Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.cer
File:                     370e9f4dda74e99161b7878bd59c4f9e02ba4af1.cer (raw, json)
Hash identifier:          2CbccR3j3xzf0BbyKvvJEtOPMaWYqjo0pChrPF7QjvA=
Subject key identifier:   F8:E8:EE:A4:7D:AC:20:74:4E:73:07:96:CC:2E:49:37:95:AF:C6:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D80602
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 10 Nov 2019 19:07:54 +0000
Certificate not after:    Sun 24 Dec 2023 21:12:18 +0000
Subordinate resources:    AS: 52352
                          IP: 179.51.224.0/20
                          IP: 190.15.80.0/20
                          IP: 2803:e480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14157314 (0xd80602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 19:07:54 2019 GMT
            Not After : Dec 24 21:12:18 2023 GMT
        Subject: CN=370e9f4dda74e99161b7878bd59c4f9e02ba4af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:e6:b5:7a:f4:5d:16:19:15:a0:4c:f1:72:
                    26:28:c0:18:36:5d:9a:51:d6:d4:d9:f7:c4:8a:20:
                    95:03:9f:35:9c:42:5f:72:77:ef:f9:90:93:1e:ea:
                    39:58:37:55:26:a6:77:0f:7c:82:24:31:62:48:5f:
                    21:db:33:28:f2:7a:38:f6:16:88:bd:d4:a2:24:39:
                    ea:38:4a:be:8b:0c:69:ac:6b:d5:7c:7a:95:d0:13:
                    e4:6a:23:65:f0:f8:1d:28:cf:28:a5:df:c7:fe:d6:
                    cb:10:2b:dc:3b:ae:e9:d7:ae:f2:44:00:25:1c:f2:
                    9d:17:8d:e5:52:45:bd:a5:28:4a:65:c5:00:0e:e3:
                    1e:c8:67:5e:14:7a:8f:0f:5a:ef:d0:72:d8:55:82:
                    fd:fd:3d:2c:99:f9:da:90:47:9d:16:a6:ed:8f:53:
                    f8:07:16:ac:1b:6d:8a:15:91:9b:58:cd:7e:d7:08:
                    6c:18:65:c4:c5:fa:5b:08:dc:4f:67:7c:5e:56:0e:
                    8f:aa:e1:1f:10:f9:b7:a1:81:1d:fd:a5:c0:c4:dd:
                    b5:7a:30:ad:6c:2b:8e:1c:fd:ca:5b:bc:bc:a7:62:
                    61:38:54:b0:c3:0a:33:e2:92:58:91:48:96:dd:46:
                    8e:be:7b:ca:1d:c2:17:f8:1f:f8:a4:9c:fe:fb:a1:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:EE:A4:7D:AC:20:74:4E:73:07:96:CC:2E:49:37:95:AF:C6:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.224.0/20
                  190.15.80.0/20
                IPv6:
                  2803:e480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52352

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:47:cb:1c:22:e2:66:6f:77:16:41:28:d7:49:7d:f5:e3:
         e4:11:11:29:d8:d0:38:bb:bb:31:fd:62:15:ba:b3:82:70:7c:
         0c:70:75:5a:72:2c:13:ad:97:98:48:81:fb:7d:d1:ab:ca:98:
         e1:fd:4a:f3:9f:3f:27:ec:7a:6e:84:37:19:c3:a0:98:0f:a4:
         d5:35:ba:b0:3f:99:83:8d:1a:f9:fb:85:49:8f:09:c5:c1:28:
         fc:6e:98:45:b1:40:ee:53:c0:0d:9d:17:a2:32:6f:af:fd:03:
         6a:3a:50:90:57:21:3c:bf:09:7b:55:84:0d:53:2c:38:91:e2:
         a4:74:48:30:6d:6a:db:93:ba:a3:ec:42:d5:25:c9:c3:cb:6a:
         f4:c2:2b:4d:c0:43:1d:ae:6f:13:ce:68:6c:94:4b:3d:7c:f6:
         9b:91:cf:09:51:68:8f:c6:59:6e:7f:ae:f0:2d:3b:05:18:3a:
         95:42:d7:fe:99:ab:3d:6b:45:50:b5:d2:6f:d9:33:d4:34:20:
         61:fa:31:ab:73:e4:0e:b9:82:b9:f5:03:c2:83:f0:e0:7c:fe:
         af:34:f6:dc:9e:54:03:ac:8b:6e:de:c0:c7:d7:42:f2:f5:47:
         2a:3b:02:6f:70:30:05:18:04:5b:5c:b9:5e:f0:25:17:63:4f:
         82:6c:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----