Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer
File:                     5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer (raw, json)
Hash identifier:          eAngt95uom3ngvbB9CoyUp/yznzqREpOlzG5SSK5/eM=
Subject key identifier:   50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF7610
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 Jul 2019 14:37:09 +0000
Certificate not after:    Fri 26 Jul 2024 20:07:48 +0000
Subordinate resources:    AS: 267685
                          IP: 45.163.18.0/23
                          IP: 160.20.225.0/24
                          IP: 2803:3ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15693328 (0xef7610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 31 14:37:09 2019 GMT
            Not After : Jul 26 20:07:48 2024 GMT
        Subject: CN=5cf8ea952842bcf0937dda38dd1208e1ee0e5462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:2e:1c:df:56:5e:ec:2d:c0:15:88:46:8a:
                    bb:c1:35:bd:28:fb:c2:db:71:65:1c:10:94:07:9f:
                    2c:2c:bf:d2:21:81:4a:8f:86:0b:20:d9:a8:84:40:
                    e5:b5:3f:50:ab:6a:3b:8b:de:35:72:07:21:41:5f:
                    1c:c9:06:92:4b:03:d9:ba:6c:44:8c:b0:a3:7a:a3:
                    94:14:99:a0:5e:21:34:4e:8a:b7:72:e0:2a:5c:57:
                    26:f9:15:86:b1:ed:68:c9:79:42:c5:1d:f7:f7:b4:
                    4d:81:fa:88:15:f8:7f:e1:ce:60:59:bc:fd:bf:6c:
                    03:c2:8d:da:f9:05:a5:23:ff:7c:c0:52:c7:2d:77:
                    25:3f:cd:8c:09:69:40:51:35:73:ed:ef:52:81:73:
                    52:e0:12:79:92:53:f7:7e:5a:2c:3f:fc:36:58:15:
                    7c:5a:6e:b4:6a:64:1a:1f:30:1c:d7:63:07:b5:b8:
                    49:91:62:a9:80:eb:01:47:73:c6:de:0d:98:16:39:
                    42:8b:2b:61:db:1a:fa:7b:7f:23:24:2d:97:cc:d3:
                    c8:12:59:46:e6:0a:b2:ea:65:da:76:91:f8:ed:4d:
                    19:6e:9b:ae:ec:8b:a7:f6:22:e3:94:46:d4:e4:df:
                    a6:79:6b:f3:d5:9b:a9:49:b9:c9:46:f0:19:f1:f1:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.18.0/23
                  160.20.225.0/24
                IPv6:
                  2803:3ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267685

    Signature Algorithm: sha256WithRSAEncryption
         36:58:01:3b:28:71:87:de:d3:e9:69:7e:d0:4b:b0:7d:96:a8:
         73:18:8b:76:76:37:96:27:fe:a8:af:80:6b:30:a2:44:25:f2:
         98:5c:dd:98:28:ee:e5:bb:d4:da:96:99:f0:14:40:4d:28:64:
         e6:07:00:4b:8d:2b:ca:22:19:d0:6b:2f:70:16:86:6b:c3:01:
         02:d2:aa:f6:72:b5:21:ee:12:2d:f2:78:15:4c:65:1e:34:5d:
         c6:9b:72:92:e0:6f:85:5d:10:9b:49:2b:01:43:c2:15:43:68:
         de:e2:7f:b5:0f:fb:4a:20:ea:bb:6e:61:e6:86:be:77:c4:d8:
         cc:ee:e1:02:2e:09:f0:6e:12:81:01:24:7f:b4:aa:bd:2c:6b:
         7b:98:f2:63:4d:bb:f2:fb:2a:c3:2b:d2:4c:45:54:48:27:a4:
         5c:b3:c1:05:a4:ff:3b:bd:05:89:cf:11:c5:9d:85:29:c6:91:
         e5:ac:af:a7:9c:c3:73:e5:97:12:8c:16:4e:47:1e:78:05:ea:
         8a:26:ec:5f:78:c7:ca:22:ca:b1:45:dd:97:ec:d4:59:09:16:
         0b:44:9b:a1:e6:a4:a7:2e:8d:30:ee:d4:4a:72:4c:08:b7:66:
         c2:a2:bf:25:c5:22:04:55:c7:51:b7:e0:7f:77:8f:33:78:a7:
         f1:0f:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----