Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90727e944be40b95d0b417719399933d286f880f.cer
File:                     90727e944be40b95d0b417719399933d286f880f.cer (raw, json)
Hash identifier:          EYBclhnKwQt/cZCmFe57CBJ/iLczhk63QdmmIZIDJcs=
Subject key identifier:   B5:9C:50:BF:59:E5:5A:AA:96:BC:1D:2B:7F:81:FA:E4:95:D3:C7:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA2F8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/90727e944be40b95d0b417719399933d286f880f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Aug 2018 13:06:17 +0000
Certificate not after:    Mon 17 Jun 2024 18:38:40 +0000
Subordinate resources:    AS: 266888
                          IP: 45.160.196.0/22
                          IP: 2803:c6a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15347595 (0xea2f8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 21 13:06:17 2018 GMT
            Not After : Jun 17 18:38:40 2024 GMT
        Subject: CN=90727e944be40b95d0b417719399933d286f880f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:b2:94:de:70:f1:19:87:76:63:b8:7f:07:
                    48:f1:58:fb:64:1d:92:30:47:fe:c3:c8:1c:04:e8:
                    d7:b5:cb:50:ab:cb:fa:b7:22:f4:5c:38:30:9e:28:
                    1e:ff:0b:cd:bf:c7:5d:34:fb:84:52:33:58:a9:d1:
                    68:10:5d:f7:62:09:ce:30:b5:8c:51:18:71:eb:b2:
                    7c:73:5b:bf:88:2b:ef:73:40:81:2c:43:fa:6e:2a:
                    62:c1:66:66:61:a4:a4:4c:35:c1:81:d7:a7:d3:73:
                    ca:e8:be:d8:28:78:a2:dc:2d:a9:9c:f6:c0:cd:e9:
                    f8:a0:09:09:fc:3a:60:2f:25:24:d7:65:b5:18:39:
                    b7:52:74:f5:d2:99:8d:ad:15:3d:6f:d4:8c:34:69:
                    3b:e7:79:15:b3:7a:de:b9:0e:e5:90:bf:ef:ee:67:
                    17:de:39:34:51:1d:da:39:af:1f:6c:7d:b4:11:04:
                    a2:c2:49:37:6f:33:aa:28:6d:48:c1:43:76:fd:c5:
                    e8:f6:08:a3:cf:71:21:24:73:e6:26:d5:ee:22:60:
                    c0:6c:65:33:f2:f9:fb:b2:ca:1a:af:34:ce:41:a7:
                    cc:f9:2a:46:ce:cf:5c:e7:c5:ed:1b:5c:c4:09:07:
                    32:a3:c1:66:af:78:56:dd:4d:88:2a:de:06:ea:17:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:50:BF:59:E5:5A:AA:96:BC:1D:2B:7F:81:FA:E4:95:D3:C7:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4d6c2c3-65c4-4fd5-aaff-e39ab37c780b/90727e944be40b95d0b417719399933d286f880f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.196.0/22
                IPv6:
                  2803:c6a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266888

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:6c:90:2e:6f:a0:5a:03:0b:92:85:ec:e0:e0:60:d5:ee:
         5f:cb:76:9f:9f:a6:9c:1e:c1:85:d9:09:38:4b:1d:fc:d8:6f:
         26:88:71:88:5c:4e:39:d4:a2:a4:38:48:28:5a:a9:ab:07:86:
         3f:fe:7f:1e:00:03:a6:c7:ea:92:8a:7b:ce:ce:ab:ee:bc:7c:
         aa:39:04:61:ae:ed:e9:6e:52:a4:8c:e4:ca:e8:db:c7:cf:8d:
         1d:f6:fe:5c:cb:08:73:c8:e9:08:4f:ba:6c:4f:49:20:32:5e:
         e8:eb:92:be:dd:67:bc:bd:a6:9c:95:2f:ef:f4:d7:c3:67:c4:
         54:c9:d8:5c:d2:f9:ea:84:be:aa:08:b0:06:58:23:0b:24:76:
         2f:62:91:89:38:2a:e7:ff:4c:24:fb:59:66:01:c8:e3:bc:17:
         54:31:d8:65:3e:8b:4e:ea:3b:c8:3c:c8:94:77:92:47:87:ed:
         8e:57:6d:d7:d5:86:66:d6:a3:1b:be:63:d7:e4:f0:c9:e2:e3:
         8d:eb:85:f4:26:54:43:c5:ac:d0:e7:fd:59:b7:9b:d2:7a:f9:
         cc:6f:ab:f4:7f:a4:04:19:ba:7b:34:f7:5b:7b:b7:bc:e9:53:
         d6:c4:37:92:17:38:59:bb:a3:41:90:6c:f9:0c:a2:4a:ec:98:
         8f:b0:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----