Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec67c96fab7ae6c58319eae29ffd8cc885fd2f54.cer
File:                     ec67c96fab7ae6c58319eae29ffd8cc885fd2f54.cer (raw, json)
Hash identifier:          72b5/mfjwIYHn4BvQz4Bp6OxCu0YYXvBoDh3OEsL3+A=
Subject key identifier:   D5:C1:61:79:96:CC:97:AD:7C:72:74:60:4E:55:CA:EF:7D:B2:0B:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CC9BDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/ec67c96fab7ae6c58319eae29ffd8cc885fd2f54.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 26 Sep 2020 02:19:37 +0000
Certificate not after:    Thu 10 Aug 2023 22:58:53 +0000
Subordinate resources:    AS: 269808
                          IP: 45.186.44.0/22
                          IP: 2803:5b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13409245 (0xcc9bdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 26 02:19:37 2020 GMT
            Not After : Aug 10 22:58:53 2023 GMT
        Subject: CN=ec67c96fab7ae6c58319eae29ffd8cc885fd2f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:b4:7a:bd:23:53:83:d7:94:0a:a1:1e:22:
                    db:c8:14:18:17:08:c7:b5:4f:ca:d6:86:7f:58:f3:
                    28:d0:3e:eb:d6:ee:aa:05:72:08:40:b1:71:43:16:
                    d0:f1:85:81:27:3f:e5:e5:37:c0:51:e1:f2:f8:4c:
                    ab:75:d4:89:9f:d2:92:c5:f1:78:f7:35:a0:4d:b6:
                    4c:ea:66:c3:4f:a9:c0:96:cd:c4:21:00:c8:df:a5:
                    49:c6:d0:fb:da:38:f3:62:ce:12:b6:a8:df:29:ef:
                    d8:1e:b3:d9:b9:0f:1f:e4:dc:e7:9a:de:ca:98:c6:
                    5f:d4:2d:2d:09:e6:a1:46:ea:e1:82:01:84:6d:ee:
                    02:20:67:8a:2f:f4:06:6b:ec:f7:c8:4b:4c:b1:8e:
                    dd:06:0c:c1:90:e4:ec:cc:1f:e1:60:a3:df:e1:fd:
                    d5:d8:45:ea:29:a2:ef:27:0b:16:3a:40:1a:01:75:
                    e9:84:ff:22:71:5e:43:56:52:b0:e0:df:36:84:2d:
                    89:8c:eb:6f:00:ad:25:7d:bd:7e:be:68:d3:cf:25:
                    90:f8:41:fb:ce:28:7d:ec:a8:15:55:72:34:00:91:
                    17:f4:0d:d3:72:11:09:18:5b:bc:95:4a:5f:20:39:
                    3d:a0:ff:1a:dd:6f:cb:74:fe:23:fa:31:69:60:a0:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C1:61:79:96:CC:97:AD:7C:72:74:60:4E:55:CA:EF:7D:B2:0B:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/ec67c96fab7ae6c58319eae29ffd8cc885fd2f54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.44.0/22
                IPv6:
                  2803:5b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269808

    Signature Algorithm: sha256WithRSAEncryption
         bc:7a:9f:9d:b1:70:b7:f6:6d:35:97:18:25:82:73:75:c7:09:
         05:50:87:b7:82:12:d9:0f:1b:e4:6d:36:bc:35:27:3c:da:e0:
         09:97:e2:dc:90:1b:fa:87:a6:13:9f:dc:9c:09:1d:d1:d4:83:
         ef:e1:46:a9:db:f0:1c:73:5b:46:3b:de:68:d9:03:be:db:3b:
         78:15:76:0c:3d:e0:43:c6:2e:53:82:d3:6a:67:70:79:15:1c:
         f0:63:cb:fe:61:9f:30:d4:fe:86:1a:88:21:a6:ef:4d:1e:ad:
         85:70:a2:27:e7:78:4f:25:22:4e:66:f1:cb:14:f3:c7:7e:cd:
         ca:62:1e:89:6a:67:8b:47:66:a4:47:a9:94:b3:b8:10:ee:bd:
         de:49:db:f3:78:19:95:5d:fb:54:4a:9f:65:36:1e:4c:40:53:
         c3:6f:e5:1c:a5:f9:09:a1:ec:1b:87:0a:19:c8:49:0b:cb:54:
         ec:3c:de:ec:70:f6:83:59:a0:81:7f:cb:d4:83:d1:66:0a:e7:
         c7:d4:52:8c:92:53:73:d3:a5:a8:2b:4b:ad:6d:df:de:a5:1a:
         cf:d5:a3:db:a1:9f:5d:27:0a:16:6f:37:2c:3c:e7:9b:52:f3:
         8f:75:21:24:e3:25:24:67:ba:8d:c4:16:ba:21:1c:94:b8:a2:
         24:57:6b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----