Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9560b00cd8f7fb6f273a19b040f9b0d64b7bf02d.cer
File:                     9560b00cd8f7fb6f273a19b040f9b0d64b7bf02d.cer (raw, json)
Hash identifier:          B2rZawc7yP9k+cEKhfaN9eU/kz3M3ABwi5t0DJBSxfA=
Subject key identifier:   5B:C7:84:EA:1A:B9:CC:74:00:19:68:63:33:22:9C:89:48:4F:60:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB87DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5428b0db-0805-4fdb-9aa9-87d667d1efb7/9560b00cd8f7fb6f273a19b040f9b0d64b7bf02d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5428b0db-0805-4fdb-9aa9-87d667d1efb7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Feb 2019 04:35:12 +0000
Certificate not after:    Fri 28 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 52390
                          IP: 190.123.24.0/21
                          IP: 200.75.184.0/21
                          IP: 2803:5600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15435740 (0xeb87dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 04:35:12 2019 GMT
            Not After : Jun 28 06:00:00 2024 GMT
        Subject: CN=9560b00cd8f7fb6f273a19b040f9b0d64b7bf02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:7d:23:15:8d:85:1f:de:fe:8e:5f:78:7e:
                    87:ff:30:d8:12:3f:2d:ae:12:53:62:ca:39:2a:c1:
                    dd:f3:1b:71:7c:3b:6e:94:ad:cb:d2:86:dc:20:97:
                    4b:30:1f:ac:3f:22:1f:9d:a8:b0:02:28:92:39:aa:
                    02:cc:ff:3e:8e:97:2e:f7:9e:0c:54:90:f8:16:95:
                    7b:bb:93:60:52:ce:e4:32:e2:ad:33:40:3b:ce:47:
                    34:cc:bf:f6:83:0e:01:c3:f6:de:9d:8c:e1:dc:5e:
                    63:26:cb:88:c7:81:40:d1:2f:ac:a3:3e:7a:90:ae:
                    3b:be:b2:c2:c3:19:ff:00:66:e6:16:cc:e2:87:a8:
                    53:41:47:ff:c3:3c:52:8f:07:07:50:96:e5:29:1e:
                    0b:19:04:a6:e2:f2:69:55:c3:90:ed:b4:b8:1c:f5:
                    94:d5:55:5b:4f:8f:ba:8f:5d:12:fb:af:fb:96:85:
                    53:11:66:2d:32:29:aa:88:50:46:24:3a:aa:19:21:
                    72:9c:a4:00:f1:f0:24:a5:5b:9f:3b:4f:18:25:df:
                    1e:43:93:8e:75:b2:f2:42:95:32:a1:03:bf:ca:56:
                    a2:09:e3:39:55:58:58:18:94:49:49:20:de:87:a1:
                    f3:82:16:fd:0a:c2:4d:f9:b7:3e:71:a3:c2:4c:5d:
                    71:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:84:EA:1A:B9:CC:74:00:19:68:63:33:22:9C:89:48:4F:60:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5428b0db-0805-4fdb-9aa9-87d667d1efb7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5428b0db-0805-4fdb-9aa9-87d667d1efb7/9560b00cd8f7fb6f273a19b040f9b0d64b7bf02d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.24.0/21
                  200.75.184.0/21
                IPv6:
                  2803:5600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52390

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:95:ad:63:fa:cd:a1:eb:b1:2a:eb:40:01:a3:ba:f1:ca:
         50:e6:64:7e:86:63:b3:8a:6e:e9:8b:91:8d:59:6b:47:98:b6:
         79:cf:26:48:3e:05:9d:5e:75:05:b3:e1:46:b6:a5:88:ff:bd:
         b6:30:00:c3:5c:75:56:1e:eb:b4:10:42:9b:14:d0:a5:2f:8b:
         a7:61:77:0e:7d:3f:36:d9:bb:72:c0:12:2b:93:eb:41:1e:97:
         8b:8c:3a:ef:44:6b:0d:26:af:c4:43:a8:ba:4d:69:34:c1:b2:
         db:68:67:e8:47:3c:27:4d:99:e8:c4:da:e1:91:24:bd:92:9b:
         11:f3:e4:9b:84:dc:35:cb:2a:99:a0:97:b0:18:96:15:23:b3:
         c6:43:6f:44:07:f0:18:29:75:b4:71:db:3f:c8:2e:cf:73:70:
         44:02:7f:a5:39:de:c1:cf:dd:9f:12:b4:3b:f6:59:18:07:19:
         61:7c:f4:eb:d3:04:9d:3d:97:78:71:73:25:f1:69:5f:c2:05:
         96:f9:dc:d0:23:9d:bf:54:01:20:3d:a0:5f:69:9a:81:7e:f5:
         04:88:d0:e4:b2:89:93:78:46:d2:cb:ba:f1:5c:51:7a:9d:1e:
         ec:87:0c:e3:de:30:90:41:89:18:07:cd:d7:6f:ba:aa:16:e1:
         52:90:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----