Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91382a758277d413b7e5274dc3fa85f93dc57a.cer
File:                     fb91382a758277d413b7e5274dc3fa85f93dc57a.cer (raw, json)
Hash identifier:          i1WjyiNEFJG5p4USu7a6LubGYk0f8nKY4gIBpxXBE4w=
Subject key identifier:   2C:0C:78:77:B0:80:61:12:92:F2:0F:E9:6C:ED:5F:0B:E3:CF:9B:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D56725
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/fb91382a758277d413b7e5274dc3fa85f93dc57a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Feb 2020 17:41:00 +0000
Certificate not after:    Wed 22 Nov 2023 16:52:18 +0000
Subordinate resources:    AS: 269914
                          IP: 45.190.188.0/22
                          IP: 2803:bce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13985573 (0xd56725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 19 17:41:00 2020 GMT
            Not After : Nov 22 16:52:18 2023 GMT
        Subject: CN=fb91382a758277d413b7e5274dc3fa85f93dc57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3e:6d:e9:b8:7b:c0:b0:8d:b4:75:5e:55:b2:
                    dd:ba:1e:a4:5a:04:b6:53:36:84:98:dc:ea:64:8d:
                    b5:07:58:4d:29:05:8b:ad:a3:1e:7d:43:42:96:1a:
                    36:e1:2c:98:0c:8f:be:b5:7e:f4:4f:8d:3a:e9:48:
                    24:d7:68:e1:79:47:ed:27:a7:87:dd:fa:f7:a7:48:
                    ec:d0:85:66:03:9a:e0:22:44:42:13:7f:b1:c9:f9:
                    53:c9:9d:1a:c4:24:dc:b6:2d:f4:e0:7e:7e:37:12:
                    a4:bc:99:80:29:3d:9b:8e:4d:6e:eb:53:dd:ac:79:
                    77:df:89:ab:3a:59:fe:9d:9e:8b:96:37:e3:fd:75:
                    f3:00:aa:18:e5:c1:19:64:44:95:c6:91:62:4a:90:
                    cf:e6:a8:63:6f:d3:27:b7:6a:d4:91:69:26:f2:81:
                    d9:db:56:67:3e:a1:32:9a:fd:e0:25:ac:42:03:69:
                    31:d9:a0:cd:b4:7e:c5:81:c0:34:d7:13:fc:f4:06:
                    1f:3d:7c:97:26:c3:59:73:94:37:71:81:c8:18:b6:
                    54:4a:db:63:ad:fe:af:92:f3:04:ae:23:39:6c:06:
                    73:8f:39:b5:f8:d0:c7:3f:cd:1c:e5:3d:6d:8a:2e:
                    04:e6:7f:53:cd:d5:8f:26:63:ba:5f:10:20:13:52:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0C:78:77:B0:80:61:12:92:F2:0F:E9:6C:ED:5F:0B:E3:CF:9B:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f11df6a4-341c-4c7d-82c7-76d731b32f05/fb91382a758277d413b7e5274dc3fa85f93dc57a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.188.0/22
                IPv6:
                  2803:bce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269914

    Signature Algorithm: sha256WithRSAEncryption
         8d:c8:92:b5:3c:3b:22:99:76:52:ed:24:12:7b:02:bd:5f:1c:
         d5:2d:18:63:a2:a9:2b:ba:56:94:42:ef:7c:f9:62:12:1b:07:
         d0:f5:7e:ee:dd:70:13:92:8f:ef:1f:c9:21:80:09:e7:38:e6:
         d3:44:2a:95:63:7e:c1:68:56:9f:c2:f5:f8:e6:a3:ec:cd:ee:
         81:b9:42:af:59:ee:76:72:9f:75:ac:ab:59:bd:17:f4:a1:58:
         62:ab:7e:75:4c:54:72:ff:c4:dc:25:42:2d:82:26:70:28:e5:
         11:01:18:61:17:e6:84:82:2f:11:1f:d0:94:12:b5:c1:d3:6b:
         0d:b7:a7:a7:d6:91:b3:97:4c:e7:7f:43:22:02:35:20:67:15:
         71:ab:70:93:87:91:2e:30:ac:f8:ff:d1:a5:d8:fc:9b:45:64:
         f8:e8:d3:ed:64:ca:3e:22:49:c4:7a:f9:77:01:f1:09:a3:60:
         2c:7c:1a:13:3b:cc:fb:3a:8c:b9:64:d9:b8:ea:1c:43:3e:45:
         6e:d7:da:5e:60:8f:f4:13:87:83:db:de:50:a6:1e:fd:73:65:
         60:23:0c:b7:dc:7c:18:46:f0:1d:27:7a:bf:fc:f5:df:9f:ec:
         9a:ff:10:0c:95:3e:64:ae:09:16:3e:25:b2:b4:53:d4:3b:fd:
         74:65:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----