Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/267901a0dba7eaf7768dde6b7888801b4e98b0b6.cer
File:                     267901a0dba7eaf7768dde6b7888801b4e98b0b6.cer (raw, json)
Hash identifier:          rOe3ttM6aufHPgBXiD3o3sY2NacKjLTgUbb5QJS2My8=
Subject key identifier:   94:F8:91:6E:F3:E1:6E:9F:5B:12:F9:FE:AF:AE:0D:DB:1F:4C:02:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2AF4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/059f08bb-f16f-4978-9cc6-fa34c1a09bab/267901a0dba7eaf7768dde6b7888801b4e98b0b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/059f08bb-f16f-4978-9cc6-fa34c1a09bab/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2019 15:41:51 +0000
Certificate not after:    Fri 23 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 26610
                          IP: 200.1.16.0/20
                          IP: 2800:270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15904591 (0xf2af4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 15:41:51 2019 GMT
            Not After : Aug 23 15:00:00 2024 GMT
        Subject: CN=267901a0dba7eaf7768dde6b7888801b4e98b0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:97:9c:58:da:42:13:bc:ca:c0:c7:59:64:
                    b9:99:b4:41:24:9a:fb:6f:00:10:4c:45:3a:b4:22:
                    68:f5:d2:78:ed:f2:77:1c:ad:ee:74:1b:eb:ab:4d:
                    8c:44:e0:1b:c9:1a:34:0a:62:6f:88:91:01:1c:69:
                    52:c0:e9:fd:e7:7e:ee:1d:b5:cb:96:c9:6a:73:cf:
                    50:82:b1:77:c8:a5:12:cb:01:43:6a:7b:a9:21:1f:
                    88:1d:70:ba:ba:9d:6e:6f:3d:81:44:96:ab:5c:8f:
                    ee:fe:06:85:e8:f8:79:65:b7:d5:20:65:42:f4:67:
                    57:70:1a:a5:07:c0:37:33:71:db:b1:c3:55:e9:74:
                    dc:31:31:a7:ac:03:82:b6:f5:f0:8f:04:ac:c3:8b:
                    12:0a:5b:c3:65:2e:e5:ec:d1:56:bf:1a:fc:74:e9:
                    ae:89:aa:05:af:76:6e:45:53:8f:38:72:91:57:6a:
                    e7:4f:42:55:dc:49:67:4f:54:d2:fb:ea:c5:e3:78:
                    7c:8d:fd:0e:32:2f:c2:62:60:08:e8:35:13:87:77:
                    5b:0d:c5:f4:8e:eb:af:23:34:c9:97:97:cf:7f:a4:
                    cf:62:4a:73:3d:a3:a1:85:9d:9f:74:46:0b:e3:85:
                    81:4d:ef:d7:0b:e2:fd:63:6b:36:56:34:02:e7:d7:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:91:6E:F3:E1:6E:9F:5B:12:F9:FE:AF:AE:0D:DB:1F:4C:02:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/059f08bb-f16f-4978-9cc6-fa34c1a09bab/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/059f08bb-f16f-4978-9cc6-fa34c1a09bab/267901a0dba7eaf7768dde6b7888801b4e98b0b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.16.0/20
                IPv6:
                  2800:270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26610

    Signature Algorithm: sha256WithRSAEncryption
         a6:cd:4c:8d:c6:13:24:9a:23:56:bc:69:fd:ee:83:78:8e:b5:
         d5:24:af:d3:10:78:6e:b5:2b:b1:0c:a0:a5:1b:2c:95:e2:41:
         93:74:9a:3b:42:be:ab:50:88:2a:48:d6:4f:97:94:c3:1b:df:
         5c:71:b8:97:09:bc:0c:bb:46:46:fb:d8:dd:1b:70:30:a7:11:
         46:dd:51:b6:2b:63:4e:ad:dc:8d:2a:f7:02:4c:ae:d2:a7:2c:
         cc:b4:29:c3:8e:51:73:8a:e5:1a:0b:c5:a3:32:69:01:7d:42:
         2c:4f:fd:3e:5f:5c:4a:dc:7f:ba:c2:b0:33:71:e0:7e:3f:de:
         bc:02:6e:c2:86:7e:c1:6d:18:20:f7:8f:3b:1e:cc:d7:ef:4d:
         6d:94:ca:24:35:9a:60:df:a2:2e:2b:04:37:55:a7:e0:ea:b0:
         eb:69:58:80:a9:ec:bb:bb:e5:14:fb:58:7e:7f:d8:91:43:83:
         da:d9:4a:5e:f9:67:e5:34:6a:51:cf:87:45:3d:c3:21:06:2d:
         b6:1c:f9:e2:25:eb:05:e2:fb:65:25:d8:af:3d:77:2b:7e:82:
         7b:3d:25:67:3e:e4:3f:ff:78:67:b0:29:d7:ed:dd:fe:77:31:
         a0:c2:0b:0f:0d:17:68:a7:47:db:ed:cf:de:5b:81:c2:0f:15:
         b5:8c:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----