Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer
File:                     a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer (raw, json)
Hash identifier:          0l8PrEN7tgCA8iiWaF4evkC6Zk956SkYp2ppOcRq8yE=
Subject key identifier:   D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFF6C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/a835ecfb849bdaf6e17afc5648e5c10499cc2864.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Nov 2019 19:15:18 +0000
Certificate not after:    Fri 29 Mar 2024 18:38:05 +0000
Subordinate resources:    AS: 267876
                          IP: 45.178.8.0/22
                          IP: 2803:b260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14677700 (0xdff6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 20 19:15:18 2019 GMT
            Not After : Mar 29 18:38:05 2024 GMT
        Subject: CN=a835ecfb849bdaf6e17afc5648e5c10499cc2864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:ea:bf:8a:d9:cf:6e:cd:55:bd:f7:e6:ef:
                    a6:cd:40:cd:8c:a2:2c:75:c5:9c:4b:e7:70:f3:23:
                    06:a2:2e:3d:79:1a:17:60:3f:20:89:2b:fe:80:1a:
                    a9:c3:1f:95:28:03:97:5f:dd:75:b0:d5:2f:20:f7:
                    a6:23:d1:83:8d:ed:34:63:ad:07:30:56:61:1a:55:
                    e2:d9:dc:1f:96:37:0d:b8:81:3e:bd:6a:e2:f2:f9:
                    8e:1b:0c:a4:f4:c0:64:8f:54:0b:59:c7:66:e1:f1:
                    c1:f7:ea:6f:44:3d:ea:67:e7:92:e8:ab:cb:fa:a5:
                    7a:ce:2e:20:62:b8:e4:61:65:ce:2a:aa:c6:ae:80:
                    71:e0:6c:49:52:42:b6:92:32:13:81:d4:cf:ee:43:
                    3a:b6:3a:7d:26:46:aa:70:62:4c:16:8f:1a:eb:4e:
                    22:db:83:e2:80:64:28:0f:da:7f:54:d1:82:fb:93:
                    64:59:33:6d:8b:26:5f:32:0a:18:64:92:f5:f9:4c:
                    5d:96:aa:54:c1:9d:de:43:5a:cf:2e:dd:84:3b:5e:
                    ef:7b:de:f2:1f:21:d0:75:5b:38:74:cc:cd:f3:a0:
                    69:de:a9:06:97:13:d7:96:b8:77:02:98:ca:e3:7d:
                    6f:95:ad:80:0b:e6:4b:c2:f0:c9:a2:96:27:29:85:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/a835ecfb849bdaf6e17afc5648e5c10499cc2864.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.8.0/22
                IPv6:
                  2803:b260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267876

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:98:2a:19:f3:6f:0d:db:f4:79:f3:92:05:8b:cd:a9:e8:
         22:bb:cd:85:5c:7b:70:b0:04:48:35:6b:86:1a:60:87:88:27:
         bc:3f:4d:f3:50:fa:ae:32:6a:04:ea:83:8f:44:c3:79:bf:27:
         22:2d:ea:0d:fa:3e:17:51:34:4c:7a:f9:84:94:b4:83:00:04:
         f5:18:32:f2:71:b3:ca:7e:bb:2a:40:62:78:4e:4b:af:8c:82:
         98:a1:a4:cb:b6:e8:37:50:77:ea:30:99:2a:1c:8e:1d:8f:fb:
         c8:f7:d1:26:fe:b3:42:e1:21:fd:9f:22:c7:c3:b0:58:87:bc:
         e4:67:a2:06:b0:ac:c5:33:00:51:b2:25:d9:bc:53:68:37:ef:
         97:25:5f:2b:30:5d:33:c5:46:af:bd:c5:ea:b9:95:86:90:cc:
         35:ce:1d:bc:95:31:68:6d:32:74:51:de:13:c1:90:b0:50:bf:
         e1:a2:73:27:6a:de:80:79:63:10:69:cb:65:4c:57:bb:fb:c7:
         9a:5a:a6:90:13:c1:ca:14:d0:28:45:99:b2:c7:c8:ae:97:17:
         fa:5b:57:bd:4f:55:fa:0a:04:e1:7c:30:dd:0c:e9:2e:6f:bf:
         b3:b3:8c:b3:46:7a:d7:96:74:23:1b:dd:b1:8e:6e:48:7b:b8:
         db:a6:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----