Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9.cer
File:                     9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9.cer (raw, json)
Hash identifier:          vWmxHBtUgW+C3j1/e5bhMCmI0pfumi+yAQKXKKvGQLE=
Subject key identifier:   53:53:12:97:1B:92:05:9D:EA:8B:D4:FA:51:DC:78:E7:EC:F7:BF:22
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9C717
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 26 Sep 2019 19:38:52 +0000
Certificate not after:    Fri 14 Jun 2024 15:21:52 +0000
Subordinate resources:    AS: 269762
                          IP: 45.181.164.0/22
                          IP: 2803:8560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15320855 (0xe9c717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 26 19:38:52 2019 GMT
            Not After : Jun 14 15:21:52 2024 GMT
        Subject: CN=9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:7e:33:0b:f3:4d:38:1d:d7:f5:5d:fd:50:
                    41:66:d5:b6:14:d1:6c:32:e6:70:27:78:6c:c9:56:
                    e2:1a:e6:8b:1c:8e:96:c4:b7:d3:93:f5:64:bf:f1:
                    39:1a:84:48:f6:9a:2a:f9:b7:04:a1:db:10:9e:6a:
                    a9:d1:74:9e:d9:8b:a7:78:23:66:be:a2:b8:72:89:
                    1a:4a:42:1d:17:99:ce:19:c0:40:d3:8a:53:3f:af:
                    d4:66:9a:36:b1:50:6b:e8:9c:98:c8:69:c1:4a:3c:
                    04:c1:6f:03:8d:5a:5f:71:63:76:b1:c6:18:2e:ce:
                    09:8b:8a:43:58:8b:31:88:24:2e:10:bc:46:45:ee:
                    3b:ad:8c:1f:d5:d8:6b:64:9c:e9:b9:24:fb:e9:74:
                    c2:ae:16:30:a6:bf:ae:a7:ee:ca:4a:c6:15:97:12:
                    b4:ef:54:dc:0f:c1:64:92:01:1f:59:81:0e:7c:bc:
                    3b:80:13:58:47:47:48:a6:f6:67:b0:a7:86:a6:ae:
                    d3:8a:d2:8e:78:b6:f2:42:d9:6a:50:c9:11:64:b5:
                    84:3a:93:b6:0c:25:ff:b3:32:d7:28:35:3f:96:8b:
                    4c:ef:2e:76:57:08:47:bb:0c:74:03:4f:3f:e8:f7:
                    19:ab:3e:58:61:03:cc:51:e3:93:92:98:fc:1f:eb:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:53:12:97:1B:92:05:9D:EA:8B:D4:FA:51:DC:78:E7:EC:F7:BF:22
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.164.0/22
                IPv6:
                  2803:8560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269762

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:93:a3:6e:47:b0:a1:25:c7:de:9e:5e:23:ef:49:a9:12:
         7d:45:26:ed:85:6c:72:99:65:66:c3:f2:a6:6c:42:96:bb:67:
         5c:08:1a:ed:16:5b:51:6c:06:a6:54:c1:1d:71:41:99:1b:af:
         e2:fb:7c:05:d4:05:f9:86:4d:a1:7b:e9:5d:6e:c1:e7:fe:a9:
         a3:bd:f8:49:1a:df:7c:3a:4d:53:ba:71:be:42:3e:3e:c0:61:
         98:b9:9c:83:1c:8d:fb:4b:72:d4:0b:41:37:8f:ca:5f:bb:6e:
         65:a6:24:d2:a2:3f:f4:1f:d9:ef:46:3d:70:87:20:fa:63:36:
         91:a1:06:bb:b6:04:05:22:77:c2:6f:bb:a7:29:3e:2b:8b:42:
         6c:1e:ba:f4:aa:0f:d1:01:e0:e0:a3:d5:99:58:8d:9b:e4:91:
         ad:af:17:03:32:f4:2c:ee:46:b7:1f:9e:ef:d2:71:94:30:39:
         c4:8f:d6:99:b0:62:35:2d:0d:0d:5e:9d:92:47:44:c2:f8:ed:
         d4:ee:66:41:5d:d3:97:80:30:d3:67:2e:59:d7:a0:5a:ca:f0:
         f9:e8:10:f4:f5:fb:d4:7d:62:cd:69:51:8e:c6:92:62:fd:14:
         cc:21:5d:bd:4e:49:cb:33:38:8e:2e:de:4f:fb:0d:95:a3:eb:
         a5:58:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----