Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2086a00004044e8c0e8b528587668a00a96069ba.cer
File:                     2086a00004044e8c0e8b528587668a00a96069ba.cer (raw, json)
Hash identifier:          Y1hmuGoPG1PbY1PnAocM+yE631dvCguamCk9cbVLUQA=
Subject key identifier:   C9:6D:B0:C9:47:6E:B3:BC:86:FB:1C:7B:0F:4B:BD:EE:8C:78:0A:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD1DEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/2086a00004044e8c0e8b528587668a00a96069ba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 May 2019 12:52:55 +0000
Certificate not after:    Mon 26 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 267842
                          IP: 45.174.224.0/23
                          IP: 192.92.154.0/24
                          IP: 2803:9460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14491116 (0xdd1dec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 12:52:55 2019 GMT
            Not After : Feb 26 06:00:00 2024 GMT
        Subject: CN=2086a00004044e8c0e8b528587668a00a96069ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:89:70:6c:f8:d3:14:66:ab:52:df:80:35:c3:
                    89:fd:9f:29:81:50:96:a3:ff:90:f6:ec:68:70:41:
                    e3:dc:45:52:d7:0c:81:4e:30:0a:bd:4a:a3:9e:b7:
                    d5:43:a2:35:01:55:87:f0:e7:da:b1:da:e0:57:e0:
                    11:c4:fb:7b:1a:13:91:a7:5e:cf:76:7f:4b:1c:fc:
                    9c:7f:44:1d:c5:38:cb:3d:9d:90:19:2d:86:84:d9:
                    b9:4e:df:e7:ac:ae:b6:1d:b2:c2:58:e2:e2:03:5d:
                    e5:9a:54:29:ba:4f:93:de:94:f6:fd:61:88:ae:b8:
                    50:62:13:6e:5c:e6:2f:6f:eb:23:78:4c:f9:e8:ae:
                    36:ba:ed:c7:4d:39:80:81:26:23:21:a3:06:0c:46:
                    d2:ed:f3:40:5d:7d:01:52:4f:7d:df:4a:b3:ed:3f:
                    2d:d9:8e:4e:9d:cc:74:99:f6:79:21:40:ea:e8:ff:
                    52:7c:17:d8:64:37:40:d6:85:91:a1:bd:a8:b7:6a:
                    2d:03:74:40:79:bf:77:25:6b:9b:aa:c4:88:73:03:
                    58:45:10:7a:6a:cd:92:74:5e:ac:80:28:b0:bd:c1:
                    f5:ea:df:e5:c1:d1:94:40:6f:93:9f:ad:82:b8:a7:
                    6d:35:94:58:18:b4:10:0b:ed:93:eb:11:3b:c9:43:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6D:B0:C9:47:6E:B3:BC:86:FB:1C:7B:0F:4B:BD:EE:8C:78:0A:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/2086a00004044e8c0e8b528587668a00a96069ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.224.0/23
                  192.92.154.0/24
                IPv6:
                  2803:9460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267842

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:59:44:a7:28:d9:8c:33:9d:43:64:fa:8a:4c:32:5c:1c:
         ca:53:98:40:bc:b5:08:4c:7f:36:28:62:92:08:8d:84:9d:76:
         79:26:0a:61:b7:7a:75:ff:35:15:a6:f1:e9:99:b9:fd:b3:ac:
         b0:ae:1c:72:dd:35:4a:88:67:4f:bf:4c:40:a1:60:96:33:9d:
         b5:5b:32:02:e9:d9:95:d3:5c:cc:39:e9:0a:a0:a1:36:81:ed:
         90:52:6f:b8:96:8a:74:dc:2b:5f:12:98:de:d6:78:b2:ef:71:
         2d:25:f2:fb:25:47:71:27:12:64:01:b6:8f:a3:99:fc:7f:fc:
         cb:e5:04:61:75:ac:69:6a:ea:f7:7d:6f:36:d9:01:51:75:d8:
         bf:f8:59:2c:31:16:d4:d4:43:e9:12:19:1c:26:92:37:0a:d0:
         65:a9:8f:b3:1e:b3:a9:92:ff:48:e0:62:cf:0c:31:9e:19:06:
         09:dc:f3:fe:a3:cc:cb:35:e1:a5:19:da:12:f0:d0:9d:b6:78:
         a3:0c:0d:5b:7c:b2:3e:3a:74:8e:29:0b:8f:77:fc:36:49:1a:
         a0:ea:49:84:6e:88:f3:69:c1:75:68:40:d0:f5:df:0e:40:e6:
         52:22:bc:c9:a6:26:ca:78:4d:be:83:43:31:3f:0e:02:64:66:
         9a:bd:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----