Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
File:                     7b96254f790811719be97d783ae33a3343e69c16.cer (raw, json)
Hash identifier:          HO4tImlRIdMHeiKxz4shspczjmvtd2o6a8ltG9Xbr6c=
Subject key identifier:   A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F40AEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Nov 2019 15:48:00 +0000
Certificate not after:    Thu 05 Sep 2024 16:50:28 +0000
Subordinate resources:    AS: 269832
                          IP: 45.186.144.0/22
                          IP: 2803:f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15993582 (0xf40aee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 15:48:00 2019 GMT
            Not After : Sep  5 16:50:28 2024 GMT
        Subject: CN=7b96254f790811719be97d783ae33a3343e69c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:0f:cb:70:e8:30:2c:16:54:9a:87:75:a6:
                    45:d8:3d:1f:e9:cd:4b:a4:35:53:ef:dc:13:fc:34:
                    0b:d4:90:a3:80:97:fe:33:b9:09:0c:8e:78:e2:1f:
                    8e:3b:02:df:3e:76:8a:75:9c:ba:76:ee:54:05:a2:
                    5f:80:ba:42:f5:1e:a5:20:96:d2:34:b8:21:8d:52:
                    d8:d9:93:0b:4b:95:8e:c7:28:6e:01:2a:8e:ca:1e:
                    f7:8a:05:a5:4a:57:ba:05:a2:01:f6:3e:0e:03:fc:
                    f7:a8:8d:0d:dd:8e:68:9e:8a:8b:20:72:c8:6c:0b:
                    c4:84:36:d9:df:20:f5:9b:a1:0d:fe:23:44:c9:fe:
                    06:b3:d7:c2:a0:de:2d:40:57:c2:64:30:85:8c:c3:
                    2d:37:ec:70:62:87:c5:88:b6:fd:3e:0d:f0:45:f6:
                    69:4f:a3:96:4c:40:9c:6b:bd:46:06:d2:89:48:21:
                    ea:f7:a9:93:2f:c2:be:43:25:de:bf:48:f7:0e:11:
                    bb:4b:de:c6:05:39:88:9c:0b:65:20:ff:17:52:9e:
                    66:02:fc:c5:2a:7e:eb:92:c5:f6:df:b5:ed:5a:9c:
                    35:a6:57:6a:ee:84:1c:97:7a:b3:ff:b5:a7:23:3f:
                    d6:d3:1a:62:cd:16:51:e1:37:29:ee:f3:0c:5e:5e:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269832

    Signature Algorithm: sha256WithRSAEncryption
         36:34:8d:80:ad:ba:5f:11:41:eb:bf:e7:ee:1d:fe:51:b3:ff:
         e7:e6:19:08:65:a1:8b:cf:fd:56:a0:b6:10:26:35:bd:4b:20:
         16:d7:2a:8b:3a:bb:47:a2:af:b8:95:71:e9:38:4c:14:2f:38:
         ef:63:86:e3:2e:5d:9b:d6:85:ff:6d:aa:ba:f2:70:7c:45:d6:
         06:d2:d8:c3:a2:46:7d:d3:e1:80:18:55:14:e2:ac:be:ef:76:
         06:7d:54:78:ad:4a:f4:7b:84:89:39:fa:94:0d:5e:2c:8c:26:
         7e:36:1a:90:ac:c9:d0:d7:86:1b:a5:c8:11:ce:bb:da:39:0d:
         fd:3c:86:b0:a7:47:09:72:2c:79:3e:71:ec:17:0c:ef:24:32:
         86:98:42:af:82:3c:28:f5:ad:6d:97:b1:a0:23:eb:cf:ee:ef:
         5a:c5:a1:ae:4f:46:8b:db:43:3f:01:c2:2a:71:fb:92:5c:85:
         5e:e5:30:85:1a:b2:80:73:3c:cb:60:0a:68:36:68:27:8b:31:
         5c:ec:1f:7d:7c:26:d5:26:e5:c4:ed:f8:fa:5f:b5:61:f9:70:
         32:73:80:da:a7:76:c6:74:5c:79:13:c0:80:a7:12:06:c6:da:
         bf:a2:62:3c:9c:d3:50:a5:de:95:26:51:d6:86:c1:34:ba:95:
         7d:fe:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----