Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.cer
File:                     821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.cer (raw, json)
Hash identifier:          C9tnfia1HN/0Py31cjp6qjI0O3RktvodQNH0RkogAdE=
Subject key identifier:   45:20:96:A6:4C:F8:3A:BF:7A:BC:92:44:FE:61:23:92:1A:4D:67:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F25ED4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Aug 2019 19:46:30 +0000
Certificate not after:    Mon 19 Aug 2024 20:21:56 +0000
Subordinate resources:    AS: 264796
                          IP: 170.78.40.0/22
                          IP: 2803:24c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15883988 (0xf25ed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 12 19:46:30 2019 GMT
            Not After : Aug 19 20:21:56 2024 GMT
        Subject: CN=821e1ab92f08ac7402fec3c5b685dc43f4c2f28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:c6:9b:6b:72:6c:11:e7:a1:dd:0e:d0:70:
                    df:18:34:f3:2d:35:d7:44:ea:39:c0:99:3f:22:b1:
                    9b:da:dd:a6:28:21:11:ce:67:23:91:cb:8a:59:54:
                    61:3b:82:9a:eb:d3:5a:0d:70:27:aa:a2:c2:07:05:
                    aa:b1:de:35:79:d6:89:2a:69:15:71:eb:aa:89:07:
                    49:72:c3:fe:3a:2e:fa:95:6f:9b:00:de:6f:b6:36:
                    01:23:bc:63:cf:cc:a9:af:48:13:72:88:e3:36:a2:
                    27:0f:ae:18:04:80:e0:9d:31:63:48:3d:33:2e:41:
                    da:fb:65:5d:34:e1:b5:29:ca:4d:0b:5a:15:df:e2:
                    bf:96:40:1c:8c:de:c8:93:57:5a:27:57:57:ea:fc:
                    a9:51:ef:4d:bb:39:71:f3:30:6d:1e:cd:3f:68:ba:
                    c7:fe:1a:d6:a2:6c:30:3f:80:b9:30:84:b6:ae:f4:
                    47:82:79:62:fd:d8:d9:91:d0:ef:dc:28:30:d6:33:
                    27:96:89:29:a3:d6:ef:50:77:9b:e4:f1:85:b5:fb:
                    bf:dd:4d:08:d1:da:bd:19:8b:ab:7b:06:f2:7b:a5:
                    f6:46:1b:4c:7b:e3:ce:a9:04:9f:a6:0c:c0:14:50:
                    b3:ec:35:fc:52:df:6e:df:4c:c4:34:a7:c2:66:c9:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:96:A6:4C:F8:3A:BF:7A:BC:92:44:FE:61:23:92:1A:4D:67:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.40.0/22
                IPv6:
                  2803:24c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264796

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:a9:49:d2:24:2b:59:17:1c:12:62:eb:96:63:4d:3f:2b:
         ac:b6:0f:88:d6:8d:58:8d:26:85:75:50:18:15:cd:7c:be:e1:
         19:5b:b9:0a:ed:1d:94:b1:b0:d9:62:dc:11:1b:a0:70:64:82:
         48:ea:9f:d2:09:00:9a:c3:c7:2b:79:30:fb:fe:d3:71:dc:ea:
         d8:83:cb:92:ba:ff:d5:25:50:6d:49:8c:24:3b:79:66:02:d1:
         4b:3e:d4:5d:5d:9c:0c:00:63:ff:a0:ee:f0:fd:65:ac:b4:19:
         3d:e2:4c:1b:30:67:29:8d:7e:5a:54:dc:71:1a:e0:15:7f:e1:
         f7:48:ed:3d:2c:57:db:c2:d9:5d:43:bd:6a:41:cb:7e:83:c7:
         5b:78:54:aa:f8:c2:ed:c0:8c:ad:17:38:3f:cb:72:c0:94:ad:
         70:38:3d:8d:58:de:c4:e1:6d:0f:3e:6e:46:e4:bd:bf:d2:7a:
         0a:38:8e:c8:66:b3:4a:8f:7c:1d:2c:92:ca:7b:72:c3:b8:af:
         b3:b3:ce:87:f7:dd:d9:e3:e4:c2:16:3b:2d:00:2b:70:12:be:
         be:02:49:a4:af:99:25:3c:08:9f:fe:3f:e0:d1:fb:de:bf:69:
         fa:1e:6d:56:50:4e:eb:2f:4a:4a:c6:b5:6a:d5:37:09:42:6c:
         8e:01:10:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----