Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7683d32cdb4affaba4c3cf86675e6414d022d8db.cer
File:                     7683d32cdb4affaba4c3cf86675e6414d022d8db.cer (raw, json)
Hash identifier:          QzzAYLcl5Nlwz9a6hJKY5Sw6bkJudIaRMWjQvHmouYU=
Subject key identifier:   81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5A42F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Jun 2019 20:45:48 +0000
Certificate not after:    Sat 25 Nov 2023 17:22:18 +0000
Subordinate resources:    AS: 266709
                          IP: 45.229.148.0/23
                          IP: 2803:fd20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14001199 (0xd5a42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 20:45:48 2019 GMT
            Not After : Nov 25 17:22:18 2023 GMT
        Subject: CN=7683d32cdb4affaba4c3cf86675e6414d022d8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:a2:87:b1:dd:9d:66:43:72:b8:be:5f:b4:
                    e9:e4:fa:48:98:89:e4:e2:b0:59:17:cc:ea:f5:93:
                    f9:25:c0:b0:a5:e3:2e:46:21:35:e1:56:fd:99:20:
                    e8:1e:0b:34:52:0f:3b:26:62:9f:e0:10:ee:83:2d:
                    3a:26:11:16:e5:68:1c:00:85:79:c7:ec:b9:54:23:
                    20:e8:64:02:7f:4c:8f:71:84:a1:92:71:d2:03:79:
                    74:f3:f3:e1:df:86:58:c2:35:e2:85:c5:34:7a:27:
                    8c:f6:3b:6d:2f:a4:0e:d6:d0:a3:6f:01:14:54:54:
                    a6:60:b5:f8:75:5d:b0:bd:12:af:8a:9c:65:a3:64:
                    aa:7c:6f:31:5e:15:51:17:87:22:4f:7f:2a:3d:36:
                    77:57:04:9f:b9:49:41:18:f9:3e:c7:eb:f7:00:13:
                    4d:59:2f:05:e1:09:1b:f9:b0:59:f1:86:0d:7b:76:
                    28:b5:e1:8c:04:6c:c3:38:3b:df:ff:97:c4:3a:71:
                    9c:7f:cc:95:ee:d9:a4:ee:fb:d0:f7:98:2c:1c:65:
                    d6:da:eb:83:21:bc:ad:6e:b7:ae:f0:0c:db:af:21:
                    86:9e:b9:87:9d:b2:f7:27:97:92:bd:c7:b6:73:fa:
                    d6:27:0c:8e:02:d8:01:52:97:cb:8e:93:43:3a:32:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.148.0/23
                IPv6:
                  2803:fd20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266709

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:5e:5f:30:ab:c1:32:a0:66:f5:9b:e5:a6:09:c2:0c:83:
         3e:19:80:72:c9:1e:c2:96:4a:5a:a2:5f:99:60:6f:ce:31:e1:
         4f:99:53:76:92:4b:a1:47:25:59:d4:70:ab:3d:ec:73:28:eb:
         db:f1:5f:17:c9:6c:7b:19:71:0f:f3:b3:45:df:3e:1c:05:91:
         f2:55:68:96:03:82:90:68:17:65:77:c0:61:86:db:db:57:01:
         6b:9a:e8:35:3c:a0:f6:df:76:bd:52:5f:0e:20:99:e4:aa:66:
         cf:7c:aa:c5:b7:a1:b6:31:66:30:31:cc:1c:9d:01:28:19:37:
         0d:fe:73:77:e8:84:6c:76:1a:0b:90:74:94:7b:d3:93:54:a8:
         9b:b0:1b:96:6d:41:15:94:0f:23:eb:00:65:8f:4e:15:34:a1:
         fb:98:eb:d5:7e:91:54:ae:09:50:e8:c8:75:c1:c8:5e:1a:34:
         bc:a7:3d:11:35:83:ef:8f:3a:73:33:82:e2:27:ea:12:73:70:
         da:df:c2:90:19:fc:d8:d3:55:dd:ed:ad:30:ff:25:80:05:05:
         77:85:dc:59:b1:6b:9b:de:9a:37:4f:a4:8f:38:44:51:45:6b:
         f4:00:db:3a:1c:a7:71:60:3d:fa:57:80:19:dd:ee:c3:ce:b1:
         0b:8c:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----