Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c.cer
File:                     b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c.cer (raw, json)
Hash identifier:          ljcXfHb9EwC/9WpMphSN3qMMiYUj0vVKOBLJ88TM6+g=
Subject key identifier:   0E:0F:79:57:EF:C4:A3:4F:12:A4:3E:6E:99:62:72:9D:1D:B2:55:3C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6D531
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Nov 2019 16:33:33 +0000
Certificate not after:    Sat 09 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 266751
                          IP: 168.90.92.0/22
                          IP: 2803:d540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14079281 (0xd6d531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  4 16:33:33 2019 GMT
            Not After : Dec  9 04:00:00 2023 GMT
        Subject: CN=b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:32:6d:cd:da:67:8c:89:04:9b:d8:19:a0:
                    22:4f:a2:6e:12:29:33:ff:e7:70:18:94:61:71:32:
                    43:96:c2:38:5a:49:5d:98:eb:94:1d:5b:62:2e:65:
                    cb:2b:96:9a:ac:74:c8:4d:48:bb:a7:c3:fb:f3:1e:
                    f9:49:e8:d1:c8:34:d3:15:a8:52:10:38:c7:0c:cc:
                    c1:ac:70:52:d2:45:e6:8e:76:df:59:8e:82:85:15:
                    8c:f8:15:74:9f:2b:31:b6:74:91:e5:d8:ae:c4:bb:
                    cc:d8:a6:4e:f1:fc:9a:15:67:ba:1f:e8:95:86:96:
                    d9:5d:fd:b2:12:05:91:6e:5e:dc:ec:32:79:ce:ac:
                    bd:1a:f8:96:35:7a:aa:ec:c7:74:4a:b5:b2:f9:cb:
                    62:d6:89:68:b0:0f:59:e0:d3:8e:df:c4:08:4e:33:
                    19:86:4b:37:9d:a8:de:13:80:19:df:21:58:24:72:
                    af:ce:20:a8:ef:d0:bb:89:36:90:de:21:31:7d:95:
                    55:2b:53:7c:ad:70:10:ed:9d:cf:64:ec:68:f9:99:
                    6b:98:59:e0:69:ab:42:f0:0e:5f:6c:31:58:09:25:
                    da:95:b5:34:01:ad:d9:43:ea:80:af:26:42:00:00:
                    a1:d0:51:b9:5e:04:48:ac:8d:b5:38:85:fe:67:c6:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:79:57:EF:C4:A3:4F:12:A4:3E:6E:99:62:72:9D:1D:B2:55:3C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.92.0/22
                IPv6:
                  2803:d540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266751

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:34:40:7a:ff:fe:e0:3d:3b:43:9c:09:25:d6:e4:d1:a8:
         04:c1:0e:b6:45:9d:db:2b:56:dc:86:4e:a9:f0:42:bf:36:a2:
         d1:22:96:d5:83:b2:75:60:fb:54:c2:7e:68:dd:ec:cb:1d:4a:
         69:f2:38:94:6b:9a:29:32:c4:90:c4:05:aa:1c:b1:8c:91:e2:
         25:6c:0a:f9:60:9d:b2:b4:d9:ec:c1:14:eb:af:6e:11:4c:1e:
         85:b3:f2:50:be:53:d8:d8:ff:10:c6:1b:e7:15:a4:7e:0e:f9:
         5f:a5:97:f8:58:87:61:7f:d9:98:e4:a1:8f:24:d7:1b:7b:23:
         b5:fc:64:b8:ef:77:a2:15:f2:72:f1:63:32:a3:4c:8a:e9:06:
         a7:e5:4f:73:61:0c:9c:b1:9f:fc:ac:ef:2f:5d:39:02:3b:dc:
         99:2e:bb:82:5a:a5:39:38:46:00:3a:93:15:1f:94:03:52:6e:
         72:70:47:d2:8b:a1:b8:a5:3a:dd:5a:de:1c:a8:87:54:83:a2:
         f2:fe:59:e0:13:46:47:26:9a:58:18:16:a6:8c:c2:c6:eb:b2:
         25:e3:c7:0e:ba:08:2c:50:ea:f8:b7:85:1f:1a:5f:e1:2d:f6:
         52:ae:14:23:7c:32:99:b9:d6:5a:17:32:68:78:97:a4:e7:75:
         79:af:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----