Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer
File:                     23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer (raw, json)
Hash identifier:          MgKRPbeOJuFo/lMjbzVaiYnMrRkHNukgdBaR4blXu9o=
Subject key identifier:   D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E01CCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 May 2019 20:49:10 +0000
Certificate not after:    Sat 30 Mar 2024 19:56:23 +0000
Subordinate resources:    AS: 264732
                          IP: 45.177.144.0/22
                          IP: 170.233.68.0/22
                          IP: 2803:8a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14687434 (0xe01cca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 20:49:10 2019 GMT
            Not After : Mar 30 19:56:23 2024 GMT
        Subject: CN=23604b73c22ca1f7419d3ca4dccb9ce28f4435a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:0d:a7:ff:4c:29:dd:b9:15:61:f3:35:1a:
                    e7:49:84:c0:15:f4:4c:7e:92:7c:bd:45:82:db:42:
                    8d:49:61:6d:52:83:bb:ef:99:eb:aa:b0:54:43:dd:
                    31:00:15:f0:56:21:a2:00:1c:20:f1:98:9b:40:a0:
                    47:28:9d:c1:72:4b:0e:63:dd:4e:27:ff:fd:52:c2:
                    ef:dd:74:b0:60:74:27:dc:88:57:86:35:18:64:f8:
                    e6:6a:e8:19:58:7d:bf:f4:8c:dd:e1:4c:4c:f2:12:
                    49:34:d9:a4:71:84:9e:4a:80:8c:bf:86:5c:61:d9:
                    95:19:27:65:2c:58:8f:ed:96:5a:aa:dc:1d:c4:6f:
                    a2:bd:08:f7:93:d0:72:e6:3f:d5:82:58:f6:36:00:
                    6d:0e:0c:94:f9:63:b6:1e:e6:56:3e:65:c6:52:4f:
                    16:69:dc:5a:64:3c:ef:f5:b9:79:10:50:31:e9:b8:
                    af:9c:f5:4b:ef:92:65:24:28:e3:92:83:8b:a1:b2:
                    58:14:64:c7:66:c8:a8:05:08:29:61:7a:16:cb:58:
                    5a:7a:43:30:77:00:e8:71:44:d9:e8:bd:df:59:0d:
                    25:13:7a:52:ed:3d:d2:a5:f3:d1:a9:08:e1:a6:eb:
                    a8:17:c3:27:73:65:e8:79:20:ba:95:01:75:c0:4b:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.144.0/22
                  170.233.68.0/22
                IPv6:
                  2803:8a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264732

    Signature Algorithm: sha256WithRSAEncryption
         13:55:31:06:97:f2:0c:fa:01:5a:c6:55:dd:94:c9:b7:b7:83:
         f0:00:e7:f1:24:05:24:7f:98:01:a8:f3:a5:74:a6:3c:f7:32:
         83:e0:79:73:ab:f4:7f:2f:43:97:5c:eb:84:bd:58:44:16:9f:
         1e:a9:27:85:f0:fb:bd:6d:07:51:c1:83:c2:9d:a3:01:42:5a:
         82:73:ca:1d:67:db:d6:56:93:3e:1d:3c:3d:21:00:70:68:79:
         69:bb:22:ba:12:d4:58:c6:13:93:5c:36:20:93:9f:d9:6e:66:
         c6:ad:47:7f:b1:c8:6e:17:9c:82:a6:ad:8c:1a:24:4d:07:5a:
         d0:c9:59:fb:5e:0e:b1:09:2f:f1:78:e2:d9:f4:5e:02:46:20:
         1e:44:6d:36:bb:ac:65:28:ee:29:d7:d2:3d:da:d4:a7:71:a3:
         24:a8:bc:d8:e6:09:8a:65:13:c2:2b:6c:b8:8d:5c:6f:79:e2:
         e4:0d:7c:b5:0f:55:41:16:0a:75:6f:9d:81:62:42:f1:9d:f1:
         e7:3b:29:9f:1b:75:92:b0:85:87:40:1e:c9:bd:89:d0:9c:3a:
         14:9c:8b:79:a8:61:de:f9:a9:3a:52:27:04:c9:f1:ad:22:ce:
         26:53:45:27:3a:71:96:c9:3d:74:5f:a3:42:5c:c0:aa:61:4b:
         06:9a:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----