Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21ad96db852c56e769dba59f9242b1a51f5ba4ec.cer
File:                     21ad96db852c56e769dba59f9242b1a51f5ba4ec.cer (raw, json)
Hash identifier:          nntv9f1PbhgVgGR2793vQCH2Y9xmT/VUX7dVKIEQXy4=
Subject key identifier:   CB:A4:3C:1B:FB:22:B9:4B:4D:2A:12:AA:05:8A:1E:D6:F6:54:54:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFF071
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/21ad96db852c56e769dba59f9242b1a51f5ba4ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2019 21:21:18 +0000
Certificate not after:    Fri 29 Mar 2024 15:15:50 +0000
Subordinate resources:    AS: 267874
                          IP: 45.175.152.0/22
                          IP: 2803:3260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14676081 (0xdff071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 21:21:18 2019 GMT
            Not After : Mar 29 15:15:50 2024 GMT
        Subject: CN=21ad96db852c56e769dba59f9242b1a51f5ba4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:54:4d:cc:88:a6:62:03:8b:b4:bb:39:ff:
                    46:e6:01:20:0b:23:de:19:f1:7e:81:f1:b2:57:d7:
                    34:8f:ec:03:65:5d:bc:a7:02:35:48:06:5d:d0:cd:
                    55:a2:e4:d3:43:d4:7d:0d:79:d1:57:a5:e3:38:d9:
                    f3:e5:1e:88:12:f1:24:31:74:86:0a:30:ac:25:a7:
                    ef:51:24:78:0f:ee:ee:63:7a:8a:4c:c1:b6:a0:81:
                    17:59:af:98:4a:0e:f7:bc:d6:ac:d5:b7:4d:19:1c:
                    b4:5d:4e:5b:70:27:69:ab:be:cb:cb:82:55:bd:9f:
                    60:f8:c1:1d:67:96:77:28:01:46:81:3b:52:86:cd:
                    83:cd:11:c8:3b:5f:49:9d:14:b0:e9:7b:90:d5:cf:
                    3e:34:c0:b3:70:a8:6a:e6:59:70:b3:fe:9f:36:49:
                    a8:37:c9:4b:33:b5:cf:ac:9c:59:73:10:2a:60:18:
                    ba:fd:4d:29:2c:c9:0d:0f:00:27:93:a3:b8:9b:da:
                    7a:11:d5:79:cb:95:12:7d:2b:a1:fe:65:cc:d8:ed:
                    6f:3f:a7:e6:e4:20:67:58:f9:44:fd:f5:31:12:3e:
                    35:c7:06:0c:8e:e9:93:a6:03:6d:52:5e:70:f2:3c:
                    e0:c2:64:71:89:5b:78:b1:3f:09:4c:99:c5:a5:10:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:3C:1B:FB:22:B9:4B:4D:2A:12:AA:05:8A:1E:D6:F6:54:54:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/21ad96db852c56e769dba59f9242b1a51f5ba4ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.152.0/22
                IPv6:
                  2803:3260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267874

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:71:32:41:b3:ab:10:cd:f8:e2:50:c8:12:0f:ec:34:88:
         18:f3:62:d7:44:94:e6:43:0d:46:77:c0:a5:01:1d:e1:41:9f:
         83:f9:7c:a1:21:59:94:9b:f0:96:90:2b:93:7f:67:1c:58:d5:
         60:55:38:29:23:71:8a:fb:0e:ee:cd:ff:35:07:81:ff:1e:9e:
         6e:bf:64:fb:4a:7f:ed:22:0d:79:90:18:2d:6c:20:ee:3a:77:
         19:eb:f9:b5:eb:87:c7:8a:a2:63:d4:5b:38:b5:06:69:07:fb:
         e5:c1:fc:9e:c1:2e:e1:d0:43:53:02:2a:f2:5b:b2:eb:d3:7d:
         84:f1:19:35:07:43:90:db:f2:4a:15:0d:32:f5:a9:8e:df:9e:
         27:67:bd:ba:97:95:6a:43:5b:b2:a5:2e:ad:63:4b:40:97:bc:
         e4:9d:dd:34:6b:77:a9:9d:f6:e2:9f:9e:52:47:7c:72:0a:85:
         99:ac:f6:59:52:c4:a3:af:8a:e3:5a:39:f6:b7:92:6c:a3:32:
         b7:b1:bc:2f:86:b8:8d:b4:2d:6a:f0:fe:62:7a:07:fe:ae:c1:
         e4:33:18:b5:13:70:98:d3:e8:01:f5:14:c8:f8:aa:79:93:4e:
         43:b8:2c:77:45:66:b8:92:f4:48:29:ed:79:62:61:02:b6:bc:
         a6:d1:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----