Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/628922650fa5a87787a3f72fc142195f570c8c4e.cer
File:                     628922650fa5a87787a3f72fc142195f570c8c4e.cer (raw, json)
Hash identifier:          WE4SXoH+J4Sp8W1k8qPPyIjwMqfY6NS5YZCCS7XPrAw=
Subject key identifier:   6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEF3C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Sep 2019 12:54:58 +0000
Certificate not after:    Sun 17 Mar 2024 18:25:16 +0000
Subordinate resources:    AS: 267856
                          IP: 45.176.8.0/22
                          IP: 2803:fc60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14611400 (0xdef3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 12:54:58 2019 GMT
            Not After : Mar 17 18:25:16 2024 GMT
        Subject: CN=628922650fa5a87787a3f72fc142195f570c8c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:76:e2:30:87:e2:22:27:6e:2f:64:ff:36:
                    d5:19:89:0a:01:46:54:0c:94:ae:f9:44:18:d1:1a:
                    0a:37:ef:df:63:14:66:87:0f:11:d5:d5:b9:7b:72:
                    ff:1e:01:be:e4:c2:34:b7:0a:37:72:07:28:55:1e:
                    34:06:c6:98:d3:30:d2:20:c5:41:61:f8:93:79:8e:
                    20:29:61:ad:08:1e:d5:88:98:ee:ed:4a:26:4e:66:
                    54:ed:67:ea:cd:15:0e:21:40:f0:bc:09:90:4f:34:
                    03:aa:f1:aa:5d:ce:1c:57:7a:ea:62:40:3b:25:bc:
                    fe:af:5d:92:42:1d:54:36:e6:3b:25:4e:7a:77:92:
                    94:95:90:7b:80:80:61:a3:82:59:20:99:76:1d:99:
                    16:fb:4b:15:75:01:68:48:16:de:3d:a0:84:4b:cf:
                    c2:72:9f:11:9d:90:1c:1d:12:c4:dc:8b:ff:a7:e1:
                    b5:98:9e:9f:c2:18:f3:e9:ee:00:9d:43:1a:df:81:
                    28:46:a3:f8:09:62:46:de:43:36:4a:6f:f6:8d:1d:
                    81:cc:5f:d3:e3:c3:fa:c2:6c:48:9c:08:dc:08:f2:
                    29:38:dd:08:d1:97:2b:de:32:2a:f4:a2:dc:c1:5c:
                    1f:f7:55:fc:c1:f7:7d:04:0f:35:fd:b3:7b:7c:cd:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.8.0/22
                IPv6:
                  2803:fc60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267856

    Signature Algorithm: sha256WithRSAEncryption
         49:2f:88:f2:1f:9f:73:98:70:19:ee:a7:a0:35:98:c4:5e:4d:
         3a:62:97:cc:f0:12:d9:d9:f6:6a:54:f6:78:cb:05:2b:06:ac:
         0d:68:1e:c0:8f:fd:8f:dd:83:72:2d:ea:c7:4d:ad:4c:cf:02:
         3c:af:5c:92:50:69:07:91:95:5d:1e:c9:56:14:bc:ef:bd:a8:
         6a:bb:2b:a2:e7:2f:85:4c:2c:5d:74:ed:f0:0d:de:bf:b0:43:
         01:d7:89:8a:5e:72:5d:0a:0b:a4:7c:51:a7:31:91:04:1e:e4:
         bf:85:e8:5a:0f:88:95:80:07:b8:d3:53:66:f5:9b:3f:b5:29:
         a4:f4:65:c3:37:5e:99:de:0b:b1:2b:bf:ea:fe:42:15:b1:f6:
         7f:ad:f5:68:6f:52:a9:5b:6d:81:83:70:63:26:be:7a:6f:3f:
         1b:ec:00:a2:ba:7c:13:81:28:cf:91:69:85:5c:a9:b8:94:80:
         e5:a8:a9:de:83:ec:d2:c2:27:4b:4c:f1:05:88:32:25:1c:5f:
         94:ba:37:d0:38:a5:70:6b:dc:00:5a:71:b5:da:71:82:ba:ae:
         9b:e4:c6:bb:21:ef:0f:45:0e:eb:6f:7c:23:4b:3d:53:2b:3e:
         b0:10:ec:22:c1:ef:dc:30:86:10:17:86:5e:44:15:b8:48:5f:
         1c:6a:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----