Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/229e14e1449161ca1ac2a429fed0fa437ed61d5f.cer
File:                     229e14e1449161ca1ac2a429fed0fa437ed61d5f.cer (raw, json)
Hash identifier:          vQPAe5nLP5noO3bmgKYWmtoraN9G33Lry9xa/L5Bhws=
Subject key identifier:   6E:41:47:5C:5E:1B:91:A7:40:2E:53:7B:57:9D:68:13:FB:56:95:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF4EBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d02894a5-dc30-40db-ba52-2f5a2abf4e0c/229e14e1449161ca1ac2a429fed0fa437ed61d5f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d02894a5-dc30-40db-ba52-2f5a2abf4e0c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jun 2019 17:14:44 +0000
Certificate not after:    Thu 21 Mar 2024 17:40:45 +0000
Subordinate resources:    AS: 267861
                          IP: 45.177.88.0/22
                          IP: 2803:4260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14634686 (0xdf4ebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 28 17:14:44 2019 GMT
            Not After : Mar 21 17:40:45 2024 GMT
        Subject: CN=229e14e1449161ca1ac2a429fed0fa437ed61d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:23:69:11:85:21:9c:43:aa:aa:be:dd:8d:
                    97:cf:05:ae:16:e9:1a:40:df:c1:55:da:76:12:60:
                    dd:24:1b:34:80:33:ea:27:dd:0d:7c:62:a9:ae:4f:
                    e6:65:0b:8b:ea:1e:24:85:7e:f0:f3:b7:95:2e:6b:
                    ae:55:cf:46:7b:f0:8d:7d:b9:b8:c7:e7:e9:1d:98:
                    58:6d:1f:d6:46:00:31:9a:6b:52:fc:3c:76:51:80:
                    c9:ff:d3:20:ff:32:ee:10:f6:d8:1e:2a:91:17:d0:
                    e6:04:60:97:07:de:65:b4:33:c3:4c:7a:92:28:8f:
                    55:5a:ef:24:45:eb:0d:64:dd:97:f4:7a:de:d4:e3:
                    8e:79:a0:d8:aa:75:8f:e5:f8:39:aa:a8:a2:a0:3e:
                    7a:e5:52:85:c6:4b:42:74:f2:aa:a4:ca:12:d2:16:
                    f8:dd:0e:47:d6:f5:0b:c0:c0:82:44:dd:75:f4:c3:
                    8d:6b:c2:7b:90:10:09:f6:f2:28:37:70:a0:d9:62:
                    eb:ab:98:e5:3c:fa:8e:0c:e6:93:d1:35:80:3a:96:
                    31:cf:79:bb:9d:89:34:08:ee:b8:e7:6d:f7:7c:c2:
                    28:7c:ff:3e:29:d3:62:53:74:f7:fd:a9:a9:19:9b:
                    54:6d:e0:75:44:f6:9d:6f:dc:0a:9a:a7:dc:cb:30:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:41:47:5C:5E:1B:91:A7:40:2E:53:7B:57:9D:68:13:FB:56:95:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d02894a5-dc30-40db-ba52-2f5a2abf4e0c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d02894a5-dc30-40db-ba52-2f5a2abf4e0c/229e14e1449161ca1ac2a429fed0fa437ed61d5f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.88.0/22
                IPv6:
                  2803:4260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267861

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:72:68:0f:5e:ee:76:96:33:9b:9a:6b:0f:42:25:19:8d:
         f3:d1:c3:04:a8:77:91:ae:51:db:ce:e7:f4:db:e2:82:4a:0c:
         ae:13:a1:02:98:bb:8a:f3:49:a2:65:97:69:af:42:0c:9c:13:
         2c:92:4b:21:89:ec:f5:14:a5:b4:d6:81:9d:45:46:f9:2c:24:
         28:1d:74:cf:3f:b4:27:dd:f6:9e:60:13:0a:d2:d8:d3:17:5f:
         f3:43:dd:e5:52:d4:6c:54:42:64:2a:0b:f0:13:8e:e8:0f:00:
         0c:ca:71:43:b1:2e:8e:fe:c8:68:53:94:67:1f:82:ef:08:70:
         78:61:f4:79:69:dc:2c:4d:2e:93:a2:93:7e:62:62:25:1c:8e:
         2b:cc:ae:ca:7d:7b:fe:6a:10:1e:df:8a:98:d0:d6:9e:41:1b:
         36:bb:b2:75:f7:87:61:5b:4d:a6:36:e3:81:ab:b0:c8:a9:84:
         fe:44:59:f6:71:9b:33:93:53:fc:11:5e:98:2b:49:8d:36:c6:
         d8:f5:50:d9:66:3b:f5:b7:f2:c6:12:2d:11:a4:ec:35:1f:c8:
         67:11:79:13:69:57:01:86:9e:68:8d:ef:83:2c:b3:75:13:61:
         45:2d:3f:e0:49:e1:0c:9c:4e:cc:c5:55:d8:6c:c7:03:98:c5:
         7b:82:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----