Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d8ae3a945d4c6ec8d9194ef340dc783c76fc31.cer
File:                     41d8ae3a945d4c6ec8d9194ef340dc783c76fc31.cer (raw, json)
Hash identifier:          BYCnA3c7yZphQF7RWVislxHc46AnqiuJIj0YAJkmJtI=
Subject key identifier:   62:27:7F:69:C2:C4:2C:F5:FE:4F:7D:E1:39:CF:76:DD:DE:2D:F4:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2987F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/99f157b5-2326-43bc-9445-0b3b0f9e5a9c/41d8ae3a945d4c6ec8d9194ef340dc783c76fc31.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/99f157b5-2326-43bc-9445-0b3b0f9e5a9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Sep 2019 02:02:31 +0000
Certificate not after:    Fri 26 Apr 2024 15:21:24 +0000
Subordinate resources:    AS: 263791
                          IP: 138.121.112.0/22
                          IP: 2803:cc40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14850175 (0xe2987f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 25 02:02:31 2019 GMT
            Not After : Apr 26 15:21:24 2024 GMT
        Subject: CN=41d8ae3a945d4c6ec8d9194ef340dc783c76fc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:25:44:23:95:2f:5c:30:5f:ad:94:b8:82:
                    bc:79:f8:cb:77:d6:02:1b:05:77:42:0b:3a:5e:47:
                    42:a7:ca:c3:6f:f7:ad:6d:77:a1:a9:4f:6b:a9:35:
                    56:b2:f5:4e:34:63:32:ba:10:47:bf:92:8b:89:e0:
                    3b:e9:b4:53:5c:1b:91:ac:d0:09:4b:f7:9f:b9:ab:
                    52:3f:d1:b1:fd:c9:f8:3a:e8:88:41:74:a0:58:0a:
                    d2:54:c8:be:7d:be:5a:69:29:f0:2f:91:14:d9:46:
                    dc:f8:06:5b:07:71:a3:07:09:b3:f4:2e:41:8f:d0:
                    37:d2:a5:07:e4:1f:52:5d:8a:c0:ad:2c:c3:6e:b9:
                    7e:fa:05:ac:b2:d6:46:69:3d:4f:15:71:e2:09:cf:
                    04:a1:f9:40:64:b5:0a:6b:ff:4e:30:af:48:55:38:
                    cd:35:66:1a:57:88:d1:cb:42:72:2c:b6:a2:12:ef:
                    38:50:82:d8:b1:33:88:5a:be:20:55:8e:2b:08:40:
                    64:d2:86:4a:25:31:c9:ed:8c:29:d2:af:bd:7f:7e:
                    e7:1d:46:be:6b:1f:2f:47:6a:ce:97:b2:0d:6a:b9:
                    01:8d:d3:26:9f:51:9f:9e:26:6a:ad:22:de:c3:08:
                    cd:09:17:18:84:5b:80:b2:f8:ab:c4:09:42:67:79:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:27:7F:69:C2:C4:2C:F5:FE:4F:7D:E1:39:CF:76:DD:DE:2D:F4:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/99f157b5-2326-43bc-9445-0b3b0f9e5a9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/99f157b5-2326-43bc-9445-0b3b0f9e5a9c/41d8ae3a945d4c6ec8d9194ef340dc783c76fc31.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.112.0/22
                IPv6:
                  2803:cc40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263791

    Signature Algorithm: sha256WithRSAEncryption
         86:01:55:d1:35:44:a6:96:3e:b5:46:66:b4:03:95:35:87:cb:
         d3:8e:2c:8e:a4:22:e6:89:33:29:3e:1a:5e:db:de:ec:de:03:
         19:ae:f8:40:5b:71:74:51:91:25:31:22:ad:74:9e:3b:27:2b:
         dc:21:d3:e9:59:e7:28:85:a3:8b:06:96:e7:a2:44:6e:0a:71:
         b8:29:3d:59:35:14:35:73:b5:74:fb:28:19:a0:32:cc:f9:93:
         5c:d1:69:b0:69:f4:64:9d:d4:89:ec:81:e8:16:57:98:7f:3f:
         ca:71:6e:76:fa:a4:1f:7c:05:e2:c3:db:76:d1:b0:06:7f:59:
         72:f9:ce:94:0f:ad:90:94:e7:a3:cf:10:f2:8e:d7:b6:6e:a8:
         33:41:19:ca:0c:88:69:a9:46:01:e7:94:9f:ba:2c:87:5f:5e:
         16:62:eb:81:75:00:fa:49:16:f5:df:a2:1f:dd:e8:2d:d7:7c:
         60:28:15:e2:af:fa:17:3c:93:13:60:89:33:08:95:a7:93:1b:
         e9:48:29:85:4d:f9:c9:75:7d:01:5e:2f:ea:96:20:7e:d2:39:
         ff:0b:fa:d4:de:f8:c2:72:5c:bc:cb:68:da:10:ac:26:b6:ec:
         c8:4d:76:b1:64:17:52:7c:72:7e:cb:7b:d8:74:50:34:50:df:
         73:43:4b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----