Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01589d89842e97c2ec051a7c1b495017e2d59ba4.cer
File:                     01589d89842e97c2ec051a7c1b495017e2d59ba4.cer (raw, json)
Hash identifier:          f5Q2Etxfbj4Y7zy1Mt1IKqmnwFVafEvJY3OOfsIT84U=
Subject key identifier:   A2:D2:1C:FF:B4:F4:F3:C2:68:AC:52:AC:8C:7E:90:FF:70:66:36:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2F09E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/01589d89842e97c2ec051a7c1b495017e2d59ba4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Mar 2019 01:32:45 +0000
Certificate not after:    Tue 30 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 265757
                          IP: 131.196.176.0/22
                          IP: 2803:9bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14872734 (0xe2f09e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 01:32:45 2019 GMT
            Not After : Apr 30 06:00:00 2024 GMT
        Subject: CN=01589d89842e97c2ec051a7c1b495017e2d59ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:f9:eb:dc:68:23:34:0b:eb:7b:19:35:1e:
                    4f:c7:b0:41:b0:04:86:61:08:c3:09:42:5e:50:7a:
                    fe:bb:b0:bf:51:ce:2f:5c:c1:c9:00:5f:68:ed:cb:
                    d4:51:bb:34:38:e6:e1:78:14:77:f9:05:d6:52:c5:
                    a1:b2:b6:9a:ed:30:26:93:74:75:d7:b8:af:1c:c2:
                    f4:aa:8e:cb:07:51:f2:f5:5e:9b:eb:74:2d:c3:ff:
                    50:04:87:78:cc:1a:fa:d0:f6:7f:6b:87:79:76:ce:
                    37:26:58:e1:fc:d7:bb:95:8b:f2:8f:83:15:d1:99:
                    27:49:f2:29:d5:52:55:01:05:d5:98:ae:bd:b5:5c:
                    18:5b:02:9a:4e:33:ed:d7:67:e7:e4:87:60:96:9e:
                    3d:8a:91:8c:61:fc:2f:2d:f0:0f:4d:26:8e:5d:c6:
                    93:bb:b9:df:53:77:2e:a7:e3:06:02:58:c7:cd:d0:
                    d2:6a:fc:3a:74:21:bd:bf:bb:8b:bc:2f:8b:bf:da:
                    9e:eb:2f:4b:f1:73:05:82:97:64:9d:25:2a:24:9b:
                    e7:2c:e8:24:98:24:5a:d4:f4:d1:ac:c0:d1:47:8c:
                    92:c2:29:be:41:46:b7:90:c2:ab:f2:19:62:36:c3:
                    6f:0b:21:63:b6:18:c4:e1:2e:31:a4:f5:91:7d:d6:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D2:1C:FF:B4:F4:F3:C2:68:AC:52:AC:8C:7E:90:FF:70:66:36:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/01589d89842e97c2ec051a7c1b495017e2d59ba4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.176.0/22
                IPv6:
                  2803:9bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265757

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:c6:79:d5:e0:1f:a1:5c:84:29:8c:c5:9e:90:75:83:79:
         3f:b4:bd:fa:8f:ce:3a:8f:61:d2:10:75:40:f3:09:2c:5f:42:
         da:ac:63:c1:99:50:f0:d3:a3:f4:17:e9:f3:b0:2f:d6:b7:30:
         3c:cc:d1:c2:99:50:b3:bf:b7:1f:4b:a7:00:41:aa:7d:51:ad:
         f1:2b:d4:5d:ec:4e:1b:df:fe:58:28:b1:ba:14:af:6c:29:51:
         ba:89:d6:9d:8b:9f:d8:ed:ca:77:6b:01:55:f0:e8:fd:18:82:
         bf:bf:f8:0c:59:cc:23:61:e2:b3:70:15:3f:55:ba:18:82:f7:
         9f:1c:d4:bb:c3:2a:5f:5e:dc:73:d9:fa:cd:6b:2d:55:cc:e9:
         2c:19:29:3e:d6:a9:96:34:de:bb:63:0d:f7:b6:dd:f3:78:1f:
         62:5a:d9:ed:5d:73:eb:ad:11:93:65:70:d6:6a:8d:9c:1e:0a:
         bf:80:ad:38:9c:5e:e1:39:60:b5:b0:18:f8:40:97:61:1b:23:
         2d:43:a9:12:78:4e:4f:f0:f2:56:30:f4:b8:12:d8:38:af:26:
         11:d2:d9:5d:01:0e:e6:9a:6b:20:30:36:98:a4:e7:94:3b:30:
         ba:63:dc:97:94:c0:b2:b3:7c:11:c0:d4:8a:84:fe:10:69:84:
         06:08:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----