Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.cer
File:                     4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.cer (raw, json)
Hash identifier:          GZk2HD9BLwh6UrnEwsjSYul7Xb1uTD+OjLTj+ya2+Xw=
Subject key identifier:   AA:FA:20:A0:D9:02:10:11:8A:58:48:E4:08:F2:73:BF:8C:7E:70:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C9732A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2019 16:03:31 +0000
Certificate not after:    Sun 09 Jul 2023 16:02:39 +0000
Subordinate resources:    AS: 269770
                          IP: 45.182.188.0/24
                          IP: 2803:ed60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13202218 (0xc9732a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 16:03:31 2019 GMT
            Not After : Jul  9 16:02:39 2023 GMT
        Subject: CN=4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:51:31:fb:5a:5a:4b:c6:ae:46:a8:0e:22:
                    69:b5:85:08:4a:de:47:b5:63:e9:e3:07:b0:2e:57:
                    c1:f3:a2:41:04:08:86:fd:0b:32:f4:96:c1:c2:aa:
                    cf:18:a9:a1:52:9c:82:6d:b5:6e:7a:e1:be:3a:98:
                    5a:65:c7:0c:4e:e2:2b:9d:eb:17:6f:9f:80:b3:fd:
                    63:ec:5e:52:29:d0:28:43:38:5a:b2:ad:2a:20:7d:
                    d5:64:2f:63:fd:eb:9e:5b:88:7a:a9:35:d0:5c:04:
                    bd:7e:4e:8e:2f:a9:66:db:95:eb:b9:43:b2:33:1d:
                    85:94:2b:0c:c7:c6:7d:21:f7:e4:6a:a9:ec:5b:03:
                    5a:1e:a1:5c:89:53:05:ff:de:73:1a:ad:ef:85:0f:
                    cd:35:e5:87:83:f3:2f:dc:d8:4c:c1:de:9c:45:99:
                    80:f1:c2:03:ea:3f:00:05:23:a6:d7:bd:e6:f7:90:
                    c7:4c:2c:71:23:79:47:36:a3:99:b4:1e:af:09:74:
                    4f:6a:1a:94:85:3c:c8:76:f7:0f:ce:94:34:f7:5a:
                    f2:a8:6b:ee:86:f8:04:38:1c:95:bd:2f:73:ac:ca:
                    2f:1a:9a:eb:dd:2b:09:75:ed:87:55:fe:ba:d6:e2:
                    11:7e:08:ac:fe:96:4f:9b:da:cf:52:31:89:f4:9f:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:20:A0:D9:02:10:11:8A:58:48:E4:08:F2:73:BF:8C:7E:70:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.188.0/24
                IPv6:
                  2803:ed60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269770

    Signature Algorithm: sha256WithRSAEncryption
         23:df:82:ae:9d:24:9c:04:a3:74:60:21:29:f9:fe:00:db:7f:
         16:67:97:33:1f:1a:98:6e:ae:1a:15:07:46:4a:d5:e0:8f:ad:
         48:06:69:4e:95:67:fb:2a:33:5d:6a:c6:84:28:ee:aa:ca:4c:
         1a:1c:cb:64:45:88:c2:72:23:73:60:c3:4e:04:ba:89:e0:02:
         08:5b:72:ab:8e:a2:32:79:06:8c:c1:c8:16:f1:0d:d5:01:6b:
         72:fd:8e:48:1d:f5:11:0e:40:a1:73:16:9b:f5:ff:51:05:62:
         7c:9e:42:c5:ea:bb:8c:4d:db:fc:86:8d:7e:8c:0d:e8:eb:3d:
         da:92:c2:59:5f:cf:18:07:6e:d9:bd:4d:70:54:28:75:41:a9:
         13:14:5b:aa:ba:5d:78:56:9a:81:f9:67:a8:3e:b2:28:1d:15:
         c0:10:1b:23:16:60:7f:d8:1c:65:d0:a8:81:33:35:76:b7:1c:
         59:f0:23:83:e5:22:d6:4c:9a:95:10:b2:f0:2d:94:27:20:1e:
         dd:6b:9d:39:95:61:fa:14:01:28:68:b5:55:a5:79:a4:c4:50:
         25:19:9e:f5:b8:9f:17:c8:03:08:82:75:be:bc:e8:e2:d8:da:
         dc:22:31:7c:83:f6:b7:a5:ce:41:9a:d1:04:bb:67:e0:75:df:
         f0:42:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----