Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15f17e39b2a57eadc93fc47962028588c7fc873f.cer
File:                     15f17e39b2a57eadc93fc47962028588c7fc873f.cer (raw, json)
Hash identifier:          On8YfGxsGI5yx6xSp81/gt2DqPju2vPNQGMNb+ACsK0=
Subject key identifier:   E3:DF:CD:25:F0:87:8C:A8:D3:F8:39:8A:71:EC:BD:31:53:BC:7E:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DABA32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/15f17e39b2a57eadc93fc47962028588c7fc873f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 16 May 2019 15:02:06 +0000
Certificate not after:    Sun 28 Jan 2024 19:19:46 +0000
Subordinate resources:    AS: 267814
                          IP: 45.174.8.0/24
                          IP: 2803:3060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14334514 (0xdaba32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 15:02:06 2019 GMT
            Not After : Jan 28 19:19:46 2024 GMT
        Subject: CN=15f17e39b2a57eadc93fc47962028588c7fc873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:e0:fa:de:33:d2:2b:c5:d9:48:b1:d5:b2:
                    18:77:ce:8f:ae:18:d2:16:12:06:7a:97:36:10:5c:
                    75:c2:37:4e:7e:5b:6e:e7:37:52:18:04:4a:82:7c:
                    b7:0c:e8:14:56:94:53:4a:fc:f0:62:4a:2c:9d:09:
                    e4:90:54:76:21:0e:1e:77:bf:dc:86:a3:c8:46:05:
                    d8:e3:82:26:66:10:af:7b:37:17:43:fa:30:d9:77:
                    b1:95:96:d0:11:99:64:6f:97:aa:0e:fd:d5:24:23:
                    b9:b6:d6:ec:35:18:45:03:d5:b3:9d:d9:88:d5:a4:
                    6f:be:5b:f0:fe:a0:01:e4:8e:1a:26:c0:c1:bb:07:
                    df:49:e4:f8:3a:b9:79:4f:91:98:3b:40:47:74:7c:
                    5e:28:29:86:3d:d6:86:d5:59:b6:2a:56:2b:c6:30:
                    b8:a7:e7:ca:7a:1f:d0:18:30:7e:40:b9:ba:3c:99:
                    7b:7d:d0:27:92:da:37:64:2c:21:28:9c:eb:ce:7d:
                    ea:56:42:7b:57:49:c2:17:c8:27:3e:93:14:9b:39:
                    6e:79:e3:9c:74:6f:6a:02:3f:e5:04:6e:90:fd:7c:
                    eb:cc:e0:ee:02:55:1d:1d:ec:9a:34:71:42:af:f6:
                    87:8b:11:05:09:af:da:d1:f6:30:45:bf:21:84:d8:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:CD:25:F0:87:8C:A8:D3:F8:39:8A:71:EC:BD:31:53:BC:7E:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/15f17e39b2a57eadc93fc47962028588c7fc873f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.8.0/24
                IPv6:
                  2803:3060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267814

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:78:71:83:bf:8d:02:fb:07:83:d8:46:2c:98:b8:db:87:
         ca:7f:31:d3:28:cb:83:91:ac:ea:78:18:ee:e4:39:62:e8:78:
         17:3e:cc:46:05:fd:d2:ed:e3:c0:78:eb:27:c5:20:07:d3:79:
         b4:9e:8b:4c:e1:cf:a0:b8:08:b3:03:a2:95:b3:37:05:aa:d5:
         23:1c:41:40:fd:33:1d:7f:d7:d9:60:0c:06:9c:89:81:c2:08:
         df:62:6f:41:3a:12:5c:c3:98:01:ee:47:7a:ab:11:e6:22:fd:
         94:4d:0e:a4:c6:11:94:3b:e8:4f:52:04:46:05:6e:c7:ff:cd:
         8e:a9:fd:67:1a:14:30:2a:44:ab:bb:b1:8b:25:28:22:53:66:
         9c:94:d3:57:59:ad:f9:4d:46:3f:a9:d2:88:09:5f:5e:e8:6b:
         72:c1:30:22:e0:5b:17:7d:59:35:48:32:0b:e8:ee:87:bf:6b:
         f2:0a:86:18:d5:26:2a:7a:f2:05:2d:e5:2b:10:30:e3:23:f8:
         99:a9:b8:72:75:2b:ba:82:12:8e:7a:f4:e0:57:1f:43:92:d4:
         ce:7f:26:be:83:db:28:d6:dd:bc:37:0a:02:9e:4d:d3:04:a1:
         59:69:19:97:9b:a7:56:cb:f5:91:47:03:0f:d5:73:ea:47:6e:
         de:e8:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----