Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
File:                     4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer (raw, json)
Hash identifier:          SMULlMPX9yrIlsaofjAqyZKRlwipklwi4Fv0omf3yAk=
Subject key identifier:   BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFC4F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 May 2019 16:16:30 +0000
Certificate not after:    Wed 27 Mar 2024 18:30:53 +0000
Subordinate resources:    AS: 267871
                          IP: 45.177.20.0/22
                          IP: 2803:1260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14664952 (0xdfc4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 27 16:16:30 2019 GMT
            Not After : Mar 27 18:30:53 2024 GMT
        Subject: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:a5:99:98:6b:45:6b:b0:dd:b1:67:a8:45:
                    94:ab:97:3c:5e:de:76:e0:3a:a1:af:58:1e:76:df:
                    aa:a9:3e:df:06:7c:b5:91:b3:b9:de:3c:8e:38:20:
                    f6:08:e4:e7:72:a3:5f:b5:d8:9e:5f:be:1f:41:da:
                    2c:1a:64:2b:61:aa:18:14:e6:30:88:d6:5a:f7:d7:
                    b5:89:1d:27:0f:64:bd:ff:e4:a8:2f:5a:13:d5:8f:
                    d5:7d:4a:c6:d4:71:91:02:7a:da:06:d3:07:47:93:
                    c8:79:9e:d4:24:37:1c:36:14:b0:42:a4:ab:ef:bc:
                    0f:1a:86:14:10:84:76:bf:6c:f1:9f:a5:f3:1a:42:
                    6e:d3:e2:18:f3:90:07:61:55:b0:c1:01:67:4f:26:
                    f0:c1:17:f4:56:0b:86:ce:8b:07:8e:4e:cd:83:36:
                    96:8f:ff:43:29:9c:65:a9:39:a2:f1:43:da:29:ae:
                    ae:1c:00:76:e3:c6:18:56:68:99:8a:f2:7e:76:ad:
                    57:ac:21:97:c7:0a:05:76:54:8c:85:ca:17:47:4a:
                    56:ef:71:21:14:1f:cc:77:6a:38:a7:0f:4f:e9:23:
                    0f:6b:17:8b:ed:fc:3d:1c:9a:5e:2f:38:79:e5:4c:
                    42:3b:87:f4:86:a1:5d:b2:94:a1:e7:d8:90:3f:43:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.20.0/22
                IPv6:
                  2803:1260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267871

    Signature Algorithm: sha256WithRSAEncryption
         a4:b0:8d:6c:e1:cd:2b:48:a0:61:30:f5:56:00:6b:9e:db:35:
         e9:22:3a:f3:7a:84:23:5b:1d:4c:3a:be:19:49:f7:f8:ef:61:
         3e:d5:16:0e:d7:c7:9f:a2:18:a8:ce:51:b3:ba:af:e2:d0:32:
         ef:c7:3f:b8:1c:00:3e:11:f6:30:a2:c2:9b:08:fd:e5:ad:8f:
         2b:4e:2d:47:10:f9:62:3c:12:4a:bc:ab:a4:ed:98:c7:f1:89:
         d2:92:fe:f9:4d:c9:64:3e:ed:dd:24:c7:f7:a4:38:dc:2a:84:
         2a:10:a8:45:68:c1:bb:bc:74:a9:a6:1d:e0:7e:9d:23:34:c8:
         eb:02:45:62:0b:de:29:d5:9d:45:db:0d:ca:e6:47:5c:2d:21:
         27:98:36:7b:9c:da:0c:23:30:57:51:54:e3:72:86:7f:69:9c:
         94:ea:d0:6c:c2:c7:81:c1:55:02:73:cb:a2:21:50:6a:91:fe:
         85:49:ab:12:c0:87:40:05:52:53:c6:cb:e8:b7:73:3c:bf:73:
         89:c4:ed:43:71:df:0b:ff:4b:62:ce:e1:90:ff:64:0f:f9:5f:
         db:4f:73:af:e8:72:c8:79:85:e7:ed:1c:36:e2:a2:69:9f:fb:
         40:4f:05:11:3a:7f:dd:4c:54:fc:ef:42:98:b4:f5:ab:95:7f:
         4a:fc:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----