Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer
File:                     9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer (raw, json)
Hash identifier:          HEsDgYDOvJr/lC2p/wz/9bYVqE1XG5gnEYA6NyCZAkc=
Subject key identifier:   A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F053E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 01 Sep 2019 13:13:40 +0000
Certificate not after:    Thu 01 Aug 2024 19:45:41 +0000
Subordinate resources:    AS: 267693
                          IP: 45.160.224.0/22
                          IP: 2803:c1a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15750118 (0xf053e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 13:13:40 2019 GMT
            Not After : Aug  1 19:45:41 2024 GMT
        Subject: CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:0a:28:48:ab:1d:7b:78:60:45:62:6a:87:
                    32:0c:fe:1d:18:b4:f1:40:aa:15:49:18:47:d2:1c:
                    8d:ec:11:97:d3:48:10:c0:c7:aa:c2:cd:f8:b6:49:
                    10:5e:f2:ec:77:bf:97:cc:e6:cf:65:42:f4:af:2e:
                    f8:45:ba:72:a3:3a:5a:b1:2f:ca:37:55:e9:1e:79:
                    fe:09:11:f8:65:c8:bb:06:dd:28:2b:6d:01:99:d1:
                    3b:fd:f5:40:55:64:14:07:c0:4f:98:fb:0e:82:8d:
                    44:11:07:f3:40:01:33:00:45:69:37:a9:d3:02:50:
                    f6:6a:1c:e5:5a:39:c2:0e:d5:fb:aa:96:26:b0:f5:
                    a8:02:88:d6:10:d6:25:a4:86:64:d1:03:eb:84:32:
                    be:93:94:64:32:1a:84:b6:b0:99:23:8f:a9:5f:51:
                    fe:21:9c:ea:cc:84:29:ae:0c:35:53:18:39:ab:93:
                    a5:2c:19:86:b3:c0:10:58:58:33:7f:d2:82:e3:41:
                    82:31:44:57:ee:70:12:11:b1:02:a3:64:6e:03:9c:
                    f9:15:73:98:a7:45:33:bb:3e:5e:14:17:b0:97:c4:
                    5e:78:ef:50:31:38:db:e5:a7:7b:b2:95:9b:02:45:
                    41:e3:eb:a0:4e:1a:bb:1f:98:c2:49:74:46:1b:96:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.224.0/22
                IPv6:
                  2803:c1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267693

    Signature Algorithm: sha256WithRSAEncryption
         76:26:70:c0:51:59:dc:b8:83:86:c5:81:0b:b6:dc:9f:71:4a:
         f0:88:6d:4f:63:72:e7:bd:54:be:32:ed:0d:2d:1c:f1:78:55:
         e2:5b:82:2f:47:bb:78:ff:32:1c:fb:9c:d8:dc:ba:c8:45:a7:
         93:14:73:a2:2b:47:df:33:f3:c8:b4:62:ac:2c:b2:09:1b:7c:
         64:d7:f3:a1:1e:c4:15:7c:b2:ec:db:e9:4d:a9:03:0d:86:79:
         e9:bd:b5:4c:96:f4:aa:78:ac:84:75:83:06:a8:5d:66:a9:ab:
         19:45:25:98:c6:10:98:39:79:f3:16:31:7b:93:21:b6:7c:34:
         5f:1e:89:b4:73:fa:6c:18:0b:7f:67:e7:91:28:53:d5:ed:d1:
         cd:c9:84:c5:d2:8a:5f:2a:db:d2:8b:00:ea:1f:66:ed:b5:de:
         66:95:b4:3e:e0:20:77:c3:51:ab:d0:8b:6b:16:f9:ac:4f:c0:
         91:a8:60:ee:97:13:9b:5a:2a:8a:54:4f:17:89:83:7e:91:2c:
         9f:73:5b:b8:6a:e6:12:38:28:a3:8c:02:da:b4:56:0d:4b:99:
         ca:43:2b:14:31:ed:36:79:c1:be:8e:5a:a3:40:e1:1e:78:95:
         d8:5e:4d:5b:67:5d:fb:6e:99:79:1f:3f:b3:5a:47:a1:43:db:
         39:04:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----