Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7089837ed143928c98c17d7d506b131ca4b69538.cer
File:                     7089837ed143928c98c17d7d506b131ca4b69538.cer (raw, json)
Hash identifier:          1/YjAsS3EfqU5eVMZm0YiufBrataZLtB8VVZiNIUw4w=
Subject key identifier:   D3:BC:4B:27:34:DB:02:75:B3:7C:AB:CC:DE:3C:7E:3F:63:43:31:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D81B32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/7089837ed143928c98c17d7d506b131ca4b69538.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Feb 2019 16:01:05 +0000
Certificate not after:    Mon 25 Dec 2023 17:10:43 +0000
Subordinate resources:    AS: 52442
                          IP: 190.104.80.0/21
                          IP: 2801:19::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14162738 (0xd81b32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 16:01:05 2019 GMT
            Not After : Dec 25 17:10:43 2023 GMT
        Subject: CN=7089837ed143928c98c17d7d506b131ca4b69538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:db:58:d5:4d:61:27:38:09:1b:b1:e1:cc:
                    9f:d5:7a:63:3d:e6:36:9e:6b:66:38:e4:81:bb:ff:
                    58:64:2e:1b:12:e2:6b:70:96:47:68:b3:0d:87:09:
                    81:f7:6a:53:f4:09:f9:9d:d8:83:0e:d1:34:c1:28:
                    fe:aa:c6:b0:95:fc:1a:43:fd:d8:8c:50:32:0e:f6:
                    89:fe:80:69:14:dc:35:73:27:a4:56:4d:37:78:ed:
                    ab:b7:26:4e:f4:75:ae:8d:d2:da:02:1f:24:60:04:
                    fe:27:cd:f9:17:94:90:a6:37:da:3a:5f:20:43:75:
                    08:3c:44:a5:e1:90:55:d0:38:81:ed:ca:91:90:8c:
                    5b:65:94:0d:a3:3f:20:b7:38:5a:7e:f2:d6:91:7c:
                    89:82:1a:3c:e4:ca:d3:14:84:c9:f0:79:dc:83:d7:
                    43:87:05:15:eb:af:3e:45:ca:ca:af:46:13:dc:13:
                    a2:a6:f5:8c:47:0b:c5:d3:9f:62:0d:60:f0:d4:e6:
                    e2:9b:db:40:c0:93:83:f8:2f:5c:94:dc:52:66:82:
                    ec:41:26:5f:2a:56:11:80:a1:74:52:6d:31:0c:7d:
                    57:51:cf:aa:55:57:67:07:9b:30:3a:1c:bc:c4:82:
                    85:4b:7b:f5:97:ba:90:33:02:4e:5e:4c:b4:ad:ae:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BC:4B:27:34:DB:02:75:B3:7C:AB:CC:DE:3C:7E:3F:63:43:31:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/7089837ed143928c98c17d7d506b131ca4b69538.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.80.0/21
                IPv6:
                  2801:19::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52442

    Signature Algorithm: sha256WithRSAEncryption
         21:5b:e3:6b:e7:3e:f8:a5:e9:be:a2:ce:07:e2:90:89:ee:ec:
         e8:58:10:09:65:8b:c8:c2:5b:81:cd:00:27:d7:4b:7f:d3:49:
         f1:50:1a:96:6d:d6:eb:92:fa:7f:6a:a5:cb:b1:e0:5a:61:fd:
         02:25:cd:60:e9:5c:1a:79:c2:49:df:90:2e:54:7d:cc:61:a1:
         eb:23:75:a7:2d:0e:66:80:00:3f:0a:06:cd:bf:14:c6:06:9c:
         e3:45:f4:92:61:59:25:96:1a:92:c3:f0:69:f6:d1:30:06:a7:
         25:51:c0:b6:04:5b:ea:68:fc:8b:cc:b3:07:84:72:9e:4d:08:
         17:81:fb:6f:23:87:6d:34:80:7c:c1:fc:83:ca:84:1f:e2:fb:
         99:db:de:1c:b2:73:b0:15:d0:57:56:a8:62:36:3e:13:e8:9e:
         3b:10:6d:0a:b5:33:5d:11:57:18:ef:6b:7a:d6:24:bb:99:0b:
         7f:42:07:3d:23:e2:df:41:2d:80:48:17:f2:7d:1d:38:19:6e:
         b3:26:dd:6f:e6:58:26:82:50:6e:e0:9b:c9:28:9f:42:c5:89:
         43:83:16:f9:d6:fb:68:ea:0a:89:65:bb:ec:4d:93:3e:76:49:
         a6:11:8d:d1:a3:96:46:a4:49:3f:5b:ab:56:c6:a4:00:00:cf:
         e6:1a:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----