Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe0b0d85a662e82a6e6c375cd9fefe2eac17df60.cer
File:                     fe0b0d85a662e82a6e6c375cd9fefe2eac17df60.cer (raw, json)
Hash identifier:          pn3RQFGeUl0bcs8JBecRFBbdll3Mh7GGRBbnm5y/BqU=
Subject key identifier:   0D:4E:32:84:41:E0:13:36:F5:BB:98:BC:CE:42:26:97:14:2E:B8:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB1451
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bb9ab262-5f72-421b-9192-10fb9e1d82d7/fe0b0d85a662e82a6e6c375cd9fefe2eac17df60.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bb9ab262-5f72-421b-9192-10fb9e1d82d7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 Apr 2020 23:11:28 +0000
Certificate not after:    Fri 02 Feb 2024 18:21:14 +0000
Subordinate resources:    AS: 267819
                          IP: 160.238.63.0/24
                          IP: 2803:c860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14357585 (0xdb1451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 23:11:28 2020 GMT
            Not After : Feb  2 18:21:14 2024 GMT
        Subject: CN=fe0b0d85a662e82a6e6c375cd9fefe2eac17df60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:91:17:39:04:36:13:e2:7f:52:98:89:c7:
                    1b:39:13:0a:4b:77:17:06:31:51:b6:f7:91:61:8f:
                    8b:e0:05:b2:8a:de:5e:4f:4a:13:fb:77:13:2a:45:
                    9b:4c:83:d1:a3:4e:a6:c5:bc:ae:1a:89:39:07:1a:
                    b4:ba:4a:f2:59:14:39:07:96:12:4b:d6:77:8e:dc:
                    8d:f0:55:45:08:55:ae:ce:f9:7c:93:ab:ec:c5:aa:
                    25:04:0e:c0:33:9e:7a:b7:41:a8:60:c8:ed:29:bb:
                    98:89:1e:b2:7b:d7:e3:1d:dc:ad:aa:89:b9:8b:e1:
                    45:f8:c0:08:79:44:a6:32:6d:c3:e5:0f:5f:10:8d:
                    0e:c3:dd:dd:90:d3:0d:66:2d:8a:03:90:4e:a8:a7:
                    41:30:38:e2:37:af:f7:a7:c7:c4:13:a9:8f:6c:73:
                    de:1e:de:5f:23:61:fb:7a:2c:ae:40:1f:c7:12:b3:
                    51:b7:e2:a6:4b:48:ed:68:dd:e3:8d:31:ad:71:39:
                    c8:ae:44:35:77:97:1f:d1:0d:ec:19:57:28:3d:3d:
                    ac:34:b9:f3:a8:26:af:fe:2f:96:dd:ad:a2:0f:04:
                    1f:39:59:4a:51:00:ff:3e:6f:49:c5:c3:54:20:fb:
                    0e:46:3a:fe:77:c0:2a:79:15:91:6f:74:3c:18:84:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4E:32:84:41:E0:13:36:F5:BB:98:BC:CE:42:26:97:14:2E:B8:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bb9ab262-5f72-421b-9192-10fb9e1d82d7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bb9ab262-5f72-421b-9192-10fb9e1d82d7/fe0b0d85a662e82a6e6c375cd9fefe2eac17df60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.63.0/24
                IPv6:
                  2803:c860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267819

    Signature Algorithm: sha256WithRSAEncryption
         62:28:c2:b6:ae:66:b2:b3:14:9f:97:34:d9:24:46:7c:eb:fb:
         31:0e:6d:b1:b6:52:c2:67:90:f5:bf:11:42:00:78:b2:e3:6f:
         e1:7c:92:66:07:79:6f:21:6f:b0:53:1e:1f:22:22:e5:38:61:
         23:89:7e:04:72:84:9c:24:d6:2b:37:02:74:e1:e8:a6:17:44:
         c6:2f:ff:18:7e:0a:65:27:7c:57:6f:1e:4b:1f:60:83:54:ef:
         ff:4a:42:c8:3b:67:19:97:8d:31:f7:dd:cb:28:27:13:60:7d:
         4d:29:bb:9a:d5:2d:05:18:87:9b:0b:1d:7c:c0:b5:60:75:d2:
         4b:18:f7:d9:03:29:c9:72:6e:89:fe:b4:76:6f:5e:57:23:45:
         9c:17:23:69:eb:a5:2a:09:b5:0d:b9:bb:17:67:82:9e:fc:4a:
         7c:1e:a1:87:57:02:57:8d:cc:e8:32:34:f6:c0:aa:16:df:37:
         7f:c4:1e:19:bc:95:d3:2b:3a:e7:1e:62:04:fc:e9:9c:ff:98:
         86:0d:3a:76:51:55:ab:2a:12:40:83:95:68:0f:34:98:b8:01:
         e4:35:3a:b9:e9:14:3c:ad:6e:db:a7:0c:5f:bc:16:35:59:4d:
         92:91:5e:a0:2c:b4:7b:e3:bd:f0:f7:64:70:c4:67:ae:83:53:
         28:1a:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----