Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer
File:                     285c4851f123355e1dfc7c41d72c849598bfbf31.cer (raw, json)
Hash identifier:          i8I0GRkvZfJ9EMtdXx7OlD+R+k+zXg7BBCqaOa2pT/M=
Subject key identifier:   FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C81DBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/285c4851f123355e1dfc7c41d72c849598bfbf31.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2019 16:16:28 +0000
Certificate not after:    Mon 08 Jan 2024 18:21:28 +0000
Subordinate resources:    AS: 267790
                          IP: 45.169.98.0/23
                          IP: 2803:6fa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13114812 (0xc81dbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 11 16:16:28 2019 GMT
            Not After : Jan  8 18:21:28 2024 GMT
        Subject: CN=285c4851f123355e1dfc7c41d72c849598bfbf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:26:3d:39:49:46:e9:97:b4:fb:c4:d2:6d:
                    db:92:50:56:a2:b5:3b:1f:31:2a:37:d2:38:b0:93:
                    c4:54:d6:1b:7c:75:a6:4c:22:6d:6e:ab:e1:e2:be:
                    80:e9:7f:c2:d9:90:43:d8:02:77:c4:e1:12:fc:25:
                    c3:46:5a:54:f4:13:a3:54:14:be:c1:56:ed:ff:aa:
                    8f:af:ca:b9:23:42:ff:5b:42:67:47:3d:5e:bc:2c:
                    5d:fc:1c:f0:e0:5d:06:32:90:ae:20:b8:13:cf:58:
                    37:3f:55:fa:62:87:a6:4b:38:b9:79:c3:a6:c9:b3:
                    b8:63:41:39:0e:67:47:80:49:00:ff:2c:f2:ed:90:
                    bc:bf:ea:85:fd:54:9e:2d:62:6b:31:01:8c:c2:11:
                    d5:6a:eb:e9:ae:7b:83:c5:f0:18:bc:b3:70:8f:20:
                    94:d9:34:4b:90:bc:22:6a:c8:63:27:e3:f2:de:08:
                    1c:55:17:c8:41:6a:3d:e6:76:03:a1:0c:b9:03:d1:
                    7e:cd:72:8b:81:1a:74:c7:f4:48:16:2a:ae:f1:be:
                    20:2b:d8:d0:53:1d:d6:e4:5f:2d:4b:f2:ba:54:2e:
                    56:43:2c:a6:88:58:53:6a:76:fe:19:31:f6:ec:3f:
                    d0:3f:a6:79:2d:cd:0d:0c:d6:ad:51:8b:68:ec:a3:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/285c4851f123355e1dfc7c41d72c849598bfbf31.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.98.0/23
                IPv6:
                  2803:6fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267790

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:ae:74:34:5f:ac:78:04:3b:01:20:7c:dd:be:2b:6e:e7:
         5d:df:2b:32:56:b0:67:dd:e8:d4:b7:ae:27:77:20:0e:e8:1c:
         d4:8d:10:09:fc:b7:b1:fa:b8:b8:09:a9:83:6f:4b:cc:eb:58:
         0f:1e:bb:e1:4a:31:68:f1:26:0f:88:6b:57:25:f8:0a:69:c2:
         be:15:f0:4d:55:0d:0b:0e:28:0d:6b:57:de:23:e3:0d:a4:77:
         f0:4d:7c:09:78:58:8b:e8:14:8a:78:86:1a:da:c7:6a:eb:a4:
         85:1b:41:ac:b8:9e:d5:d9:09:5e:a8:94:11:d9:3f:d6:78:65:
         d6:6e:f1:70:00:f2:f2:0a:f3:65:55:45:d9:6c:25:42:14:71:
         47:fa:90:d4:42:bc:dd:5d:98:01:58:4c:62:8b:50:6c:0d:df:
         d3:22:6c:d0:92:d9:3c:2e:cf:20:eb:13:1b:b0:e7:1b:c5:04:
         a4:9b:75:ae:37:b6:88:af:d7:0d:4d:cb:3d:93:85:7a:1c:b2:
         50:d4:a1:67:bb:de:d0:ce:16:74:1b:76:62:54:7f:a0:15:b7:
         bb:4b:be:cc:42:75:11:6d:c3:b8:0b:69:79:d9:75:b3:58:0a:
         64:f7:d7:4e:cf:04:9c:49:a5:ef:98:be:94:0c:cd:68:af:43:
         9e:ea:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----