Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2038cf333d37212ae568919910f421fe64e13d0d.cer
File:                     2038cf333d37212ae568919910f421fe64e13d0d.cer (raw, json)
Hash identifier:          m+fApqhD7lkkBcMwWjr4FHtqhC6svxeqDifn8qISamQ=
Subject key identifier:   93:AE:F1:4F:1D:18:47:3F:84:1F:40:11:40:35:0B:28:44:2D:7E:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD7D17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ece32b6-1c8b-4ac1-94c3-d65f7da4f23a/2038cf333d37212ae568919910f421fe64e13d0d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ece32b6-1c8b-4ac1-94c3-d65f7da4f23a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Nov 2019 05:25:55 +0000
Certificate not after:    Sat 02 Mar 2024 14:42:49 +0000
Subordinate resources:    AS: 267843
                          IP: 45.175.36.0/22
                          IP: 2803:b460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14515479 (0xdd7d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 12 05:25:55 2019 GMT
            Not After : Mar  2 14:42:49 2024 GMT
        Subject: CN=2038cf333d37212ae568919910f421fe64e13d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:99:a5:86:36:67:bf:47:fa:88:55:fe:06:
                    22:d9:67:8c:c1:c2:79:df:7b:e6:0f:70:d5:d9:94:
                    0a:31:4f:5c:5f:83:1d:45:a0:38:6a:b9:93:ad:18:
                    14:ed:13:72:32:7c:42:7b:dc:83:43:fa:19:53:1e:
                    cf:be:21:fb:8e:84:5f:2c:3d:ff:f3:f1:fb:df:74:
                    cc:36:50:eb:32:d7:f7:8f:72:85:f6:89:56:bf:e8:
                    4f:72:04:dd:9d:ce:2c:31:2f:68:f3:a1:3b:27:3a:
                    5d:f9:42:cb:15:31:4c:66:07:fc:5c:7e:88:58:38:
                    b5:b0:40:20:5b:46:1c:4e:f7:9b:a8:cf:69:b9:d6:
                    b6:2d:01:96:96:2f:80:a9:36:c1:7a:a8:f0:3e:6d:
                    f8:f1:88:b0:a5:64:83:d4:8d:4f:36:94:48:9a:4e:
                    fe:ba:9f:34:31:28:f0:3c:98:84:21:50:65:bf:ac:
                    40:31:94:3f:38:19:10:91:6b:4a:13:d1:10:eb:11:
                    d6:79:0c:97:94:fd:f9:c3:55:91:0f:cf:77:90:25:
                    b9:6a:a3:7c:73:b7:bd:06:65:a7:c4:d2:40:81:05:
                    fa:7b:27:2f:a9:ca:4c:d2:fc:21:00:0e:4d:c4:42:
                    2d:33:e3:69:df:de:8b:32:05:43:6e:ba:30:f3:65:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:F1:4F:1D:18:47:3F:84:1F:40:11:40:35:0B:28:44:2D:7E:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ece32b6-1c8b-4ac1-94c3-d65f7da4f23a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ece32b6-1c8b-4ac1-94c3-d65f7da4f23a/2038cf333d37212ae568919910f421fe64e13d0d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.36.0/22
                IPv6:
                  2803:b460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267843

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:3d:71:60:a7:17:f5:9e:b4:05:ce:31:5e:77:ed:ee:62:
         17:f5:a0:f9:df:62:d6:80:e4:23:c8:1b:07:e2:73:e6:b4:0f:
         5f:ab:f7:9f:ba:b2:68:c3:bf:be:c9:a7:bf:15:d3:3b:62:36:
         76:9f:e4:16:d7:87:5f:e8:25:e9:17:6e:ae:36:0f:ee:7c:80:
         e2:59:fe:c1:a5:d1:c3:37:b2:0a:b3:ee:6e:9c:10:e2:5e:64:
         76:9a:8e:b2:49:24:a5:7c:e0:63:97:0d:b8:ec:02:04:d6:6d:
         f8:4a:0f:c5:bc:ee:90:14:db:fb:69:85:35:d4:e6:52:88:fd:
         e7:f8:2f:3d:28:02:d2:ea:c8:b9:3c:d7:17:e3:d9:0a:d1:e6:
         f9:15:37:07:d6:a2:25:37:71:6c:78:f7:c6:9c:69:20:76:78:
         76:fb:d9:99:4a:50:2e:16:72:67:f5:7a:6f:6f:6c:54:cc:44:
         a0:d1:1a:b1:63:1d:b4:1e:55:05:53:43:fc:4b:82:90:9c:dc:
         cf:a1:6d:a2:fa:20:56:a7:94:3b:fd:c0:8a:b3:79:0b:eb:cd:
         70:62:8a:54:e2:9b:c9:b9:1d:d1:d6:7b:0e:b1:a5:46:d8:94:
         fe:e5:0b:8a:9e:cd:9d:93:bd:38:83:54:ae:0e:65:94:4a:2d:
         50:bc:a5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----