Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/720fdde2333d9be1b9882d4ab7b45c922b6aa16e.cer
File:                     720fdde2333d9be1b9882d4ab7b45c922b6aa16e.cer (raw, json)
Hash identifier:          kz8UJBWAYkl8E2tQwVaKro+v5YbR6rq0eFqhzmwZSfo=
Subject key identifier:   B9:26:6E:10:CE:E9:B4:21:F2:D7:7F:42:80:44:8A:B7:1F:DA:7C:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC4AA6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d9ad544c-98a5-4e06-ad9e-01cc80b63909/720fdde2333d9be1b9882d4ab7b45c922b6aa16e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d9ad544c-98a5-4e06-ad9e-01cc80b63909/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2019 22:58:56 +0000
Certificate not after:    Sat 09 Nov 2024 17:44:42 +0000
Subordinate resources:    AS: 267748
                          IP: 167.250.196.0/23
                          IP: 2803:23a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16534182 (0xfc4aa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 13 22:58:56 2019 GMT
            Not After : Nov  9 17:44:42 2024 GMT
        Subject: CN=720fdde2333d9be1b9882d4ab7b45c922b6aa16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:7f:fb:90:b2:28:3f:3c:3b:36:52:85:26:
                    e3:63:b7:58:e6:03:3f:4c:84:5d:78:1a:7a:39:34:
                    4a:f0:94:cb:e4:df:6b:2c:b9:57:05:0c:3a:e5:19:
                    b1:f1:6e:30:f6:28:93:7b:f0:ef:49:ac:ba:43:40:
                    45:9a:b0:08:14:74:bc:ae:40:91:54:1d:3f:87:9d:
                    44:f5:8e:6d:86:1b:ad:9b:46:45:8a:29:8b:a0:fc:
                    9a:5b:e0:f0:64:b7:66:46:56:52:03:4e:04:5d:29:
                    25:0b:7f:b0:3e:de:44:f9:9f:27:37:da:96:11:c5:
                    46:9c:ee:ff:42:5f:5c:54:10:f7:2e:30:d1:d9:ae:
                    29:ee:ef:c8:17:e5:75:5f:9b:93:ff:de:87:9f:e6:
                    2f:45:ec:fd:a9:e0:58:49:18:0e:0a:86:13:ed:cb:
                    03:31:d8:ce:c9:43:06:97:3a:ee:49:3a:a7:4a:4e:
                    3a:fa:50:89:5b:05:1c:e6:ab:45:f2:13:8b:b6:e3:
                    ac:25:a0:97:1a:a9:7e:11:89:81:92:93:8b:5b:e9:
                    40:b9:39:e6:5e:b7:5d:14:7c:35:77:00:70:7a:9e:
                    d6:d4:e8:77:56:f6:7f:ad:79:2f:10:4a:b8:dc:1d:
                    c9:e2:24:a5:15:f1:d4:cc:b1:ae:88:32:81:db:5b:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:26:6E:10:CE:E9:B4:21:F2:D7:7F:42:80:44:8A:B7:1F:DA:7C:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d9ad544c-98a5-4e06-ad9e-01cc80b63909/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d9ad544c-98a5-4e06-ad9e-01cc80b63909/720fdde2333d9be1b9882d4ab7b45c922b6aa16e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.196.0/23
                IPv6:
                  2803:23a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267748

    Signature Algorithm: sha256WithRSAEncryption
         99:1f:35:04:84:35:3b:84:c6:06:10:85:f8:c0:7c:78:b6:94:
         3d:10:9f:1f:c4:24:b0:df:1e:38:5e:da:57:4b:aa:f9:76:b3:
         86:6a:cf:e0:f4:70:55:0c:3c:c7:7d:24:ae:75:6e:9f:5b:ac:
         2b:38:65:22:f4:d5:ad:fd:ff:94:52:82:a9:ee:41:8a:0f:fc:
         ab:7e:f6:e8:c7:92:ab:05:92:61:52:83:6c:9d:c9:e5:6a:e8:
         92:be:78:c8:4f:e1:8c:29:65:f7:d0:48:dc:18:b5:83:64:e5:
         1b:93:1b:88:b4:37:cf:9c:3c:54:c7:5b:a2:35:ba:b4:17:22:
         c4:b7:42:55:b5:b1:14:9e:b2:09:8f:3c:1d:77:79:b9:68:d3:
         23:54:71:8a:99:91:a4:73:1b:5e:c8:58:e0:72:82:f2:c6:1b:
         32:9d:3b:a5:e3:32:ff:71:ee:82:15:53:2c:6e:29:13:02:c1:
         1f:f4:2e:ca:32:70:1e:5f:a9:35:d6:ca:46:a3:4d:db:db:83:
         33:7c:c6:96:6c:dd:32:32:f3:6b:b3:30:53:84:69:3d:64:ff:
         08:91:40:d7:53:96:4a:a2:53:05:d7:a2:8c:ef:53:de:e7:e3:
         7d:92:e9:07:66:2c:14:8a:20:ce:3c:3d:00:a3:59:d3:6e:b9:
         2d:bf:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----