Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer
File:                     ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer (raw, json)
Hash identifier:          6zB1SuSEnrnLSIuWfe4rwJB6//yy3fvJQt/5gsk4NFs=
Subject key identifier:   63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F411A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2019 20:56:10 +0000
Certificate not after:    Thu 05 Sep 2024 22:55:44 +0000
Subordinate resources:    AS: 269833
                          IP: 45.188.20.0/22
                          IP: 2803:cf60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15995296 (0xf411a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 20:56:10 2019 GMT
            Not After : Sep  5 22:55:44 2024 GMT
        Subject: CN=ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:be:f6:b2:e2:d3:6c:0d:9d:53:df:9c:6e:
                    69:73:a7:e9:dd:23:80:b0:45:0c:5e:ea:47:54:b3:
                    e7:4d:c6:9f:4a:12:92:d0:06:40:77:fe:1a:b1:84:
                    b2:20:90:bb:f7:dd:1f:a9:2d:de:43:45:49:6a:26:
                    8b:ff:4e:b3:fd:68:3e:4c:12:63:3a:bd:5b:b3:59:
                    85:40:6e:11:6f:eb:f5:ec:58:6a:58:1f:ee:44:f2:
                    c0:b3:85:c0:e9:ed:ef:24:03:c8:ff:ea:51:72:3d:
                    52:16:e4:4b:86:bd:fa:56:de:7a:e1:9e:b9:9a:55:
                    4b:f9:fd:4d:77:70:29:54:1b:b0:68:8b:c3:71:9b:
                    98:55:23:54:0a:97:9c:82:70:48:a5:07:16:9d:52:
                    17:80:72:e8:7c:f4:03:bb:78:a7:ff:10:d9:cc:87:
                    c3:6f:ab:ce:40:9c:49:fe:dd:2c:79:c3:0e:19:2d:
                    29:21:b9:0f:d3:2d:28:48:2d:1d:0f:0e:b5:ce:9a:
                    13:69:41:8b:2f:4b:e7:e7:6e:66:3b:7e:5c:ae:98:
                    5f:b4:a1:2a:ee:8e:64:8a:d2:f9:7f:5d:51:34:47:
                    d3:3c:32:e7:69:bc:de:a9:61:0b:f3:5e:01:55:7d:
                    06:a0:e4:a6:39:9c:d8:2f:21:d1:46:51:4f:17:5b:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.20.0/22
                IPv6:
                  2803:cf60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269833

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:99:24:bd:9d:f9:33:f9:9c:72:41:73:25:2b:0c:d6:78:
         e4:3b:f7:0a:c3:9f:18:72:d3:87:01:c6:aa:a0:58:39:37:8e:
         2f:65:7c:0d:bd:0e:a6:bf:61:39:f5:cf:97:22:94:25:d1:b3:
         4e:c9:e4:d3:98:32:b2:63:19:a8:25:5e:ff:8c:21:a6:1d:32:
         95:35:e3:d3:3f:ba:57:f6:f4:8d:37:cb:85:a0:51:47:6e:81:
         64:d6:18:18:99:9c:ac:b5:e4:ef:3e:09:9d:54:38:64:d0:c0:
         d0:2f:bc:f7:c9:4c:9b:20:25:ff:62:62:83:f3:73:af:3e:a2:
         5b:d8:36:49:e8:2b:5f:3d:13:b5:f5:6e:a8:36:ef:5b:df:56:
         2c:75:47:4c:60:b8:90:36:6b:e5:9c:c5:09:24:90:9a:43:6f:
         dd:db:5d:cf:5e:51:35:59:00:ed:35:87:94:65:e4:30:df:32:
         0a:21:8f:77:04:83:d5:0f:5f:8c:69:f0:2c:2a:2a:76:92:6e:
         19:7a:e1:aa:91:b7:71:59:a5:7e:03:b7:8c:4f:9a:3c:1d:c4:
         f7:ab:77:e4:a1:de:82:09:ab:4e:9c:16:86:fe:49:73:e8:f6:
         7a:73:30:20:15:0b:ff:bf:81:6a:68:00:49:35:8b:58:bf:7c:
         e2:46:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----