Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81.cer
File:                     9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81.cer (raw, json)
Hash identifier:          9eB0QTHsNxH/eM5QBK6ornovJrDS9eAOY2h5Gny6NhE=
Subject key identifier:   39:D3:25:EB:38:A7:F7:9D:89:B6:12:C6:5E:33:F1:D1:45:B2:5F:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBEC9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Aug 2019 16:03:43 +0000
Certificate not after:    Sun 30 Jun 2024 23:28:46 +0000
Subordinate resources:    AS: 52422
                          IP: 200.115.188.0/22
                          IP: 2803:ce00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15461535 (0xebec9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 16:03:43 2019 GMT
            Not After : Jun 30 23:28:46 2024 GMT
        Subject: CN=9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:f5:d9:e2:16:da:1b:f2:a4:28:a9:d5:ac:
                    e6:87:94:45:a0:84:02:82:7e:9b:cc:18:3d:43:a5:
                    df:3e:8a:3e:ac:f2:67:43:d3:db:2f:f1:9e:bc:64:
                    73:bd:14:66:2e:17:5d:ad:e5:f8:08:e7:91:18:85:
                    fc:f8:fe:19:6c:e6:3d:47:d8:60:b8:42:68:07:1b:
                    85:e2:26:0a:13:46:f6:c1:e9:3b:16:2b:57:0e:e2:
                    a4:78:90:80:19:65:11:e3:3d:d5:07:23:13:a5:01:
                    49:0f:5b:a7:00:9a:cf:77:78:66:25:af:42:d5:62:
                    b7:ef:8a:b1:0b:cf:f0:f7:a7:ed:32:bc:87:27:e0:
                    dd:d0:04:69:0f:c7:8d:18:b5:63:88:20:96:9a:c9:
                    2e:7d:6e:c1:3c:94:fb:ba:92:71:d3:2a:4c:93:6c:
                    70:f7:3b:5d:57:c4:54:ec:94:f1:21:cc:50:5a:5f:
                    89:bd:d0:a8:33:7a:5f:49:60:ff:58:28:1b:20:e5:
                    77:f1:1d:69:d5:b7:c1:0c:12:3b:4c:01:76:fa:7a:
                    47:de:16:af:fe:b8:22:c4:64:12:08:48:24:75:17:
                    52:7a:b2:3a:0b:b8:6d:39:e0:a9:e5:87:d1:60:58:
                    62:d3:36:95:45:28:4a:e6:57:62:45:4e:d7:39:c9:
                    ad:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D3:25:EB:38:A7:F7:9D:89:B6:12:C6:5E:33:F1:D1:45:B2:5F:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.188.0/22
                IPv6:
                  2803:ce00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52422

    Signature Algorithm: sha256WithRSAEncryption
         3f:9a:40:62:01:36:80:03:9a:59:30:0a:38:d4:4f:3c:e1:de:
         75:08:3b:14:03:8d:31:10:67:17:ea:9e:5b:03:cd:2e:02:76:
         62:33:87:20:42:ca:a4:e0:2d:55:60:9d:63:44:fc:44:64:7d:
         30:d3:05:12:32:eb:14:19:16:2a:ec:1b:b2:62:4c:98:7c:88:
         ed:b3:df:1c:4e:30:2e:66:23:60:67:6a:e6:2e:52:37:b3:9f:
         00:06:af:be:33:e8:31:ba:38:f9:87:a1:41:ce:c7:6a:7f:56:
         1a:5d:5d:4d:a4:4c:5c:a7:af:5c:79:e9:c5:86:4d:55:da:0b:
         46:2d:44:1d:36:9e:16:1c:96:eb:99:3a:82:83:8e:e4:39:5f:
         f9:f0:75:8a:f9:cf:b2:30:a5:a8:3c:3e:50:98:83:6d:3c:5d:
         87:9f:26:49:9e:21:fd:eb:47:6e:db:56:49:19:c8:d7:23:90:
         6c:85:cc:46:e9:88:ee:af:d7:33:c9:2b:fa:56:2a:2e:9b:fd:
         7e:73:ca:68:c0:32:ae:55:04:bc:0b:a0:4f:c2:b2:a6:4f:f2:
         f6:3f:9e:96:be:bb:f7:dd:c6:e6:bf:73:5d:79:b1:f6:61:bb:
         ff:f2:9b:12:e6:73:48:ae:ef:c2:9f:e0:9e:76:d3:33:7b:13:
         f6:a7:cf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----