Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a66143b7ecb5d725a2a90586341f201ded3aa1b0.cer
File:                     a66143b7ecb5d725a2a90586341f201ded3aa1b0.cer (raw, json)
Hash identifier:          emU63CMncj22DvM5X0yLMZDU/y1RL2cZZksJorTrLfg=
Subject key identifier:   45:5B:17:E4:D6:18:EA:0A:C0:E0:14:2D:C0:78:4C:50:90:E0:28:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8E7F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/46c9d621-5c24-4e1e-92b5-17542374f613/a66143b7ecb5d725a2a90586341f201ded3aa1b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/46c9d621-5c24-4e1e-92b5-17542374f613/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Feb 2019 14:53:34 +0000
Certificate not after:    Thu 10 Oct 2024 16:03:01 +0000
Subordinate resources:    IP: 190.124.32.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16312309 (0xf8e7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 14:53:34 2019 GMT
            Not After : Oct 10 16:03:01 2024 GMT
        Subject: CN=a66143b7ecb5d725a2a90586341f201ded3aa1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:dd:2f:49:62:b5:72:78:54:5e:ae:58:fe:
                    ad:ed:3e:1c:88:7d:5c:52:16:84:b1:3e:57:26:0a:
                    4d:7c:db:ba:2d:52:a6:87:98:98:b9:bc:9b:b4:c1:
                    5f:fd:62:87:a3:29:c5:f9:3a:ed:0f:93:4f:a7:6c:
                    f9:1e:16:60:1d:c7:6c:27:5b:0d:fb:4b:5a:85:b0:
                    3e:30:f6:ff:3d:92:ca:b9:87:99:83:ef:f6:96:8b:
                    44:0a:98:31:ac:b5:a6:7d:3a:39:93:a7:41:89:94:
                    d6:94:cc:92:18:39:47:3a:f0:ff:0c:98:a2:c1:b0:
                    c6:fa:f0:31:ac:98:5d:8d:c5:7f:af:44:dd:54:85:
                    3d:73:75:92:4c:f9:8d:72:ce:9c:f1:74:a9:44:43:
                    02:bc:ab:b9:0f:77:8c:bb:15:61:7d:df:99:88:d8:
                    c0:0b:8c:74:16:98:0d:26:12:e9:28:ee:d7:07:2d:
                    7c:67:b2:bf:79:ca:52:d4:30:1b:1e:62:a6:2c:4f:
                    df:17:7c:d3:47:85:62:66:04:82:e6:78:95:99:88:
                    a7:6a:0b:23:7a:27:6e:4e:40:5e:4f:04:83:61:9c:
                    1f:9f:63:39:70:4b:40:49:42:53:a0:ee:a9:a7:d0:
                    d2:e6:37:33:96:7d:f4:b1:83:79:e3:8a:4d:f1:3f:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5B:17:E4:D6:18:EA:0A:C0:E0:14:2D:C0:78:4C:50:90:E0:28:21
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/46c9d621-5c24-4e1e-92b5-17542374f613/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/46c9d621-5c24-4e1e-92b5-17542374f613/a66143b7ecb5d725a2a90586341f201ded3aa1b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:cf:2a:e4:01:20:16:82:7e:ba:7b:e6:20:5b:b4:d5:64:
         a9:6d:11:37:34:ef:5a:70:11:fb:bb:84:c0:46:ba:8e:be:1b:
         81:0d:bd:fd:85:bd:93:48:a7:db:ca:bc:8f:16:13:a4:98:66:
         01:d8:65:0f:79:1d:ec:34:9d:e3:88:c2:a4:50:da:37:64:92:
         90:ac:56:09:95:cf:05:3b:fe:54:3c:2e:11:cb:47:2e:6c:fe:
         8a:48:4f:0f:a0:6c:aa:55:fa:5a:e4:3a:e3:bc:cc:9b:94:f0:
         9a:b7:03:71:dc:af:e0:09:67:30:6e:ed:e2:e7:16:80:e7:d0:
         36:a1:fa:2a:fc:08:3b:61:a4:9b:18:40:3c:4e:12:37:14:b8:
         14:08:48:45:76:16:36:22:c7:30:21:93:df:64:dc:c8:22:1e:
         fc:9f:67:b6:ca:aa:e1:49:ab:8c:b2:82:47:22:2e:40:83:19:
         e9:ca:41:a3:9c:fa:74:88:d4:86:d9:70:41:87:bd:33:61:46:
         ea:36:f6:3a:19:9d:24:98:80:84:9a:5f:8f:5e:3b:60:10:67:
         c1:71:52:2c:dd:41:8f:63:be:c1:f6:fe:3d:56:6d:68:38:45:
         3b:8a:6e:c3:7f:08:25:f0:1a:1a:3c:65:aa:c7:26:c2:ba:28:
         bd:43:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----