Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.cer
File:                     b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.cer (raw, json)
Hash identifier:          RLMlYCbKAalfcE/fZ1vYRNqSR42eUvRf7WYzZh6CP9k=
Subject key identifier:   34:57:68:27:66:E2:5C:F7:DB:5E:F9:D4:E9:C7:2D:0E:0D:2C:FA:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC4B46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Sep 2019 03:37:33 +0000
Certificate not after:    Sat 17 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 52455
                          IP: 131.72.24.0/22
                          IP: 170.233.216.0/22
                          IP: 190.113.92.0/22
                          IP: 2803:b300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14437190 (0xdc4b46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 10 03:37:33 2019 GMT
            Not After : Feb 17 05:00:00 2024 GMT
        Subject: CN=b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3c:77:d7:04:6f:f9:14:35:98:27:96:03:6a:
                    c2:2e:8f:39:ba:b2:54:41:d0:c5:b3:7e:57:a9:fd:
                    24:0d:07:5d:87:d2:62:51:b2:6c:c9:30:ff:54:ab:
                    6e:60:1b:3c:83:3b:7b:3f:60:17:81:e5:fb:a0:b1:
                    01:a4:db:25:2f:63:53:62:6a:bf:70:74:16:cf:e3:
                    ef:0c:bc:81:93:5e:fa:ae:c4:e3:8f:f5:50:53:44:
                    19:b4:69:a5:0c:3c:2b:aa:ad:e7:2b:c2:ef:91:09:
                    b4:a1:4a:ed:a4:2a:d2:5c:97:3e:98:ef:f6:be:fd:
                    92:eb:58:00:a2:96:cf:31:53:65:22:0f:3f:a0:6c:
                    a2:c9:a9:27:52:4b:4d:80:ef:4d:42:87:42:8e:27:
                    06:ab:e8:3f:bd:d1:d3:a4:81:ba:a2:56:ee:70:d8:
                    b8:a0:f3:bf:cf:b0:1f:60:fd:43:69:a2:af:c4:6d:
                    ac:54:29:66:7f:ff:ea:3f:44:cb:87:1b:33:e6:6a:
                    1e:94:9f:db:b4:5c:91:99:1e:c8:63:0c:42:67:9c:
                    07:fb:fd:7b:ef:26:07:cd:39:74:d2:3a:bd:c8:f4:
                    e5:ca:90:71:fd:99:df:51:7a:5e:13:f5:50:6d:c5:
                    ad:9b:8f:74:0d:5c:26:16:08:10:1f:9f:dc:a2:21:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:57:68:27:66:E2:5C:F7:DB:5E:F9:D4:E9:C7:2D:0E:0D:2C:FA:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.24.0/22
                  170.233.216.0/22
                  190.113.92.0/22
                IPv6:
                  2803:b300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52455

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:13:23:26:b6:97:16:cb:e2:da:00:42:62:27:7c:9e:09:
         32:08:3b:cd:33:95:3d:c9:01:97:7f:fb:02:ed:c4:0d:da:e2:
         0d:36:7d:99:97:3f:36:1d:ac:69:2e:af:c9:96:f4:6f:3e:20:
         a7:54:84:be:ca:a3:db:ee:c1:45:db:66:e3:57:ef:cd:98:b4:
         35:4f:b3:d2:83:f7:ec:f9:bc:19:6c:ef:79:a3:c0:03:47:c6:
         f2:2a:87:01:7a:e0:89:04:da:52:74:d0:70:d4:4f:4e:c8:4a:
         c9:9f:55:b9:a1:8f:fc:ba:b9:6a:8a:7e:d6:4a:c9:3f:94:bc:
         aa:77:8b:f5:c7:6d:89:7c:c5:88:1c:97:6a:c1:b7:a0:20:5e:
         c7:e8:98:b4:91:99:c8:f8:a8:6c:7b:64:62:94:19:53:d1:b6:
         cc:d2:7d:28:02:4d:14:29:93:ab:52:86:b7:26:58:97:36:b1:
         32:c6:07:6d:65:30:cc:b9:3f:4c:00:99:80:12:32:fe:84:fd:
         81:23:45:97:93:34:a0:43:0c:30:4a:59:5f:2a:93:17:29:79:
         1b:cd:f0:dc:07:ce:48:27:00:87:3a:e5:50:4c:cc:06:58:44:
         43:54:d2:3e:96:ad:66:0d:81:ed:aa:17:7d:03:81:66:58:29:
         ed:d4:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----