de:ee:2f:96:38:0e:1f:09:
         3a:48:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----