Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97342a61b25083c0f11d5957bfbfbf6fed576d22.cer
File:                     97342a61b25083c0f11d5957bfbfbf6fed576d22.cer (raw, json)
Hash identifier:          SdZ/yyBJhEtILaKvE943du2yTbgFEeD2zP+S9qzGNkw=
Subject key identifier:   BB:0F:49:B7:83:5C:C1:C0:FC:84:C9:20:70:05:09:CA:59:FD:14:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5AA8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/97616e4c-eeef-4dfa-8339-d80224f7a888/97342a61b25083c0f11d5957bfbfbf6fed576d22.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/97616e4c-eeef-4dfa-8339-d80224f7a888/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2019 12:40:51 +0000
Certificate not after:    Sat 25 Nov 2023 22:24:11 +0000
Subordinate resources:    AS: 267793
                          IP: 45.169.250.0/24
                          IP: 2803:6ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14002827 (0xd5aa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 12:40:51 2019 GMT
            Not After : Nov 25 22:24:11 2023 GMT
        Subject: CN=97342a61b25083c0f11d5957bfbfbf6fed576d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:b9:65:99:79:e2:52:46:e9:5b:a1:65:e2:
                    1b:0f:66:a3:2b:b0:fb:67:4d:75:b1:af:60:1a:a4:
                    8a:e8:0f:e3:d7:c0:3a:b5:23:c8:15:69:46:cb:54:
                    0f:01:2a:32:32:98:b3:15:5a:95:94:f0:e8:31:08:
                    9c:aa:fe:55:39:7c:c5:84:d8:87:02:81:74:6b:72:
                    b8:25:6f:fa:46:b1:2e:44:5d:de:84:31:a5:ee:b3:
                    50:4c:bb:f5:4b:5c:c0:93:0a:7e:6e:3c:a2:9c:92:
                    29:7a:7b:15:e6:d0:03:e9:98:29:0d:69:0b:77:d7:
                    77:fa:25:32:be:7a:d7:34:16:74:66:ea:9b:f3:8a:
                    c7:e2:db:4d:1a:e4:19:1f:00:49:f9:37:fc:da:29:
                    ea:00:63:b7:11:9f:72:af:83:b0:dd:26:83:01:76:
                    ce:25:a1:0c:ca:58:74:df:d7:ba:f2:95:40:22:fe:
                    79:a7:4d:b6:3e:93:48:18:99:c2:3c:67:00:84:76:
                    67:20:76:ad:91:8d:09:4e:b9:00:26:15:52:a2:d0:
                    38:90:1a:fc:ad:35:ac:af:5e:fe:52:bd:20:90:35:
                    f2:b6:65:cd:70:7e:cd:33:f8:96:28:6d:b8:af:27:
                    b9:14:9f:62:d5:59:02:df:40:8f:e1:9e:64:39:8e:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:49:B7:83:5C:C1:C0:FC:84:C9:20:70:05:09:CA:59:FD:14:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/97616e4c-eeef-4dfa-8339-d80224f7a888/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/97616e4c-eeef-4dfa-8339-d80224f7a888/97342a61b25083c0f11d5957bfbfbf6fed576d22.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.250.0/24
                IPv6:
                  2803:6ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267793

    Signature Algorithm: sha256WithRSAEncryption
         92:99:41:c9:b7:f3:4b:46:52:b3:a2:2b:55:0b:69:09:e5:86:
         8b:08:4d:3e:f7:49:d6:71:ce:ae:15:eb:7e:c2:0a:1e:e1:93:
         7c:8f:de:87:e2:97:ee:89:7a:97:1e:b3:d1:fd:c8:d8:0c:c8:
         96:f9:4a:aa:38:51:08:9c:9c:9e:26:cc:26:eb:9f:9a:37:92:
         08:41:95:3e:ac:32:36:6a:8d:29:8b:f7:c2:fb:32:d1:30:05:
         32:28:6d:82:99:e5:e3:eb:d6:6d:06:6a:3c:dd:fd:07:e2:35:
         26:d8:a3:41:dd:c0:4f:68:68:ed:4c:17:bf:32:69:b4:b5:49:
         e4:61:a6:ff:01:98:59:6c:42:07:f7:69:ff:44:c5:ca:4b:36:
         85:d9:c0:84:51:09:5f:98:36:0b:53:2d:f4:db:01:38:34:a4:
         6e:90:48:d9:7d:dd:79:8a:d6:9f:52:df:bc:d0:48:2d:7d:a6:
         03:b7:f3:52:ab:3d:ce:bb:d3:26:37:45:56:ec:cf:86:ed:59:
         10:7c:fa:b2:34:67:cd:0c:98:04:a1:5b:58:47:b5:f3:2a:55:
         d6:eb:12:2d:bb:ef:12:33:c8:72:b0:25:95:23:89:85:c0:be:
         cb:ec:cd:bb:47:cf:04:3c:24:29:c7:50:a4:2b:08:29:b1:54:
         ba:d4:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----