Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer
File:                     ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer (raw, json)
Hash identifier:          5CjO4oLfK0/l2qcPhcPbR9lgP39ASeAbijiclc79GAo=
Subject key identifier:   2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D60A21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 May 2019 22:01:52 +0000
Certificate not after:    Thu 30 Nov 2023 14:12:47 +0000
Subordinate resources:    AS: 267764
                          IP: 45.169.104.0/22
                          IP: 2803:1ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14027297 (0xd60a21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 22:01:52 2019 GMT
            Not After : Nov 30 14:12:47 2023 GMT
        Subject: CN=ac54f49fd3334b47a73d6d08bdfa334f4d159e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:ad:d9:e7:b4:e7:a5:4d:8c:50:c8:78:c0:
                    bd:c3:8f:9e:b0:20:7d:b6:d5:61:cc:e3:24:a7:40:
                    77:c0:51:27:f4:eb:44:7e:3d:50:8e:01:c6:1e:4f:
                    6d:90:5f:de:86:c5:c5:75:89:6f:f0:49:fb:ca:fc:
                    d0:21:eb:fd:c4:e0:64:e0:c5:cb:8c:52:62:cc:12:
                    73:52:8e:17:3d:6a:29:6d:e2:99:9a:d1:57:40:13:
                    63:f6:b2:f8:d2:db:65:4f:a8:c8:71:35:fe:83:61:
                    6c:45:16:e4:37:31:75:f6:ba:24:45:6d:f4:ac:db:
                    7c:b2:e8:30:8b:aa:20:49:9b:64:7e:f6:1f:2b:a2:
                    9e:f4:dc:7b:54:e6:2e:08:e6:97:08:bd:29:12:76:
                    fc:90:a4:ab:34:54:23:a1:83:a0:f0:b7:6d:09:aa:
                    8e:02:dc:9d:bd:bf:46:7a:4b:62:a8:06:f0:f6:ef:
                    cc:fd:04:b6:dd:1f:37:e0:71:77:5e:f1:a2:60:c4:
                    99:d5:a5:e0:aa:7c:85:e7:00:16:dd:de:27:06:ea:
                    ea:8d:b9:47:e6:48:d6:c1:68:8c:d4:73:a0:03:80:
                    45:56:81:c8:18:ed:d7:c9:1a:cb:8d:38:7a:90:d5:
                    bf:c2:71:4b:68:62:34:30:65:bb:0e:ec:50:7d:bc:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.104.0/22
                IPv6:
                  2803:1ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267764

    Signature Algorithm: sha256WithRSAEncryption
         74:23:1b:35:91:6b:c2:18:9e:2e:45:42:80:95:49:48:97:28:
         60:ba:c6:c6:12:be:40:5b:f0:aa:d0:5e:bf:44:36:f2:e6:3d:
         62:11:1b:c0:e7:fe:82:62:a3:cd:fe:9e:fa:47:03:3b:a1:2e:
         47:a7:16:6b:8b:66:3d:63:7e:e9:27:74:dc:f6:e6:7f:08:ca:
         58:6e:f8:23:a5:61:38:bb:41:b4:ab:ce:f1:99:aa:33:31:25:
         2f:e4:c3:a0:42:8e:ab:d3:74:ba:44:04:1b:46:67:d7:53:3b:
         96:33:95:db:5d:27:c4:a4:5d:bd:ee:8f:68:29:67:41:05:72:
         47:64:98:dd:0c:44:51:39:65:0d:18:ae:67:1c:7f:5b:a5:cd:
         b4:d5:b6:2e:03:b5:76:49:25:66:f1:23:c8:a3:b5:4f:79:d0:
         da:a7:94:7f:70:b3:ef:31:84:06:13:1b:d5:80:4e:d4:5e:83:
         7d:0c:f5:6b:1f:19:87:fb:c6:11:2a:d6:cb:62:2a:13:66:4e:
         d6:f9:39:16:fc:2c:34:fa:f2:e4:1b:73:c3:13:dc:fc:5e:b9:
         c5:45:9d:f1:50:ca:1f:fb:ac:3a:ea:e7:a3:02:0d:c1:ce:ac:
         5e:7e:14:9d:05:4b:ea:05:dc:06:5b:7a:98:c1:97:e2:a2:6e:
         13:cc:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----