Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35c8d15de3e322457a856ae794970a1690b26963.cer
File:                     35c8d15de3e322457a856ae794970a1690b26963.cer (raw, json)
Hash identifier:          poA3ZtIB8aBnc63ot7ssLLpSAEJMbrrC2sqdan8M4+Y=
Subject key identifier:   CA:3E:57:B2:B3:82:3E:34:DF:E5:0A:77:2E:8E:45:BF:B5:9A:F9:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEEC17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c6dbfe8-803a-4fde-8bef-7ba219a2da83/35c8d15de3e322457a856ae794970a1690b26963.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c6dbfe8-803a-4fde-8bef-7ba219a2da83/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 May 2019 14:49:37 +0000
Certificate not after:    Sun 17 Mar 2024 15:09:08 +0000
Subordinate resources:    AS: 267855
                          IP: 45.174.227.0/24
                          IP: 2801:1b:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14609431 (0xdeec17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 27 14:49:37 2019 GMT
            Not After : Mar 17 15:09:08 2024 GMT
        Subject: CN=35c8d15de3e322457a856ae794970a1690b26963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:4e:19:25:4a:56:16:a0:75:20:1f:b5:29:
                    09:aa:c2:90:c4:47:f1:c1:84:d2:bc:5b:6c:a1:3f:
                    59:72:7d:f3:cb:89:59:e1:92:0a:a1:ee:11:9a:27:
                    3e:b7:b4:f8:c6:ad:68:0f:05:d6:2a:73:14:dd:fa:
                    c3:f3:cf:a3:d1:75:8e:98:00:07:c1:0e:b6:37:99:
                    51:ae:12:70:4e:53:e7:68:d1:c3:70:23:1f:48:b4:
                    8f:c5:42:ef:f7:33:31:8a:07:27:23:f7:ca:06:6c:
                    e6:8d:f4:84:5d:5c:18:62:2e:d2:2d:a9:51:d5:94:
                    79:e3:6b:10:aa:91:ce:42:12:55:44:bf:63:bd:02:
                    0a:b5:0c:6f:b2:3a:9d:e6:8c:b2:d9:64:4c:7a:a6:
                    e8:19:a5:86:64:b1:ed:00:62:8e:1a:04:f7:68:0f:
                    5a:06:6f:c6:9f:12:90:fc:7d:72:3e:0f:1d:9a:64:
                    58:58:53:6f:f1:fb:8c:35:02:a1:c3:b1:30:f9:00:
                    be:61:45:36:bd:6a:5d:d1:5e:5e:92:89:91:2e:9a:
                    60:7c:54:23:e7:da:cc:fd:58:4a:19:f3:68:89:62:
                    c6:5a:72:83:f9:cb:06:30:65:d7:cf:d3:bc:53:0c:
                    df:b7:7c:0f:80:42:d0:43:4a:8d:71:f7:35:bd:2b:
                    5b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:57:B2:B3:82:3E:34:DF:E5:0A:77:2E:8E:45:BF:B5:9A:F9:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6dbfe8-803a-4fde-8bef-7ba219a2da83/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6dbfe8-803a-4fde-8bef-7ba219a2da83/35c8d15de3e322457a856ae794970a1690b26963.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.227.0/24
                IPv6:
                  2801:1b:800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267855

    Signature Algorithm: sha256WithRSAEncryption
         35:21:be:fb:b4:cc:02:f5:ca:84:f3:a1:26:2d:b5:bd:22:b3:
         a3:0a:a3:46:86:75:b9:f6:e7:49:75:6a:9b:44:2d:f4:29:f4:
         0b:71:9b:95:75:dd:64:31:fd:df:49:75:95:2f:7f:53:8f:15:
         6d:5c:39:36:00:aa:54:6c:ce:82:b3:19:c9:1b:20:34:5b:ec:
         24:b3:f4:bf:a0:24:fb:b9:cc:e1:7b:2d:5f:27:af:ba:a4:a9:
         f0:20:0b:5b:12:86:df:1b:34:73:c0:3d:dc:25:64:ef:7c:6a:
         5d:50:28:30:18:3c:f0:40:d5:da:cb:14:f3:6c:4e:b2:57:51:
         84:82:29:a2:78:e4:ba:aa:e5:51:07:b1:30:17:45:98:97:23:
         8c:c3:ed:34:fb:0a:78:7e:17:aa:25:16:b6:62:0b:c0:14:a6:
         df:2c:f4:cf:87:0b:33:0d:b6:30:bc:dc:bc:55:e6:e1:ed:a7:
         5c:0f:2f:cf:f1:42:60:9c:bb:9a:8c:df:a7:2e:19:e6:ae:6d:
         f9:74:e3:6f:cb:8c:9c:4e:5f:99:7c:56:88:19:72:c0:15:62:
         d6:81:9b:a2:50:06:2a:e1:6d:92:b7:5d:fc:59:e8:5a:04:65:
         7b:30:7a:9a:59:67:54:8c:fd:28:34:67:4d:38:14:62:9a:8d:
         74:30:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----