Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7467c08fcbf85d7bba2e5b38dee789abd976eee4.cer
File:                     7467c08fcbf85d7bba2e5b38dee789abd976eee4.cer (raw, json)
Hash identifier:          QEl+IXzr/f3467TyZw0cckpslZz7OhoD4BO95i4DjFM=
Subject key identifier:   40:8C:ED:4F:48:CD:43:57:6B:6B:82:9A:50:FE:90:96:72:7B:EF:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7ABCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ccc17962-63f9-4184-8b04-d0c5bd09bc1d/7467c08fcbf85d7bba2e5b38dee789abd976eee4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ccc17962-63f9-4184-8b04-d0c5bd09bc1d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2019 22:28:25 +0000
Certificate not after:    Wed 20 Dec 2023 17:28:53 +0000
Subordinate resources:    AS: 267777
                          IP: 45.171.180.0/22
                          IP: 2803:17a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14134223 (0xd7abcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 22:28:25 2019 GMT
            Not After : Dec 20 17:28:53 2023 GMT
        Subject: CN=7467c08fcbf85d7bba2e5b38dee789abd976eee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:6a:16:84:44:bb:1e:eb:7d:43:a3:a6:78:
                    b8:47:3d:1e:b0:b3:df:40:e6:33:b0:17:eb:85:2e:
                    87:d5:d7:b0:51:9c:1c:fd:69:34:9f:26:2f:8c:ff:
                    c1:52:2e:b6:11:45:1e:27:76:83:bb:e8:ce:e2:20:
                    59:84:f7:bc:14:61:b3:22:42:62:23:92:35:f3:0d:
                    cb:4e:76:a3:bb:1c:22:05:37:52:b9:07:e8:58:19:
                    0e:3e:ac:38:ce:ba:4e:6f:e7:ca:c5:3d:a4:9d:1f:
                    8b:66:d8:cb:b7:58:8e:82:63:3c:8c:33:c5:d7:6e:
                    69:22:57:b5:14:32:7b:12:3d:ec:6e:0c:24:1b:18:
                    83:64:10:be:83:53:e5:32:6b:2a:20:70:68:35:8d:
                    c7:46:47:63:a7:ce:59:e1:d0:77:57:79:ba:92:b0:
                    89:82:55:88:e4:9e:eb:20:eb:f8:81:98:61:eb:3f:
                    e2:bb:b8:f2:95:e4:84:c5:4c:27:ef:ed:b2:46:92:
                    dd:bf:03:ba:cb:5c:14:7a:c3:ad:a1:f0:84:9f:60:
                    1e:0c:3b:9d:4e:d8:9f:ba:90:0a:39:6a:67:ec:05:
                    fe:8d:96:0a:37:ce:32:13:56:7d:19:f4:f9:00:d6:
                    e2:69:a1:c7:1d:4c:d0:e5:d4:a0:7d:13:63:15:1e:
                    00:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8C:ED:4F:48:CD:43:57:6B:6B:82:9A:50:FE:90:96:72:7B:EF:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ccc17962-63f9-4184-8b04-d0c5bd09bc1d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ccc17962-63f9-4184-8b04-d0c5bd09bc1d/7467c08fcbf85d7bba2e5b38dee789abd976eee4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.180.0/22
                IPv6:
                  2803:17a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267777

    Signature Algorithm: sha256WithRSAEncryption
         62:93:a3:41:d0:26:83:06:d1:de:a9:37:40:3b:3f:34:7c:d8:
         1e:8c:72:93:a8:19:a0:03:75:94:c4:7d:86:7b:5b:7c:13:95:
         2c:f8:35:21:ad:7a:96:01:47:eb:88:80:8d:98:8a:a5:12:c2:
         fb:be:b1:fe:1c:3a:5f:a8:8f:e4:50:52:1b:17:69:f5:d3:3a:
         2e:33:18:5d:69:c5:4c:2d:25:02:08:28:87:f0:eb:63:80:7e:
         6d:6a:28:f2:33:26:00:0e:60:a9:0c:57:96:84:a2:72:c3:59:
         81:df:d4:9c:75:f1:53:ef:94:1d:98:e4:b1:e6:75:84:04:2d:
         d1:a0:71:88:31:19:b3:c4:5a:01:a4:74:5e:bb:eb:b5:89:3d:
         74:50:b7:72:f1:2f:af:20:30:1f:8b:66:1d:4b:26:57:40:b4:
         98:2e:56:80:17:1b:02:f9:b5:12:66:2c:89:46:cc:2d:9a:02:
         90:ce:4b:1b:e3:ca:bc:f5:57:69:a9:85:95:43:09:d9:81:8c:
         b7:e1:14:b4:d3:70:64:0a:f9:40:28:c5:1c:3b:f1:50:cf:49:
         ee:6d:4f:6c:00:4b:65:db:45:af:fc:e3:0c:85:91:3c:b7:f1:
         a3:1b:c4:9a:98:f4:e5:1a:ef:07:f4:11:8f:4a:6d:75:8d:44:
         8a:0a:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----