Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921db54c016559ed7c8b176132b8f5a6803fa3a0.cer
File:                     921db54c016559ed7c8b176132b8f5a6803fa3a0.cer (raw, json)
Hash identifier:          gtkv5+tQd0KDJwzHbxsVfreMorVpYRv4wnKyUuSKJSc=
Subject key identifier:   3F:66:B6:1F:C3:A3:A1:BF:43:50:BE:C1:C8:B2:2B:67:18:C4:ED:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F086A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 06 Oct 2019 01:15:34 +0000
Certificate not after:    Sat 03 Aug 2024 16:54:56 +0000
Subordinate resources:    AS: 269799

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15763111 (0xf086a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 01:15:34 2019 GMT
            Not After : Aug  3 16:54:56 2024 GMT
        Subject: CN=921db54c016559ed7c8b176132b8f5a6803fa3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:ea:35:a2:d6:83:59:7e:f9:9a:cf:4e:1f:
                    85:52:c5:4b:d4:06:48:2f:97:9f:2f:8c:37:7b:b5:
                    01:6a:66:a5:e8:f6:d4:ab:57:a7:c7:52:d9:32:08:
                    d9:c3:f9:2d:bb:86:49:14:72:8e:db:d5:f0:86:e1:
                    ac:7e:98:0d:0f:60:28:f9:c4:cf:c0:ce:88:a3:5b:
                    3a:19:eb:85:ac:57:fb:7b:49:6d:d8:7d:c3:40:7a:
                    4d:16:76:2a:eb:3c:de:d7:6c:97:8a:11:ca:13:21:
                    12:a9:6f:ab:7a:89:cf:d9:36:d1:5a:cb:39:ac:9b:
                    5e:69:e3:5b:65:62:9d:cc:2d:60:d3:a7:68:95:b8:
                    88:06:07:c8:ed:11:c2:6d:0e:98:8c:69:d1:ad:6b:
                    84:1e:c7:04:63:c7:88:0d:40:06:5e:0f:be:37:c6:
                    90:a7:11:09:8b:98:a0:95:21:09:c3:4a:4c:da:a0:
                    52:1d:fb:6a:e8:af:7b:1c:8b:8d:b6:bb:68:f4:e4:
                    0a:cc:ba:86:50:00:d2:23:29:bf:88:5f:b0:5f:db:
                    e4:f2:59:d6:2a:cb:6e:8a:7b:a6:4e:48:56:9f:73:
                    4b:c4:26:bb:70:04:72:fa:1c:fb:68:d2:fe:76:08:
                    96:0e:8b:e3:7f:61:96:0c:45:99:51:de:f1:8c:95:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:66:B6:1F:C3:A3:A1:BF:43:50:BE:C1:C8:B2:2B:67:18:C4:ED:1C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269799

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:a6:8a:ae:05:2f:5b:24:a9:f7:13:21:b3:84:80:f7:cd:
         49:59:13:e9:c8:dc:e5:78:61:07:a4:0f:c7:b0:b3:7a:86:c2:
         75:15:d7:ea:8b:b6:95:24:1a:17:c4:a2:43:26:cf:09:43:1f:
         9a:dc:84:c0:da:22:44:fa:50:5e:c3:23:f7:c4:9d:2a:2a:79:
         28:0c:6b:f1:ac:99:b9:c8:f4:71:1b:1a:f4:ee:1d:d7:35:03:
         74:e6:43:fd:02:a0:59:e7:75:6d:39:0a:e2:01:2b:99:93:ca:
         81:7d:d1:54:11:ee:e0:d4:53:47:12:9a:8a:61:12:f1:8f:21:
         5e:0e:6a:29:b5:04:f2:f3:0e:43:db:49:23:21:68:e1:a3:04:
         10:12:a1:0c:df:21:af:df:0a:e9:1a:e8:ef:da:00:2a:1d:b5:
         cf:44:13:33:64:e0:6d:2d:4c:b0:a6:30:4c:03:2e:82:54:d8:
         a3:54:ab:9c:32:d9:58:de:19:63:90:ce:15:7d:49:c0:56:d7:
         17:a4:f8:c4:1c:6a:7c:95:a8:03:30:35:d3:44:cd:b7:8f:19:
         5e:06:63:fa:82:b1:fe:53:0e:99:dc:00:0d:cd:de:6c:6b:28:
         62:73:36:ca:e8:32:35:d7:ab:26:2d:15:e1:4f:7d:a4:cc:0b:
         1c:a9:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----