Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49af8394a6a993c0d1ddee49822705b80fbc0cf.cer
File:                     f49af8394a6a993c0d1ddee49822705b80fbc0cf.cer (raw, json)
Hash identifier:          2NKX0d2vWZmE9bTxLn3I8nba47EQuIubSHOMBseHUDc=
Subject key identifier:   4E:DE:54:7E:19:2E:CA:81:48:ED:05:2B:F6:34:97:47:D7:83:CF:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4FB1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/f49af8394a6a993c0d1ddee49822705b80fbc0cf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Oct 2020 16:52:15 +0000
Certificate not after:    Fri 13 Sep 2024 21:12:03 +0000
Subordinate resources:    AS: 270070
                          IP: 45.185.204.0/22
                          IP: 2803:9f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16055069 (0xf4fb1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  2 16:52:15 2020 GMT
            Not After : Sep 13 21:12:03 2024 GMT
        Subject: CN=f49af8394a6a993c0d1ddee49822705b80fbc0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:54:0d:7c:a2:a9:a5:d1:68:9f:74:29:52:
                    98:59:85:35:49:1b:ab:76:a0:46:96:23:7d:58:a2:
                    87:17:f3:53:e2:ba:36:e5:e1:f6:d1:eb:38:9c:a5:
                    a3:c4:ab:d0:8f:1f:16:74:b7:cd:e8:90:21:d6:20:
                    bd:dd:e8:5f:15:34:0b:1b:9d:11:08:54:d9:b2:61:
                    b6:aa:76:4a:5f:2a:cf:f9:60:e4:76:ff:96:7e:35:
                    17:7d:3b:52:21:f6:73:9e:08:26:36:e8:8a:b9:da:
                    27:80:45:d9:01:65:de:e2:e9:02:3a:ac:15:4d:1f:
                    a3:99:58:bf:c1:90:4a:95:fd:3e:1e:bf:eb:2a:4e:
                    38:e2:70:5a:89:0e:84:6d:09:97:cd:b1:5b:a9:21:
                    7c:a6:58:b8:d8:7b:bf:d4:52:c0:d1:85:22:52:cf:
                    7a:ef:17:0d:55:0c:68:4e:68:f3:d7:13:2f:a9:e5:
                    f8:4c:60:34:4e:03:e7:94:f5:7e:c4:c9:d5:32:40:
                    07:87:fc:2f:a2:96:22:66:7f:20:9c:c3:25:d0:c7:
                    38:4b:d1:bb:b4:76:92:af:b6:60:7c:6e:5f:a3:71:
                    9c:61:6e:37:ee:8f:32:43:44:ef:a1:bb:73:2b:35:
                    5a:67:4b:8c:85:28:0e:ea:f1:28:e4:60:34:70:81:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:54:7E:19:2E:CA:81:48:ED:05:2B:F6:34:97:47:D7:83:CF:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/f49af8394a6a993c0d1ddee49822705b80fbc0cf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.204.0/22
                IPv6:
                  2803:9f60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270070

    Signature Algorithm: sha256WithRSAEncryption
         b6:65:50:aa:be:63:2d:95:a3:c7:25:5c:dc:a2:ce:9a:c5:76:
         57:e8:3b:a4:32:18:09:e2:4d:a8:a4:ba:2a:44:70:cd:cc:e7:
         7a:ed:c9:e9:28:fb:8c:45:dd:8a:1c:b2:7f:1f:e6:ba:6a:dc:
         c8:9b:02:c8:f5:d7:b6:69:f1:4a:ad:b3:48:04:58:69:b6:f1:
         40:0a:1e:40:52:bf:d6:66:e2:c6:3f:ab:6e:bc:e4:0f:db:c8:
         75:3b:e0:74:f2:5c:35:db:f4:e4:ac:e9:5e:99:16:fd:68:9b:
         96:09:24:bf:fc:9b:05:2f:80:66:10:4a:d5:ff:6a:85:c2:4b:
         d7:ef:1f:b3:14:11:8a:e5:6f:73:17:b5:32:a1:54:c1:a8:52:
         a3:e9:41:b1:72:31:27:93:37:83:d8:83:4e:b9:4d:a9:83:fd:
         2a:78:ac:1f:9e:08:00:f1:b0:99:30:a4:85:2c:56:6e:7a:bb:
         98:39:60:cc:3d:b2:56:c0:82:b1:d8:fa:3f:26:3c:ae:41:4d:
         02:53:e1:68:00:56:0a:08:66:62:0d:ae:f0:f4:19:20:4c:a4:
         d2:13:9a:f6:31:22:ac:4c:0d:6c:ba:84:8a:ed:04:98:e6:54:
         de:36:a0:a6:05:de:77:2a:ca:cc:6a:71:76:fd:ff:88:3d:93:
         83:65:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----