Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31f7d90f87abc957ae462a5c64745f034ad84794.cer
File:                     31f7d90f87abc957ae462a5c64745f034ad84794.cer (raw, json)
Hash identifier:          Jf34dZ1Mq5wb1mHyJsZdJM4qfUp40eyP3iTl70NHWx4=
Subject key identifier:   08:43:83:AC:1D:A9:FC:0A:68:28:FC:18:1A:46:0F:A9:B5:4E:2B:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7A781
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/31f7d90f87abc957ae462a5c64745f034ad84794.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Oct 2019 15:22:59 +0000
Certificate not after:    Wed 29 May 2024 16:37:45 +0000
Subordinate resources:    AS: 264783
                          IP: 168.194.100.0/22
                          IP: 2803:4f40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15181697 (0xe7a781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 15:22:59 2019 GMT
            Not After : May 29 16:37:45 2024 GMT
        Subject: CN=31f7d90f87abc957ae462a5c64745f034ad84794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7e:f2:f9:cd:26:6b:86:48:7c:46:55:a3:77:
                    c6:96:9f:35:d2:84:17:bc:ee:15:82:cf:17:6b:af:
                    38:65:f8:25:48:b1:63:10:97:af:19:7d:52:b7:23:
                    2e:46:ba:21:3b:71:de:fa:20:a8:c0:7c:86:78:51:
                    59:37:20:04:e5:c2:30:1c:c8:ce:64:e3:9c:d0:43:
                    61:84:46:c3:e0:a7:58:29:07:82:99:a4:c2:79:b2:
                    69:aa:3a:0c:47:29:41:88:ea:a9:2b:9e:bb:9b:df:
                    76:5d:ba:90:f1:56:ad:cc:81:88:0c:ce:17:11:85:
                    a7:da:92:1e:74:25:be:25:fb:08:d0:00:c9:d3:9d:
                    ad:ab:1c:d7:ae:d1:d2:64:12:39:93:00:57:32:71:
                    b2:44:e6:8f:ae:00:dd:f3:99:22:93:08:fa:a9:eb:
                    45:9f:29:fe:a4:42:a9:68:ad:8e:ee:b6:45:51:c9:
                    ac:18:88:61:fa:d7:c0:b8:2c:0e:fb:d8:e8:a7:4d:
                    23:8c:ac:a3:5f:40:99:05:83:3f:3e:7b:1b:bc:cf:
                    cc:ec:79:93:23:3c:c2:14:5b:f5:26:57:d8:a8:2a:
                    c6:27:7c:1b:9a:6f:67:7a:48:2b:c8:f2:65:5f:82:
                    c8:83:cc:83:3f:70:62:08:e1:d4:5a:3e:c2:a8:bf:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:43:83:AC:1D:A9:FC:0A:68:28:FC:18:1A:46:0F:A9:B5:4E:2B:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/31f7d90f87abc957ae462a5c64745f034ad84794.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.100.0/22
                IPv6:
                  2803:4f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264783

    Signature Algorithm: sha256WithRSAEncryption
         ad:4b:1b:5e:8a:6f:35:01:a4:06:8c:4b:3e:98:cc:09:5c:d2:
         85:13:ef:1d:a5:ff:0a:d2:48:56:02:b4:59:95:f8:73:23:b4:
         1e:37:56:fb:7f:97:8e:cb:02:9e:08:74:03:69:74:27:0d:0e:
         a2:76:1d:72:22:aa:43:50:45:23:76:e8:9d:96:d3:42:ad:91:
         95:14:4c:41:ea:47:07:c4:b6:59:c6:2a:83:56:e5:10:91:89:
         3c:45:14:de:8f:24:e1:05:05:56:3d:d2:95:88:95:a6:46:a5:
         4b:e3:57:63:32:ae:6a:96:78:ff:c3:c5:26:11:93:d2:dc:49:
         f1:6b:9a:93:85:13:0d:7e:77:0a:16:01:5b:9c:ec:ab:95:1b:
         dd:79:65:5c:a3:6e:6b:bd:68:9d:90:14:6c:2f:c3:19:af:8f:
         a0:c4:1e:a0:e2:b5:0e:b0:bd:73:31:19:af:e8:b2:cb:dc:63:
         ba:e4:72:08:2e:1a:4a:73:fe:6f:20:61:81:be:e8:63:c1:f3:
         ef:ae:1c:34:ba:a7:45:dc:a2:bf:8f:7a:d4:ac:25:81:48:38:
         36:b6:17:08:e8:aa:5e:0e:4c:4f:3c:5d:cd:f8:50:60:be:a2:
         90:41:a2:9c:57:e3:77:45:d7:b3:52:52:d4:31:15:b6:ff:09:
         8f:9e:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----