Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b.cer
File:                     f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b.cer (raw, json)
Hash identifier:          s37ojPPq6bKT8DDCHQHJn7ItCmoJfcywTgHQKw5qWVw=
Subject key identifier:   40:C7:A9:96:4D:2F:E5:49:C1:2C:BC:81:8A:2B:14:61:82:E0:A1:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBF780
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Apr 2020 15:50:51 +0000
Certificate not after:    Tue 13 Feb 2024 16:35:55 +0000
Subordinate resources:    AS: 271780
                          IP: 45.233.4.0/22
                          IP: 2801:174::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14415744 (0xdbf780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  1 15:50:51 2020 GMT
            Not After : Feb 13 16:35:55 2024 GMT
        Subject: CN=f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:5d:7f:5b:eb:96:7b:6e:e8:13:c4:cd:94:
                    9a:d1:cc:e2:41:82:5e:ca:95:ad:0c:82:c1:bc:9e:
                    e1:5d:27:52:32:5b:90:8f:26:78:57:f9:41:cf:46:
                    90:57:ed:c1:42:07:f5:43:7a:8f:ff:1b:b9:0b:4b:
                    c4:47:11:22:dc:92:8a:1a:6b:b0:62:98:62:6a:8a:
                    5c:4b:a4:ad:d1:da:ac:34:2f:be:69:7c:ef:94:ce:
                    b5:28:e4:08:b4:64:e2:77:54:c0:c6:05:45:28:9e:
                    1f:57:b8:ca:8c:88:2f:5a:22:98:96:47:fc:05:4e:
                    32:48:1f:a7:93:32:60:7a:28:d6:3a:ff:fc:fc:df:
                    57:ea:68:36:1a:f1:6d:f3:38:58:f4:ed:81:7a:42:
                    b2:17:df:20:7d:6f:7c:be:4f:e1:c1:24:0e:ee:4f:
                    c8:8d:4a:74:22:2d:93:49:b9:b7:76:ea:54:91:9f:
                    aa:f3:a8:19:c0:af:08:a6:53:24:64:5d:76:ba:cc:
                    4a:41:a4:50:ba:69:84:2d:06:aa:83:70:24:ac:42:
                    d3:99:74:08:d4:f6:5b:98:62:84:92:89:a6:24:ca:
                    d4:95:4d:90:cf:5d:2d:82:e7:03:fd:a6:11:0b:18:
                    07:65:e6:ec:bf:4c:30:90:d8:a3:45:35:2f:70:0c:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:A9:96:4D:2F:E5:49:C1:2C:BC:81:8A:2B:14:61:82:E0:A1:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.4.0/22
                IPv6:
                  2801:174::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271780

    Signature Algorithm: sha256WithRSAEncryption
         40:18:b3:ef:48:19:2d:88:c6:e7:98:c8:4d:cc:f0:d2:86:67:
         29:9c:6d:09:51:fb:bd:5f:2c:82:f2:63:e9:ad:cd:86:ae:03:
         80:ab:82:35:71:35:fb:cb:c9:f9:49:20:f6:96:9c:31:ca:93:
         fc:53:e9:5f:77:10:b8:93:06:63:3e:2d:80:54:80:7b:67:f5:
         4d:45:c4:8e:75:49:41:b6:47:04:5d:9f:51:7e:8a:67:d5:31:
         fa:0b:46:38:8a:6a:3e:c4:c7:1b:af:7b:81:79:e2:00:aa:7d:
         7c:4f:e2:13:ea:d8:6e:f9:b3:9a:c6:85:be:c3:5e:76:c2:8b:
         5d:72:48:1e:b1:83:61:23:ea:4c:1a:14:cf:15:38:c0:9a:91:
         b3:a7:c6:dc:88:3d:04:ec:a7:c0:a3:2c:2f:59:1b:6f:ab:be:
         b7:f6:70:87:a1:92:82:ab:c6:b1:c2:61:55:50:1f:a6:4d:51:
         78:91:ea:64:9f:1f:e9:3d:8b:2c:0e:4c:32:c8:01:c9:9e:e0:
         ba:9d:a2:0e:2e:c8:e7:3f:9c:cd:9d:de:f0:2b:45:d7:3a:39:
         df:ee:67:6d:e6:2c:18:5c:9f:16:79:38:db:a5:d9:46:5b:8d:
         bc:a3:7f:ee:cd:de:11:cf:65:85:4d:9d:ef:5d:c0:91:e3:67:
         37:01:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----