Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer
File:                     8e04677b51c6fee610279bb07461734e534b699e.cer (raw, json)
Hash identifier:          rCfRJ0Q/P0Y5Szs4vuGy30Vt5tRSx1FHuS7aSyYsWmk=
Subject key identifier:   5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8470F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Feb 2019 17:53:59 +0000
Certificate not after:    Wed 27 Dec 2023 17:18:20 +0000
Subordinate resources:    AS: 267782
                          IP: 45.171.132.0/22
                          IP: 2803:b7a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14173967 (0xd8470f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 17:53:59 2019 GMT
            Not After : Dec 27 17:18:20 2023 GMT
        Subject: CN=8e04677b51c6fee610279bb07461734e534b699e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:08:40:e1:cb:07:64:1b:89:f8:b7:01:26:
                    65:42:1c:41:cf:6e:1f:ae:80:57:54:6b:87:5d:14:
                    1a:30:64:56:24:f9:0c:9a:ba:56:d1:f0:46:16:64:
                    07:c6:85:ec:67:84:1b:0c:8d:23:20:49:65:21:00:
                    5c:f8:1d:d0:c0:85:9f:7b:9b:e4:78:bc:de:a2:e5:
                    22:94:22:4b:a8:93:38:3f:c4:00:e0:9a:43:a1:5d:
                    84:4c:ec:d1:9e:51:d0:bd:70:38:e9:7e:e7:f6:56:
                    c7:7f:9d:3c:34:b0:a5:36:42:69:67:b1:91:d4:d0:
                    fd:69:17:ec:66:98:de:4a:e4:48:cc:3b:19:7d:49:
                    72:32:70:77:28:fa:f5:c8:86:40:27:52:2e:68:df:
                    f3:fa:e4:5f:7a:71:fd:3e:c9:9e:bc:88:35:85:54:
                    af:48:ab:34:a9:b8:2f:ef:64:e1:d2:d6:1d:a2:c5:
                    fc:a9:71:1f:98:83:84:a3:72:e2:cd:77:4b:1f:eb:
                    90:1b:ac:90:cc:27:90:b4:3a:49:b5:99:5b:af:82:
                    66:e4:fb:4b:52:c9:09:31:29:ee:04:a2:5f:98:bd:
                    90:66:d2:d1:9a:28:d4:42:89:a7:ba:4c:b5:61:ae:
                    c0:6d:50:d8:9c:2b:97:25:2d:18:31:53:85:72:11:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.132.0/22
                IPv6:
                  2803:b7a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267782

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:48:60:be:2c:89:8d:51:7c:17:d0:69:b2:89:07:f3:99:
         07:b1:65:5b:3f:79:fa:be:7d:f2:04:e5:da:25:de:c1:b2:6e:
         0f:ea:66:33:a9:9e:ad:4c:f8:47:2b:1a:67:18:27:7b:7a:9e:
         c1:86:7d:82:58:c5:5d:77:54:98:c2:57:33:f5:2e:16:1e:d0:
         57:13:d0:e9:c6:7d:5b:f6:17:44:9c:3c:be:3b:f3:d2:13:4d:
         14:06:30:b5:6b:40:44:ca:6b:9f:f3:83:84:4c:0d:03:00:c8:
         b7:06:91:01:49:bb:e6:ca:24:95:54:fd:14:af:7f:84:85:de:
         e3:82:bf:1f:23:7a:09:38:ce:88:81:61:0a:f4:85:29:2c:61:
         a5:e2:04:43:1e:7b:f8:25:04:51:35:21:72:1c:fd:b9:4a:80:
         f2:05:28:e0:7f:08:36:a9:1a:c4:c0:0f:90:ec:e7:6a:ca:70:
         f8:5e:e1:99:7a:c9:3a:9f:11:e1:df:6f:9d:95:69:03:92:27:
         f8:6e:9e:0e:4e:93:c1:bc:68:c7:3d:35:42:1a:2b:c7:51:4c:
         20:86:30:88:fe:dc:eb:4a:00:7b:24:dc:ad:cd:b0:d0:6c:c0:
         7d:46:fd:07:4c:3f:c6:fe:96:0a:04:04:44:76:ff:b2:54:20:
         ce:10:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----