Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add7eb2eab293b9031f43cb602f0cc404fa774c1.cer
File:                     add7eb2eab293b9031f43cb602f0cc404fa774c1.cer (raw, json)
Hash identifier:          0WMuR2/zjs8fievZA6YEqGOudYpVd4jb3L0R2wyZecY=
Subject key identifier:   89:C8:6B:64:D8:66:BC:F1:F0:7C:1C:35:9C:FF:D2:F7:2A:91:B8:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1290B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/add7eb2eab293b9031f43cb602f0cc404fa774c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jul 2019 13:05:30 +0000
Certificate not after:    Wed 10 Apr 2024 19:45:53 +0000
Subordinate resources:    AS: 267892
                          IP: 45.175.22.0/24
                          IP: 2801:18:8800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14756107 (0xe1290b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  8 13:05:30 2019 GMT
            Not After : Apr 10 19:45:53 2024 GMT
        Subject: CN=add7eb2eab293b9031f43cb602f0cc404fa774c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:0e:a4:a1:e6:6e:1d:3f:25:b2:9c:a3:21:
                    1c:09:08:36:ce:77:49:f8:10:36:bc:3b:ad:de:4a:
                    81:91:4a:80:67:43:88:88:b7:1b:85:37:8a:4a:c2:
                    8b:39:ba:3a:63:27:2f:00:33:52:32:4b:f8:4a:66:
                    91:15:e5:4a:83:43:47:ec:cb:50:ce:10:74:9b:eb:
                    64:4b:d9:af:bb:f8:1d:75:66:7a:c7:88:34:68:70:
                    28:14:c9:64:de:e4:2d:32:00:a9:ae:0f:5e:87:45:
                    3f:97:99:81:51:b4:7b:82:0a:f8:95:6b:df:a7:24:
                    b3:37:0f:fd:b2:4e:bc:b8:3d:53:0d:7a:ee:02:7d:
                    86:fd:8f:4a:43:14:3d:fb:52:ad:44:59:dc:76:ae:
                    e1:c5:20:a1:50:43:2f:f1:f1:d6:f6:5e:96:cb:26:
                    4e:3b:a3:89:62:cb:4f:3e:28:ed:7a:6c:f9:43:47:
                    2d:3d:77:a5:68:28:05:b8:c0:7e:c9:03:bc:6e:f5:
                    ff:00:fb:f7:bb:33:92:67:63:13:e0:c5:d2:e0:31:
                    7e:a4:6f:31:e9:7a:65:a6:7f:2e:00:86:f1:c3:56:
                    48:76:48:a5:5f:b4:6c:f2:fa:09:de:1f:9d:68:d0:
                    22:dc:f9:29:ef:bc:45:ae:03:b4:de:b3:5d:70:7c:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C8:6B:64:D8:66:BC:F1:F0:7C:1C:35:9C:FF:D2:F7:2A:91:B8:21
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/add7eb2eab293b9031f43cb602f0cc404fa774c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.22.0/24
                IPv6:
                  2801:18:8800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267892

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:b7:12:4a:02:f4:ef:0a:02:63:e2:2b:be:b8:22:4c:69:
         7a:c1:2a:bf:95:e6:69:32:b8:b1:d0:0d:a5:1e:64:21:b2:ee:
         02:91:16:1d:15:ef:8f:c8:0f:25:65:29:cd:eb:64:95:46:98:
         8d:d1:e9:48:10:4b:9d:3d:6e:65:fb:c4:be:d8:d9:04:80:25:
         e8:fa:42:a0:af:44:49:6e:d8:64:0b:52:ea:6b:96:90:86:22:
         8d:d3:82:f2:e8:5b:11:bc:ed:c5:8a:1c:00:53:bc:22:58:dd:
         d1:79:28:74:ba:2e:3e:24:a8:68:1d:c1:10:08:99:01:0d:33:
         09:e5:10:6d:b4:2b:68:c6:6b:26:56:79:c4:60:85:a0:2b:a1:
         e4:1a:3b:3e:68:91:a7:13:9a:d4:8d:e4:9a:2c:c8:f6:92:4e:
         9f:3a:16:17:90:f6:eb:83:d3:ff:05:eb:6c:3f:b9:16:91:2c:
         30:16:60:ab:d9:49:e8:0d:15:11:b7:04:40:d3:e4:a3:6a:ee:
         81:4b:e5:57:37:8a:3a:85:30:dd:44:94:a4:25:85:95:8c:d7:
         fb:24:d4:30:97:cc:82:4f:2f:61:97:2b:1a:cd:5a:dd:af:39:
         05:f1:e1:52:d5:34:41:bc:65:21:cd:77:a6:c2:4c:7e:1f:48:
         dd:1c:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----