Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer
File:                     43b6833cf6ce9e345cb92183fae39b42838f55b4.cer (raw, json)
Hash identifier:          woAGvTanRcf/vywwlxM8RHBLPs7oF3MjqU1QvXpLQYE=
Subject key identifier:   55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E037B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/43b6833cf6ce9e345cb92183fae39b42838f55b4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Jun 2019 18:48:30 +0000
Certificate not after:    Sun 31 Mar 2024 18:02:31 +0000
Subordinate resources:    AS: 267881
                          IP: 45.177.124.0/22
                          IP: 2803:2a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14694329 (0xe037b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 12 18:48:30 2019 GMT
            Not After : Mar 31 18:02:31 2024 GMT
        Subject: CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:fe:46:1f:bd:d3:c5:01:fd:2a:30:ae:a7:
                    fb:5e:dd:a5:11:20:ce:f3:63:70:51:3d:77:7b:3e:
                    1f:48:08:b3:50:9f:48:4d:8f:af:8a:9a:74:f8:ad:
                    3e:d4:ca:f7:73:36:8a:63:db:29:e8:3d:67:6c:90:
                    b5:be:ce:25:f5:c9:4e:d8:d7:01:69:aa:cf:48:ed:
                    db:ce:59:d1:3c:c5:fa:48:2a:06:1d:a1:09:4d:d5:
                    48:2b:ed:39:5e:c3:51:4d:1f:19:f3:c5:23:9e:8c:
                    f5:c1:7f:e8:68:80:18:93:60:12:47:0f:91:cd:5c:
                    c8:fd:24:fb:71:ec:f7:bf:5f:27:04:81:64:23:e8:
                    51:65:80:c4:27:81:c6:7a:bf:14:36:ee:fa:f3:61:
                    47:a0:5a:46:af:b7:94:8c:d1:c1:a3:6d:96:e5:2f:
                    07:d4:fc:50:be:bf:f2:d1:2e:28:b9:9e:d9:55:c5:
                    2d:57:a5:e4:96:7a:75:df:5a:f0:0c:ad:e8:87:eb:
                    5c:8b:9a:b0:72:00:65:66:41:df:f0:1a:ec:9a:05:
                    82:04:cf:5b:3e:63:e6:14:fd:0d:b3:86:80:8c:c5:
                    80:ac:6d:bc:c4:b1:51:c7:7d:28:f4:88:ce:71:9d:
                    17:79:92:c4:91:06:00:5e:d9:53:13:64:6d:ff:c1:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/43b6833cf6ce9e345cb92183fae39b42838f55b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.124.0/22
                IPv6:
                  2803:2a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267881

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:34:d9:ff:13:8f:70:60:4f:7d:eb:fe:92:c3:6c:c4:1d:
         33:fb:f9:2d:c9:04:91:ae:e8:7c:a9:3d:23:21:e7:a0:0a:47:
         23:5d:b1:16:fc:2f:4e:3c:5d:69:7e:37:aa:63:81:30:a7:89:
         c5:86:c9:0f:62:1d:f7:ad:a3:d2:56:05:ad:61:b6:43:c7:59:
         14:31:9b:24:92:7d:36:92:fd:6a:6d:b1:f1:cb:03:da:23:e7:
         69:b0:4f:7d:ba:c1:0a:aa:7c:8b:31:43:a3:5b:e4:0e:01:55:
         39:9e:a7:45:6b:bd:ae:bd:17:e0:39:90:d5:3d:82:b1:3a:68:
         cc:31:e8:c9:d5:64:80:45:cd:71:4e:56:0c:81:e2:2f:cf:3f:
         77:7a:8e:8a:9c:4f:df:15:f1:db:6f:08:16:78:dc:10:90:4b:
         f7:dc:a5:ad:f7:5c:9a:bc:b1:bd:57:f5:b4:da:7f:45:73:78:
         14:71:3b:74:16:64:a5:27:e0:e8:7d:cb:6b:e5:24:f8:65:18:
         1b:ee:28:54:e2:b1:5a:6b:61:ed:9c:cf:1f:7d:12:18:0c:7e:
         c0:9f:47:ff:a2:53:54:b7:e3:f9:05:89:d4:c9:7a:1e:4f:ff:
         b6:4d:d1:d9:61:00:c4:a8:a4:fc:f1:b7:fe:05:1d:a0:91:b2:
         93:08:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----