Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f5ea5cab5f39880d333b2b821806adf925a890b.cer
File:                     2f5ea5cab5f39880d333b2b821806adf925a890b.cer (raw, json)
Hash identifier:          cGqz14WHVrRKFxaRodwTYie5BTMuEpbnGYFFmgQ1U68=
Subject key identifier:   F6:2F:44:19:D6:F2:47:48:72:DD:9C:C9:87:80:4A:C2:A7:4D:A1:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7096D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e98ed21b-0abf-4e83-93de-399249dee187/2f5ea5cab5f39880d333b2b821806adf925a890b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e98ed21b-0abf-4e83-93de-399249dee187/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 May 2019 22:55:46 +0000
Certificate not after:    Sat 28 Sep 2024 22:12:29 +0000
Subordinate resources:    AS: 267732
                          IP: 45.167.120.0/24
                          IP: 2803:35a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16189805 (0xf7096d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  7 22:55:46 2019 GMT
            Not After : Sep 28 22:12:29 2024 GMT
        Subject: CN=2f5ea5cab5f39880d333b2b821806adf925a890b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:9c:39:2e:a6:a7:5d:53:de:9c:e2:12:ed:
                    36:ca:98:04:5f:7b:9c:28:9d:84:a2:ef:bc:ce:fd:
                    05:86:6c:34:6e:13:2d:18:72:64:e9:78:45:8b:12:
                    78:c7:cd:36:6c:30:f9:d0:dc:bd:8f:78:5b:e6:6e:
                    ce:fc:0d:e5:15:f5:bb:cc:88:78:a3:72:04:39:b9:
                    ac:f4:f3:96:6a:22:2e:93:05:4c:36:77:e7:2b:95:
                    15:e1:14:a3:9d:22:30:b1:cd:5c:42:8a:31:de:aa:
                    17:23:64:32:7b:65:be:aa:07:c7:3b:ca:6e:47:34:
                    9b:8b:fc:a5:0b:e4:a4:59:4f:cb:76:76:28:d9:06:
                    8b:57:af:97:7f:90:e4:17:01:85:14:d8:63:e1:ed:
                    76:78:2b:e6:0d:20:fd:c4:9a:8d:98:c5:fa:3c:3b:
                    fd:61:7c:a6:9a:8e:a1:79:6c:ea:4f:e2:b4:8b:34:
                    a7:8d:26:f6:c0:e4:c5:82:7c:e4:93:42:43:41:df:
                    10:b6:1a:61:f0:e1:ec:43:28:04:31:50:72:6f:03:
                    f8:91:a6:d5:ff:af:9f:26:84:e1:3a:2d:e9:ce:06:
                    4f:ae:07:90:ec:de:15:57:66:39:dd:62:27:bf:30:
                    07:04:95:d6:56:a3:bf:a8:04:14:73:e2:e8:1d:da:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:44:19:D6:F2:47:48:72:DD:9C:C9:87:80:4A:C2:A7:4D:A1:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e98ed21b-0abf-4e83-93de-399249dee187/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e98ed21b-0abf-4e83-93de-399249dee187/2f5ea5cab5f39880d333b2b821806adf925a890b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.120.0/24
                IPv6:
                  2803:35a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267732

    Signature Algorithm: sha256WithRSAEncryption
         27:68:5b:6a:0a:60:24:93:2b:8a:7b:04:71:98:25:7b:27:6d:
         0d:b8:a9:81:ba:c6:79:94:a7:14:a0:c5:93:e8:11:b3:61:0e:
         76:c1:74:2f:85:99:b1:16:94:78:21:09:06:29:f2:7c:2b:64:
         6b:fb:92:b1:c0:60:53:b5:e8:5a:c3:70:6a:fd:3b:ad:16:4d:
         3c:29:74:91:28:7d:2f:1c:1c:05:5a:a1:ed:db:98:bd:93:f4:
         4a:88:fc:46:02:43:1c:29:26:66:3e:e8:0d:dd:a9:92:1e:3c:
         89:d6:ce:76:a6:a8:c3:9d:1b:4c:86:0d:39:ff:8f:af:50:95:
         61:16:91:4b:c2:7a:da:60:51:2d:a8:a3:62:54:10:16:ba:11:
         50:98:88:f9:13:cb:e6:a0:c2:d6:14:3b:f7:3b:5b:ee:de:f8:
         35:2f:ce:84:07:d6:1b:7e:23:af:ba:dc:3b:05:dd:33:ea:31:
         9a:3a:a1:4b:57:64:a2:ad:e2:92:21:8a:90:99:0a:3d:9f:61:
         3d:e0:51:1c:a3:33:5b:91:e8:03:24:da:76:c7:7c:b8:5b:d8:
         af:c3:82:29:1d:43:d0:30:78:fb:3a:ff:81:34:95:d3:05:c6:
         dd:70:72:8a:29:15:cb:ad:03:19:e9:4c:1b:cf:f5:62:e2:57:
         b5:cc:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----