Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer
File:                     ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer (raw, json)
Hash identifier:          JvS0d+Y9nxiPfSNgVcxQXOUTfhr4A5EcNjtKNI9z31s=
Subject key identifier:   05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC4FD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ad27b898d1ea7f94cd5932a665835c7ef4650f61.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2019 21:19:36 +0000
Certificate not after:    Thu 04 Jul 2024 00:00:48 +0000
Subordinate resources:    AS: 262256
                          IP: 190.110.120.0/21
                          IP: 201.159.168.0/21
                          IP: 2803:e00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15486929 (0xec4fd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 21:19:36 2019 GMT
            Not After : Jul  4 00:00:48 2024 GMT
        Subject: CN=ad27b898d1ea7f94cd5932a665835c7ef4650f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:a4:ec:40:0b:5a:04:c5:6c:46:f1:2d:9a:
                    bd:2b:3c:d8:da:b0:7b:ec:b4:60:aa:11:c3:95:01:
                    c2:e2:dc:33:27:e3:23:bb:fe:ed:e8:2d:99:32:2e:
                    c0:e2:ea:53:72:12:16:35:25:8d:08:fa:01:f1:ef:
                    a1:5a:89:b6:65:1c:99:7c:17:06:32:67:74:65:12:
                    25:b8:02:9a:3a:58:a7:97:73:82:de:ff:42:11:01:
                    d9:c8:c5:75:1b:b5:1e:58:12:18:a4:e8:19:9d:65:
                    4d:5e:b6:77:b2:c7:42:52:bf:71:94:72:58:b8:29:
                    97:0e:e1:b4:78:e3:c1:97:ea:6a:b4:ea:c5:7f:09:
                    fc:67:73:8b:bd:7a:fa:13:fa:f5:90:98:42:49:5f:
                    d5:3d:80:53:43:d9:09:16:15:2b:bc:4e:3d:8c:26:
                    5a:20:c2:65:1d:84:bf:8c:69:95:1f:b1:d9:d9:82:
                    67:9b:45:0a:8e:82:c9:d1:b3:4e:51:5a:0a:39:9f:
                    66:83:0b:ee:94:88:6e:3b:9d:1a:97:46:37:31:74:
                    2a:b9:43:2e:ad:ca:aa:99:3d:9d:31:90:f8:c8:02:
                    ce:17:6e:d8:96:49:5f:ac:a4:d5:44:47:5b:4a:38:
                    52:d2:24:d5:8c:10:a3:3a:b1:21:61:4a:e6:2b:16:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ad27b898d1ea7f94cd5932a665835c7ef4650f61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.120.0/21
                  201.159.168.0/21
                IPv6:
                  2803:e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262256

    Signature Algorithm: sha256WithRSAEncryption
         22:6a:cf:fb:14:b0:cb:a2:1a:e0:65:ca:bc:ba:0c:39:42:75:
         c5:17:7a:99:2f:f7:1c:f6:ca:9b:30:ca:57:c7:41:92:4c:6c:
         92:9e:5d:0c:7c:f9:d8:b0:64:c0:0e:fe:b2:a3:31:ae:7d:60:
         cd:3b:84:b0:c8:d4:cd:7e:00:cc:b2:c2:cf:98:7b:28:89:3f:
         7a:d4:3a:1e:83:fc:62:f4:b0:90:35:6c:71:b5:17:ec:38:12:
         cc:c1:5a:9c:a8:24:3d:f2:2f:fd:6d:32:8e:0b:91:be:c2:11:
         af:04:8b:74:72:28:10:2f:d0:1f:a9:83:cc:e2:a1:0e:83:05:
         78:68:d1:e8:e1:7b:a9:73:68:00:01:db:1c:ff:be:df:d7:82:
         ab:e5:fa:34:0b:82:96:06:5d:da:79:1f:99:e9:a8:73:c1:f6:
         62:66:30:f5:ad:66:7e:09:4e:cd:a0:13:3e:be:9d:27:19:45:
         ea:f2:91:97:c0:95:98:f0:01:ec:0e:bb:25:41:59:1e:94:8a:
         89:f0:15:d5:f5:8e:32:67:ce:1a:8f:19:38:f6:60:e3:61:86:
         98:c5:c6:eb:f0:0b:68:1d:df:2b:c2:73:d5:d6:2b:a0:e8:22:
         2b:ac:9f:ee:a0:c0:db:ec:8f:b6:09:ef:33:1f:c2:fc:f3:0a:
         d0:1d:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----