Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e6344666672adea74e1ef5f707cf25027a74f0b.cer
File:                     2e6344666672adea74e1ef5f707cf25027a74f0b.cer (raw, json)
Hash identifier:          8iL99QjydSQ8g7bmLHquQcqzK4RFUB1gQXkYjdiMz1o=
Subject key identifier:   2B:C6:67:BC:43:18:2F:9D:D1:E2:04:CE:E9:05:D0:30:BF:74:6A:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F34542
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/2e6344666672adea74e1ef5f707cf25027a74f0b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2019 16:21:48 +0000
Certificate not after:    Thu 29 Aug 2024 20:12:58 +0000
Subordinate resources:    AS: 263699
                          IP: 131.255.60.0/22
                          IP: 138.117.200.0/22
                          IP: 167.249.196.0/22
                          IP: 168.194.52.0/22
                          IP: 2803:5b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15942978 (0xf34542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 16:21:48 2019 GMT
            Not After : Aug 29 20:12:58 2024 GMT
        Subject: CN=2e6344666672adea74e1ef5f707cf25027a74f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:ce:c1:89:59:c5:8e:6c:a1:39:80:d7:c6:
                    b9:db:28:93:a0:42:dd:83:77:f3:60:9a:81:37:f2:
                    58:fc:8b:6b:d1:02:d1:69:8a:94:bf:c9:32:75:fa:
                    e8:95:03:97:6e:86:44:07:6b:27:be:26:39:a6:b1:
                    ff:75:b2:06:4c:cc:7a:13:96:e7:d5:2e:ec:1e:99:
                    6d:55:91:a9:c7:be:12:52:3a:23:94:57:c0:6d:d7:
                    f7:e0:19:93:ec:11:b2:b5:67:22:5f:80:78:a7:6a:
                    7d:e7:18:29:d5:aa:2d:5b:26:71:3d:f2:85:26:cf:
                    23:8f:41:fd:96:24:31:65:92:2f:ab:a2:94:e5:29:
                    1f:35:19:15:78:7c:1f:d6:ed:b5:38:35:02:8d:3f:
                    5b:6c:ea:5d:c9:7a:de:c0:4f:bc:61:0c:ba:bb:e6:
                    81:c9:7e:02:de:e2:95:22:29:61:2e:a7:cd:5a:4e:
                    14:21:f6:c7:50:ec:d2:c9:13:9f:cb:70:85:e1:ba:
                    7d:3e:a2:15:eb:86:e5:f2:72:dd:17:e0:fb:33:ae:
                    f9:a8:d0:61:c7:70:58:e3:1c:15:60:ed:32:65:d4:
                    32:83:05:3e:62:64:b2:55:7e:c8:3f:12:05:af:74:
                    e7:08:43:d0:77:95:ad:bb:39:c4:60:24:c5:c6:4b:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:67:BC:43:18:2F:9D:D1:E2:04:CE:E9:05:D0:30:BF:74:6A:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/2e6344666672adea74e1ef5f707cf25027a74f0b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.60.0/22
                  138.117.200.0/22
                  167.249.196.0/22
                  168.194.52.0/22
                IPv6:
                  2803:5b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263699

    Signature Algorithm: sha256WithRSAEncryption
         66:3c:07:d0:34:1b:f0:75:02:db:71:c1:02:03:be:0a:ef:79:
         47:a6:bc:77:f3:04:39:11:c2:4d:59:2b:5e:09:9e:b4:c6:75:
         61:f7:8e:29:67:2f:2c:9e:64:8f:92:92:a4:59:63:05:fd:79:
         bc:dc:67:33:f9:55:ea:50:2a:b5:68:91:a9:de:9f:d2:cb:8e:
         89:18:5e:f1:58:d3:96:78:48:7e:16:c7:0f:93:a4:d4:42:cd:
         e4:65:e1:bc:18:89:ec:16:c8:a3:a7:51:89:25:9f:db:73:b9:
         a9:d5:d7:cd:cb:eb:86:8a:56:4d:f3:90:93:d5:e4:6b:51:dc:
         63:31:73:c8:90:d1:9c:1e:94:80:c2:2d:04:fb:2f:22:89:54:
         fd:45:16:88:d5:a3:8a:d3:91:c6:13:69:5e:70:ce:8d:b1:e7:
         01:b0:69:e0:40:72:95:44:ce:4f:d9:c6:ac:d6:8f:98:6d:d1:
         6c:99:f6:4a:cb:64:f8:22:49:4d:a6:45:f2:ae:85:3b:65:3d:
         2c:ed:55:7e:82:0a:ca:c5:e4:0d:c2:c6:c2:62:c2:ea:b9:19:
         9f:8a:56:fc:14:61:80:1c:68:9a:c6:43:d6:68:0b:3f:e2:c4:
         bf:91:16:e9:a2:93:75:7f:b2:1f:22:43:09:e3:86:a2:dd:e5:
         cb:dc:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----