Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.cer
File:                     1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.cer (raw, json)
Hash identifier:          raZv6FFEshZfNA6eG2BbERcGXwfvJllc1rXgIo1wXrs=
Subject key identifier:   12:21:AF:42:6F:04:C8:EC:87:30:BE:5C:A6:78:F0:AE:16:8A:1C:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF491C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2019 21:01:35 +0000
Certificate not after:    Thu 25 Jul 2024 18:54:52 +0000
Subordinate resources:    AS: 269790
                          IP: 45.182.119.0/24
                          IP: 2801:1a:4800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15681820 (0xef491c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 21:01:35 2019 GMT
            Not After : Jul 25 18:54:52 2024 GMT
        Subject: CN=1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:49:5d:93:d7:61:0e:3b:dd:54:77:6b:65:
                    22:64:ba:5d:88:30:90:5f:d4:5d:22:8b:36:2c:93:
                    77:15:b3:18:67:6e:2d:ae:4a:20:6b:e8:55:92:f7:
                    83:e5:b1:86:fa:af:d4:b8:f2:f0:99:75:7d:7a:d0:
                    9b:00:41:ee:41:8a:4d:c9:b5:81:0c:aa:dd:b0:e2:
                    71:05:84:97:eb:fc:ec:60:22:b1:99:5a:4f:c7:99:
                    6f:df:68:7f:2b:23:04:c2:57:56:d1:b5:73:bf:06:
                    05:90:88:92:3b:ad:76:10:7f:22:6d:9e:d2:cb:1b:
                    85:14:c8:d1:ec:41:b1:62:69:e6:a8:3e:2e:38:9f:
                    b1:b2:dc:83:41:de:00:ce:31:c5:64:a1:03:15:7a:
                    5b:9e:ec:2b:24:c7:4c:b0:f8:5e:fe:d0:4f:7c:9a:
                    98:13:92:c8:1c:fe:fe:84:d1:ea:0f:0d:f8:28:fd:
                    a6:e3:72:27:15:7e:ac:b8:9c:87:99:19:67:e9:e8:
                    f3:d3:af:32:0e:4e:8e:23:63:a1:3c:e4:a1:8a:18:
                    97:ee:d0:d9:7d:7f:b5:22:c1:bf:0d:bc:25:06:89:
                    04:28:ba:e2:12:c2:0d:2b:9a:fa:7a:62:45:b8:46:
                    00:0f:1b:d2:b0:b3:b0:01:ae:6f:67:ea:ce:b3:f1:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:AF:42:6F:04:C8:EC:87:30:BE:5C:A6:78:F0:AE:16:8A:1C:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.119.0/24
                IPv6:
                  2801:1a:4800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269790

    Signature Algorithm: sha256WithRSAEncryption
         1a:62:a3:43:88:6d:f7:41:27:20:d2:4e:b8:43:b3:ae:02:ec:
         67:b9:f9:e2:6b:1d:c2:7b:e3:23:9f:82:77:5e:9d:1f:f2:78:
         a7:d5:23:8f:28:9c:01:c6:13:8b:0c:ba:f6:bc:8e:d2:23:a8:
         f8:17:7c:8a:1a:2d:f3:c2:d6:fc:98:91:ed:c6:13:24:e8:b5:
         96:8e:83:88:92:58:5e:27:a4:b9:d5:d9:c6:f7:1a:e8:08:68:
         f2:b8:02:38:7b:ac:c5:43:5b:87:e1:db:60:a3:6b:92:fb:e4:
         0f:e6:3c:f9:ff:3e:96:18:87:6a:c0:15:13:11:ef:39:9d:84:
         a0:79:45:73:6b:60:79:42:34:49:a5:bd:0e:5a:96:85:16:e5:
         06:df:ce:68:dc:7e:3a:0b:d3:12:38:c8:87:44:bb:47:e6:11:
         99:ef:78:84:f4:a2:b5:b9:06:5a:60:70:27:8d:97:33:e9:4a:
         30:9d:f0:27:f2:4b:52:02:08:24:a1:51:95:62:b7:8d:d0:6f:
         ef:aa:35:3b:3d:cd:7c:a1:e7:2e:de:51:67:8d:87:8c:24:2b:
         90:e4:8a:af:16:0a:59:87:76:8f:5f:6d:b8:33:07:48:92:19:
         6b:27:24:e2:1b:36:de:9d:08:b0:32:42:4e:c3:fe:5a:5e:2a:
         d4:82:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----