Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
File:                     75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer (raw, json)
Hash identifier:          H77EYwYmuANnx9PV7ZBaS4rlqHBCUI8JcrTuxhlCM2E=
Subject key identifier:   5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D98B7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Aug 2020 18:05:56 +0000
Certificate not after:    Sun 14 Jan 2024 14:00:00 +0000
Subordinate resources:    AS: 19889
                          IP: 161.22.0.0/19
                          IP: 181.118.224.0/19
                          IP: 190.3.128.0/19
                          IP: 190.57.192.0/19
                          IP: 200.85.96.0/19
                          IP: 2800:6d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14257021 (0xd98b7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 26 18:05:56 2020 GMT
            Not After : Jan 14 14:00:00 2024 GMT
        Subject: CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:6f:b9:5e:78:8c:92:9c:ae:36:84:86:84:
                    7c:df:c0:c9:c1:13:9a:b6:db:e2:95:c8:6f:a9:ff:
                    62:00:a0:c2:3d:7e:86:63:e4:5a:b8:47:99:77:87:
                    d5:51:47:8c:c7:25:96:c8:2f:cf:1e:6f:eb:b5:d2:
                    d2:46:4a:15:e4:c2:00:0d:bd:fb:0e:c4:c7:b7:5c:
                    2e:53:c8:84:09:62:84:99:0e:10:e9:22:d6:84:cf:
                    b0:5c:a3:d2:96:36:2f:c7:23:31:61:17:26:d9:f4:
                    bc:41:6b:aa:b1:b0:ed:8b:a2:44:3d:fe:4d:41:1c:
                    06:36:d7:eb:53:e1:34:eb:13:98:35:2a:d8:b8:d3:
                    d9:5c:5b:39:08:18:46:31:36:24:41:bf:91:c2:c9:
                    3d:fd:c7:27:ba:ff:89:bf:b6:f7:92:54:b3:67:3b:
                    6d:a9:22:44:a7:a8:17:ee:35:78:96:21:9b:8a:8a:
                    23:52:09:48:3f:04:c6:81:5a:c3:00:8d:04:e2:09:
                    0c:f2:75:51:11:49:7f:83:ee:d5:88:13:eb:55:4d:
                    6b:54:03:49:54:74:64:d4:2d:87:0b:ef:07:7f:f8:
                    b0:29:63:0a:be:6c:f5:25:40:be:5a:24:fc:f7:4f:
                    69:a6:ee:af:6f:bf:fa:87:d6:81:78:81:29:33:02:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.0.0/19
                  181.118.224.0/19
                  190.3.128.0/19
                  190.57.192.0/19
                  200.85.96.0/19
                IPv6:
                  2800:6d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19889

    Signature Algorithm: sha256WithRSAEncryption
         a9:3f:0b:cf:fc:1f:6e:ed:50:d1:e7:80:df:36:2a:dd:56:c0:
         df:d3:c2:a6:bf:b4:4a:04:d9:47:b0:ea:f3:d0:77:66:f0:53:
         23:24:82:41:a1:b6:4e:12:bd:fe:1d:82:72:1d:ea:fd:97:88:
         0e:99:f7:ed:fb:8b:7c:86:d0:5d:c9:f6:9b:c1:10:3a:da:08:
         3e:b6:3a:45:f5:2d:fc:bd:f4:c6:4a:e0:d5:f0:b8:33:c2:b0:
         d6:e8:c2:f9:12:30:4c:22:9c:0d:f7:28:15:9b:0e:16:d1:ae:
         da:86:58:09:aa:f6:4f:48:0b:55:c5:69:53:0f:ac:f4:a7:e5:
         82:53:5b:25:6e:0c:11:8d:3c:67:52:d2:25:0a:6b:c4:a4:b5:
         26:4d:3f:51:08:a7:fc:00:0b:41:a8:f3:64:4c:65:55:59:42:
         68:0b:f5:82:c1:f6:82:9b:22:7c:b6:39:5c:93:ee:77:64:c6:
         52:93:c5:53:43:24:07:70:76:75:75:d3:2b:a9:b1:0d:1f:23:
         1e:ab:26:4b:31:9a:37:83:ad:2b:13:46:73:fc:ae:19:3b:ef:
         4b:07:b9:3d:9b:9e:2c:24:97:a4:c7:f5:67:f2:42:58:9f:a3:
         96:20:f7:de:36:64:ad:db:76:f3:85:0d:4c:a1:be:23:f0:d7:
         18:8b:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----