Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b44cb5800e96935d03e5d14faab2003de5a3deb7.cer
File:                     b44cb5800e96935d03e5d14faab2003de5a3deb7.cer (raw, json)
Hash identifier:          Nfp+MIFn4AxCAeWEhz8Hk6d1B313VD7oh/GE0iiKRyo=
Subject key identifier:   A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D63295
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/b44cb5800e96935d03e5d14faab2003de5a3deb7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Feb 2019 22:29:05 +0000
Certificate not after:    Fri 01 Dec 2023 18:06:16 +0000
Subordinate resources:    AS: 267766
                          IP: 45.170.184.0/22
                          IP: 2803:5ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14037653 (0xd63295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 22:29:05 2019 GMT
            Not After : Dec  1 18:06:16 2023 GMT
        Subject: CN=b44cb5800e96935d03e5d14faab2003de5a3deb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:30:07:2a:da:44:35:08:e5:f1:d5:bf:2f:
                    ec:ec:ea:ed:60:57:1c:8f:d3:af:c2:32:3f:31:16:
                    b6:13:8a:b8:93:10:b4:98:14:ee:84:52:4f:1c:f7:
                    4f:f7:f4:b2:77:45:f9:3f:4b:75:65:29:76:03:49:
                    7c:35:15:1d:dd:79:9f:db:b0:f5:af:6c:b4:f9:d8:
                    06:80:f7:16:d2:97:64:10:47:8f:59:99:14:f0:7a:
                    5d:7c:30:e9:9f:0e:ae:92:0d:27:89:23:44:ea:ca:
                    e1:b3:64:b9:50:b6:94:06:4e:8e:ce:8e:53:ed:5e:
                    fd:8e:41:2c:69:ca:01:45:ef:7e:be:e5:d9:f3:dd:
                    d2:97:89:8b:77:45:83:fa:68:66:60:9d:0b:96:1e:
                    a2:4f:1b:bb:70:6b:62:8b:90:51:59:1f:a5:bf:87:
                    9a:d7:f2:2c:26:21:6b:ff:08:53:44:fc:0e:a1:ae:
                    97:05:f6:47:a7:7f:ed:fc:d8:8d:4c:5d:4e:49:ae:
                    2c:eb:4a:3c:bb:f7:1b:30:05:8a:b2:9f:a7:d6:0a:
                    e6:9e:7e:dc:cf:3f:34:e9:51:8a:89:8b:a0:5c:6f:
                    48:43:27:e2:ee:1c:a6:97:b0:8c:d2:38:50:ed:92:
                    93:3c:e4:27:74:5b:07:f3:b5:93:db:a4:2b:a5:b8:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/b44cb5800e96935d03e5d14faab2003de5a3deb7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.184.0/22
                IPv6:
                  2803:5ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267766

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:81:93:81:7c:d3:d3:69:e2:3b:7c:43:ac:4d:16:4d:1d:
         24:a7:58:4e:9b:52:d9:1e:8a:58:99:d5:6e:78:d1:04:d0:84:
         cb:de:8c:f0:71:a1:ed:eb:97:e4:40:06:31:69:c9:aa:35:52:
         ce:5e:7a:58:09:70:19:c0:af:98:66:56:58:16:64:38:73:da:
         b1:0d:a1:70:1b:db:4c:02:3c:26:f9:ce:c8:c2:76:61:74:7f:
         77:50:db:2e:e6:2f:f2:cf:d9:bd:ed:4f:92:74:a1:20:4f:69:
         c0:51:59:a1:39:98:5d:3d:29:b6:23:f0:d3:9a:c7:af:8e:8c:
         28:d2:60:d7:c9:25:25:78:71:0e:c2:40:8f:33:4a:85:5b:b4:
         00:7f:ef:4d:b1:0a:48:ac:c5:48:a5:fa:9a:a1:b8:f7:4d:81:
         35:a0:1c:22:b0:6a:1c:56:b5:34:e6:f1:20:8b:69:9b:71:ab:
         9c:07:93:19:82:f8:39:d4:4c:e5:80:2d:0c:9d:96:8a:30:4c:
         59:f4:7c:27:e6:e7:3b:30:88:61:8f:61:66:82:87:d0:cd:bd:
         90:20:78:22:1f:5f:5d:11:48:ee:7f:6b:0d:62:80:89:bd:dc:
         4e:e6:56:2c:60:1d:66:6d:2b:9d:2b:72:54:d4:4d:37:43:a0:
         98:13:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----