Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4.cer
File:                     99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4.cer (raw, json)
Hash identifier:          l3qOpCIhGLwG3wqvFV4wTR0oSCaMACybADnGLfcqh0Q=
Subject key identifier:   95:99:DE:F0:B2:D2:73:2D:D3:A0:4E:87:83:B1:04:B1:A3:74:B6:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAFF59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Feb 2019 04:41:38 +0000
Certificate not after:    Mon 28 Oct 2024 19:53:50 +0000
Subordinate resources:    AS: 267746
                          IP: 45.169.148.0/22
                          IP: 2803:43a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16449369 (0xfaff59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 04:41:38 2019 GMT
            Not After : Oct 28 19:53:50 2024 GMT
        Subject: CN=99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:89:41:0e:0f:77:c1:a5:ca:04:ef:ce:d1:
                    60:aa:28:a7:92:b1:45:c3:d2:1b:53:5d:cc:1d:30:
                    9d:f3:f6:76:07:a3:69:49:43:03:1c:44:35:4c:74:
                    ee:d7:18:2a:86:c1:1f:a4:e6:cc:ae:ff:c5:90:b2:
                    60:ff:fa:0f:bc:22:16:fc:9d:87:89:ee:55:42:fd:
                    18:fa:1e:66:66:57:67:12:43:c3:de:4a:f5:44:4b:
                    c1:8d:ab:c0:5d:5b:4a:88:15:55:bd:1f:ae:ed:0a:
                    15:dc:49:62:8e:c3:39:1f:6b:17:57:30:32:5d:92:
                    a9:55:37:62:8b:78:e1:0a:7a:d5:bb:9b:4a:94:bb:
                    7d:61:e9:c9:d1:90:85:f1:fb:a1:d5:cc:81:82:2e:
                    02:80:58:d4:fe:02:35:99:ab:6b:8d:7d:69:4a:be:
                    42:04:2e:2a:63:f0:5d:33:fc:2d:3d:24:39:5c:d7:
                    74:cb:df:b3:f1:e0:c9:fd:a9:df:f3:6f:b1:5a:fa:
                    c0:25:0e:35:d1:71:78:26:d0:6f:e6:60:6e:9e:84:
                    a5:c9:a9:db:49:26:10:4b:d5:c8:e4:6e:5e:a0:d3:
                    7c:e5:0c:7b:e3:e2:92:98:a5:b1:c5:a9:12:0f:67:
                    73:a6:8e:a0:63:3b:00:e5:f8:bf:77:1e:b0:38:b0:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:99:DE:F0:B2:D2:73:2D:D3:A0:4E:87:83:B1:04:B1:A3:74:B6:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.148.0/22
                IPv6:
                  2803:43a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267746

    Signature Algorithm: sha256WithRSAEncryption
         62:07:98:cf:80:aa:37:0c:a2:eb:7c:3b:7a:9e:b9:4d:2e:d6:
         65:9c:9d:48:08:f7:94:e6:7c:12:d4:19:cf:12:f6:09:74:bc:
         5c:fd:05:b5:81:9a:f3:d1:b3:3f:fb:9b:bc:3e:d6:bb:b0:fe:
         8a:d4:2a:9d:4f:c2:03:75:e3:74:18:73:40:67:5c:d6:a7:0a:
         12:64:37:9b:6e:33:02:92:e5:ec:5f:37:f7:3d:67:5c:b4:c5:
         96:29:63:fd:fd:50:31:26:30:3b:7b:f7:21:0a:c1:63:88:37:
         27:68:1d:1b:9b:8c:fc:af:f0:f6:64:58:bb:70:0e:98:3c:be:
         9c:69:ec:14:c1:37:c9:bf:43:5a:8a:60:db:67:73:71:11:5b:
         90:d3:73:4b:27:cd:d7:38:73:b2:bc:a3:b1:bb:e8:b9:8b:b9:
         3f:08:86:89:cb:e6:0e:14:6f:05:ee:ea:3b:d5:f1:32:03:01:
         ef:42:0c:b1:e8:00:b3:9c:1d:8d:ab:f0:42:aa:87:47:b2:61:
         6b:73:94:ea:c3:70:7d:fe:5b:38:bb:66:76:fb:6f:f2:80:64:
         1e:9c:b0:ee:e2:5b:1b:31:b7:52:cb:e0:dc:da:03:27:33:f4:
         68:6b:10:c9:dd:3b:37:38:c5:35:77:17:ea:42:cf:a0:16:10:
         24:83:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----