Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5251a1e52e174bb6479231492945887b96c2d4ee.cer
File:                     5251a1e52e174bb6479231492945887b96c2d4ee.cer (raw, json)
Hash identifier:          QDhX+v8mwcbF+affMGK/gu8qtUE/sYxu1A1BZJR2y7A=
Subject key identifier:   B8:9C:6E:2D:C9:FE:97:27:74:65:70:69:58:7D:D8:CD:34:21:2C:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F23774
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/5251a1e52e174bb6479231492945887b96c2d4ee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 18 Oct 2019 19:53:02 +0000
Certificate not after:    Sun 18 Aug 2024 21:40:04 +0000
Subordinate resources:    AS: 269816
                          IP: 45.186.12.0/22
                          IP: 2803:760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15873908 (0xf23774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 18 19:53:02 2019 GMT
            Not After : Aug 18 21:40:04 2024 GMT
        Subject: CN=5251a1e52e174bb6479231492945887b96c2d4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:32:ef:27:ee:d5:90:d8:9c:8c:11:ce:b4:
                    95:e9:36:c0:09:cd:48:85:6f:32:98:f3:26:a1:06:
                    98:99:e1:8a:7e:a0:fb:25:1d:a3:7d:dd:a3:14:cc:
                    69:a1:77:6f:a1:63:42:b2:ff:9d:54:35:2f:fb:fa:
                    94:18:a5:b5:2c:e7:83:83:3c:44:7a:e5:fa:2b:a1:
                    36:23:1e:be:c2:89:e4:52:36:dd:14:01:07:d1:f0:
                    2c:38:96:b9:c2:c6:a8:1e:73:06:aa:57:15:75:14:
                    85:83:0c:96:67:c0:7e:11:84:08:69:de:7f:53:98:
                    90:be:6e:8c:5e:1a:e7:a2:f3:4a:fa:70:f9:4b:90:
                    99:01:07:0e:40:c7:f1:8a:57:ba:29:d4:f4:2a:10:
                    de:e2:38:d7:3a:21:3e:ce:7e:13:3a:a5:d9:0b:8d:
                    62:07:72:3c:5e:f5:c7:96:ca:66:11:87:d0:aa:17:
                    a9:8f:47:97:35:94:41:07:cd:8e:14:e5:26:39:ed:
                    a2:af:61:41:0d:43:2d:da:03:ee:52:3f:35:78:81:
                    8a:a9:b9:4b:e6:57:f0:49:ec:50:ca:f1:c1:48:00:
                    58:04:09:58:a0:3d:19:00:15:e3:7f:40:6f:4f:84:
                    b3:af:8e:29:42:a4:7e:07:36:80:3f:24:bc:14:59:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:6E:2D:C9:FE:97:27:74:65:70:69:58:7D:D8:CD:34:21:2C:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/5251a1e52e174bb6479231492945887b96c2d4ee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.12.0/22
                IPv6:
                  2803:760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269816

    Signature Algorithm: sha256WithRSAEncryption
         64:36:86:0f:9d:21:38:ee:7f:cd:09:5a:07:de:6d:58:20:e3:
         21:03:0f:df:a0:a7:29:36:04:d1:57:ae:31:e5:0c:27:80:d3:
         ea:dd:65:61:3d:74:76:5f:fc:9e:70:38:87:c6:0e:7a:dd:7e:
         c6:57:85:e3:7a:61:f2:9c:6e:e7:cd:db:ab:3c:a1:6c:46:78:
         e0:be:9e:25:18:60:8d:09:ea:cb:4a:30:0e:94:97:6f:b7:2f:
         89:6c:8f:e7:4a:b5:69:f5:07:bf:4e:84:0e:c3:75:51:85:ab:
         a2:84:c0:de:04:4c:20:22:76:c6:24:da:65:38:ee:44:26:02:
         24:c2:f0:3f:34:1a:d4:f5:b4:58:3c:3b:9c:e7:f4:56:4a:8f:
         94:c0:4f:72:c1:85:3e:4e:5a:64:b5:e7:7a:3e:15:4a:9f:9a:
         9d:09:0f:a8:5c:fa:52:c8:6d:63:61:d7:15:92:45:fb:cc:d6:
         84:e1:e7:0e:19:17:0b:d6:ea:46:ae:10:13:33:14:5f:6d:ff:
         6c:3c:a2:d3:2f:b9:04:ff:2f:80:2d:f9:cf:e2:c8:db:d4:06:
         42:bf:9b:cb:59:7b:1b:80:7a:ed:a6:59:ff:f7:7f:ce:e8:5c:
         80:1f:1b:62:64:92:c7:49:f4:55:97:d1:ca:32:19:7b:0d:d2:
         32:1a:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----