Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bb457acda75f5283f608e48db8eea3b601f0a2.cer
File:                     19bb457acda75f5283f608e48db8eea3b601f0a2.cer (raw, json)
Hash identifier:          ITPxd0EWfhHIUCZQqBgOAdYXNtKexvnR4SpiEcAFnnc=
Subject key identifier:   81:CB:FA:ED:CD:35:1D:A3:36:1A:0B:0B:15:FB:98:4D:52:A0:C6:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEA8AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/19bb457acda75f5283f608e48db8eea3b601f0a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Nov 2018 20:54:00 +0000
Certificate not after:    Sun 21 Jul 2024 22:09:34 +0000
Subordinate resources:    AS: 267684
                          IP: 45.163.204.0/22
                          IP: 2803:dea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15640747 (0xeea8ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 15 20:54:00 2018 GMT
            Not After : Jul 21 22:09:34 2024 GMT
        Subject: CN=19bb457acda75f5283f608e48db8eea3b601f0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:f1:aa:7c:83:ca:4f:06:8a:56:30:75:b5:
                    0a:a3:fb:1b:35:43:22:ca:f6:ba:34:05:59:40:a4:
                    c8:4e:5e:d8:1f:00:ea:0b:2c:41:aa:38:0d:b2:3c:
                    eb:87:fe:59:b6:6a:53:c7:a1:b8:33:57:30:af:ba:
                    6b:7f:35:44:64:47:4e:e8:f8:9c:f5:25:f2:71:5d:
                    9a:8f:f4:61:85:88:32:b6:ce:42:1f:66:ed:52:f6:
                    69:6e:42:59:bb:11:70:c3:0f:97:8e:a7:bc:12:7c:
                    7b:67:67:95:3c:9b:28:b1:c9:cf:d9:e2:76:bd:2b:
                    6d:b4:90:90:35:8c:14:b1:96:a7:cc:a3:cb:39:25:
                    02:a5:6b:7d:3c:c3:5f:c0:23:28:00:42:ab:16:f7:
                    13:2e:a8:eb:12:a4:b1:bf:8c:8d:85:3c:49:a2:bb:
                    9f:f4:f4:2a:e8:19:40:47:f3:2f:1d:2e:c5:69:4e:
                    df:34:a3:0c:d2:a7:a0:63:71:e8:7f:8b:9b:d3:43:
                    33:eb:71:7f:54:4b:2a:db:23:7e:c1:0f:5a:a1:21:
                    4c:78:5e:27:73:42:85:14:7c:cd:75:4a:c7:51:0f:
                    0c:2c:c5:3b:9a:ba:9a:7e:31:50:53:fc:63:a7:59:
                    ed:03:31:6f:e3:f0:87:a1:f7:72:d8:f6:24:81:15:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:FA:ED:CD:35:1D:A3:36:1A:0B:0B:15:FB:98:4D:52:A0:C6:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/19bb457acda75f5283f608e48db8eea3b601f0a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.204.0/22
                IPv6:
                  2803:dea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267684

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:3f:73:d4:bf:dd:8e:05:16:27:77:85:f6:d9:d3:b6:26:
         58:85:ee:59:ad:12:00:fd:ee:e7:e2:c2:f3:58:1b:74:01:bc:
         67:9f:75:db:af:d0:ca:99:d4:fa:df:d2:77:d7:df:aa:bd:43:
         ea:4d:cc:0f:9f:74:c8:d3:97:3a:f4:b3:50:3a:8a:59:e4:af:
         d1:f1:b2:4e:5c:14:63:4b:80:40:3c:3c:44:8f:ee:3e:f0:2e:
         16:bb:37:46:9a:72:a7:c2:2e:20:50:e3:02:a6:c9:09:bf:35:
         de:24:04:70:57:54:03:ca:98:4c:67:89:d0:2a:1e:b2:69:ed:
         1e:fe:c1:69:e9:3b:8b:24:c5:78:1f:85:04:68:54:27:5d:ec:
         cc:c5:bb:15:16:09:25:0f:ca:d1:ab:dc:9e:26:bb:33:0a:72:
         5c:24:0b:94:05:07:c5:a2:b7:52:70:89:7c:4f:c9:26:14:43:
         d7:6d:2c:0d:65:22:bf:e6:37:97:4b:e0:3a:6c:4c:0c:e2:91:
         69:6a:a4:ce:b6:61:4b:b0:79:1a:25:87:dd:8e:03:05:0f:dd:
         e3:82:6b:a6:52:bf:f2:5a:17:84:4f:16:9e:4f:52:e6:0e:a5:
         be:5c:ef:e7:2f:05:24:56:ef:56:75:1f:b5:23:dc:e8:f1:12:
         54:5a:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----