Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f970f202e47da3240414c89f65127afcb786a7ba.cer
File:                     f970f202e47da3240414c89f65127afcb786a7ba.cer (raw, json)
Hash identifier:          wv1SEXkGcVVCVYMoNwNSAD5jiJZAQ7g/wkS95i3OVdc=
Subject key identifier:   69:CD:84:A4:FE:E8:C7:98:63:06:2D:F0:14:03:E3:A0:6F:7F:FB:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA85C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/f970f202e47da3240414c89f65127afcb786a7ba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Sep 2020 13:51:56 +0000
Certificate not after:    Wed 19 Jun 2024 18:42:44 +0000
Subordinate resources:    AS: 52424
                          IP: 200.61.248.0/22
                          IP: 2801:1c0::/39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15369669 (0xea85c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 13:51:56 2020 GMT
            Not After : Jun 19 18:42:44 2024 GMT
        Subject: CN=f970f202e47da3240414c89f65127afcb786a7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:5f:12:fe:e9:9c:39:70:4b:d5:b8:be:18:
                    57:5a:0d:b8:3f:d7:7d:16:86:da:f1:6f:41:87:de:
                    89:f6:38:35:c7:2e:65:bc:9b:67:ea:81:5b:a6:25:
                    b1:75:4d:4b:60:67:18:31:30:c1:54:e2:9c:90:31:
                    cc:67:86:24:c7:1f:b6:25:99:fa:70:8f:47:a9:e3:
                    dd:07:49:6c:6f:f8:17:89:46:9b:ac:2d:11:d4:31:
                    c2:d3:36:70:ad:10:fb:bc:e7:9a:de:64:6b:6d:99:
                    25:ff:21:7a:55:d0:d6:b3:f5:4e:68:ef:40:1b:2a:
                    1f:c7:bc:ca:c7:f5:88:a3:81:cb:7a:98:6e:2e:1a:
                    7e:b3:41:ab:99:52:e6:88:ca:8f:12:26:00:a1:f1:
                    e0:56:c6:a6:38:d9:a8:12:ec:4a:eb:f4:bb:5d:ad:
                    70:65:31:43:ae:9d:8b:24:48:6d:9e:0f:f9:1f:3c:
                    99:86:25:29:39:31:bb:31:36:4d:5c:e7:64:3e:35:
                    1d:85:71:20:52:0e:73:44:65:bd:af:37:39:e1:c7:
                    a1:87:ca:54:bf:41:6e:f7:9d:af:1c:08:3a:c5:1a:
                    17:08:56:2e:5a:ef:0c:d9:06:5f:75:88:8f:50:ea:
                    c9:ec:2a:1c:34:37:31:66:94:71:b6:61:79:b0:82:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:84:A4:FE:E8:C7:98:63:06:2D:F0:14:03:E3:A0:6F:7F:FB:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/f970f202e47da3240414c89f65127afcb786a7ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.248.0/22
                IPv6:
                  2801:1c0::/39

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52424

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:83:0e:8e:a3:64:ca:0c:2f:1d:7b:aa:4a:42:de:ac:71:
         e4:68:c5:68:7d:d5:25:96:88:82:e1:5e:14:d0:78:c6:a2:da:
         5a:3f:81:c9:76:11:ee:d3:0a:da:7c:e8:d0:77:71:9a:e0:bc:
         42:5c:7f:66:6e:cc:5d:b5:05:e8:ff:ab:05:c8:34:48:b2:80:
         b3:03:4c:dd:be:15:48:8a:cf:c8:fb:39:0f:3b:ba:2f:ee:95:
         a5:f8:ab:d5:b3:47:98:c3:6c:15:f9:00:d4:89:68:72:45:ae:
         75:af:7f:0e:5f:08:a1:94:5d:a0:54:29:65:4b:3d:dc:7e:ee:
         e1:3a:fe:00:00:f5:7c:1f:e8:cb:8a:6d:f8:a4:3f:c6:46:4c:
         91:83:80:82:78:25:d3:c6:62:7d:97:c3:95:77:0e:64:d2:5b:
         95:0b:d8:35:23:87:1e:90:d3:20:90:b4:97:05:49:cf:4e:5c:
         21:1d:59:4d:62:5e:8f:5a:55:f0:11:02:45:f6:53:43:ec:2a:
         1d:8f:9c:7a:a3:85:33:40:6a:6d:4d:1d:b2:4f:e1:77:d8:94:
         0d:c0:23:b6:7e:3f:43:a1:3f:4b:b7:98:51:bb:88:74:b1:66:
         60:45:c3:85:7e:c8:63:83:eb:76:8b:68:dc:92:ff:67:c7:54:
         43:14:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----