Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f03afcbfee5c0471b8510f9a21ac665a485757d2.cer
File:                     f03afcbfee5c0471b8510f9a21ac665a485757d2.cer (raw, json)
Hash identifier:          6xJh0qFs4SyMPnfRypii3BGzgj36BOoszIj36Yxw/Hw=
Subject key identifier:   3D:7B:96:3B:73:4F:77:0A:4E:17:DE:31:E3:B2:61:0A:8E:53:A5:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F55067
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/f03afcbfee5c0471b8510f9a21ac665a485757d2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Nov 2020 16:14:51 +0000
Certificate not after:    Sun 15 Sep 2024 14:54:11 +0000
Subordinate resources:    AS: 52428
                          IP: 170.238.240.0/22
                          IP: 200.115.48.0/20
                          IP: 2803:1900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16076903 (0xf55067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 12 16:14:51 2020 GMT
            Not After : Sep 15 14:54:11 2024 GMT
        Subject: CN=f03afcbfee5c0471b8510f9a21ac665a485757d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:04:46:bd:87:6b:1a:ec:59:57:66:da:a4:
                    b2:c8:55:8d:fa:fd:e3:6d:cf:85:96:19:03:a2:a6:
                    f5:e0:ff:c7:6d:ba:ac:57:a6:51:34:71:e7:69:09:
                    5b:93:d0:97:2b:f6:fe:f8:c1:82:34:79:0b:42:8f:
                    31:58:7c:fc:db:88:af:e9:d8:55:9e:f4:cc:5c:b6:
                    0d:eb:20:80:eb:4e:79:b3:15:e0:87:40:5e:27:95:
                    ba:d6:e5:b0:1b:e7:80:c0:42:32:8d:cc:23:f6:50:
                    0e:0d:54:a6:ef:85:af:70:a3:db:14:16:9d:a1:5f:
                    ab:c4:aa:f5:5b:47:e4:5e:b3:bc:af:92:cc:6a:22:
                    39:5b:60:50:ff:63:fc:ea:46:fb:e2:9e:62:d2:22:
                    8a:cc:61:61:20:ee:f5:60:8a:87:42:83:2c:e6:1b:
                    dc:8e:d5:f0:a6:de:fe:da:2a:fb:54:27:66:43:60:
                    22:05:d1:88:be:a4:b0:d4:97:4d:3b:87:6a:e4:f0:
                    6f:8a:0f:99:7e:e9:d0:7b:25:a7:92:5f:7f:10:ff:
                    67:f5:b0:2c:af:ab:21:be:9d:73:35:7d:ca:f2:2c:
                    31:e2:fe:75:0e:62:41:72:d0:36:3a:31:45:7b:d5:
                    14:f8:1d:71:96:b7:88:41:b1:1b:77:72:5c:2b:90:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:96:3B:73:4F:77:0A:4E:17:DE:31:E3:B2:61:0A:8E:53:A5:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/f03afcbfee5c0471b8510f9a21ac665a485757d2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.240.0/22
                  200.115.48.0/20
                IPv6:
                  2803:1900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52428

    Signature Algorithm: sha256WithRSAEncryption
         07:be:76:6c:0d:cd:3a:dd:90:1c:64:ab:fd:7a:f0:dd:db:a0:
         7b:3f:e8:55:4e:7b:0a:35:92:bc:07:e6:a8:58:eb:61:4e:dd:
         3c:16:b0:b1:24:b1:f5:fd:90:42:2e:c7:45:66:4d:61:9e:bd:
         b4:0f:0d:86:05:29:36:a1:7d:c7:9f:e7:de:34:c6:e6:3d:92:
         a2:87:7b:e7:3d:7d:6f:fb:21:84:5e:af:05:37:3d:c4:14:6b:
         f1:4e:50:8a:64:4a:90:12:c4:e9:6a:c4:4e:9f:6f:9e:e6:58:
         6e:82:fb:52:98:35:36:07:ad:a6:72:59:07:2c:7a:f4:35:2c:
         40:12:d0:85:22:61:dd:29:83:6d:f7:c7:d6:13:c1:a1:31:1b:
         69:8a:2f:96:1b:76:f9:36:b5:40:dd:b9:5b:1c:8f:22:54:2a:
         8e:18:76:d8:a2:b2:60:56:3e:88:6a:85:de:4f:a0:27:04:c1:
         0e:4d:38:0a:d0:b0:39:a4:3e:16:b3:3e:e3:ac:12:74:d8:58:
         71:d8:18:94:71:03:ed:cc:93:c6:20:02:f9:10:39:44:f8:fc:
         5d:b3:32:16:81:8c:63:6b:e9:51:50:e7:49:f5:91:7e:df:bb:
         89:40:5d:e4:20:4d:b8:80:88:de:e1:64:f6:3b:9b:17:82:9b:
         4f:6d:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----