Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer
File:                     b85681cb3788741f37ae8f16dc7e84b962b71feb.cer (raw, json)
Hash identifier:          NlicTAbQUp7UevCoIMXSN3ArPAMZ7AYyx25IgC4R8zM=
Subject key identifier:   B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF733F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/b85681cb3788741f37ae8f16dc7e84b962b71feb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2019 17:32:19 +0000
Certificate not after:    Sun 24 Mar 2024 18:57:06 +0000
Subordinate resources:    AS: 267864
                          IP: 45.176.88.0/22
                          IP: 2803:a260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14644031 (0xdf733f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 29 17:32:19 2019 GMT
            Not After : Mar 24 18:57:06 2024 GMT
        Subject: CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:46:c3:f6:e1:a3:42:a0:2c:6b:d6:31:94:
                    c7:e5:f5:1f:3a:ce:6c:39:aa:1d:50:ba:f8:4c:da:
                    6e:9e:dd:54:8b:11:06:29:cb:1c:96:cb:97:b8:d6:
                    ee:9b:5d:f0:ec:f1:e7:cf:9b:1b:1c:a4:46:1d:d0:
                    86:db:f5:af:8b:ba:d2:bd:ac:1c:05:5f:64:5e:2e:
                    6d:b7:fe:1f:b9:ed:8f:4c:a2:20:3d:09:ec:d5:5a:
                    3a:ff:cd:11:ff:b7:20:4d:bd:34:d5:8b:dc:12:e5:
                    bb:37:35:de:33:34:3d:c3:4e:06:8e:5a:07:8a:cc:
                    f6:d4:80:d4:86:17:6c:14:e0:1d:a5:3f:18:61:1c:
                    51:87:16:c3:bd:48:77:89:39:9e:39:84:4b:7d:52:
                    ed:53:a4:99:4f:54:bf:e9:47:53:72:08:43:21:68:
                    ac:41:f3:8c:77:2d:af:86:49:e8:d8:eb:6c:7a:c3:
                    88:4c:22:4d:29:36:20:83:42:cf:01:b7:13:56:ce:
                    52:c3:43:b4:9c:78:0d:91:fc:6b:df:bf:35:a9:9f:
                    7b:36:1e:cb:20:5e:94:60:c6:3c:22:b9:46:ef:17:
                    fa:7e:33:f3:4d:30:dd:0e:0f:79:d1:e5:88:07:22:
                    ef:8b:eb:e1:38:48:43:7a:26:90:41:16:33:a1:28:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/b85681cb3788741f37ae8f16dc7e84b962b71feb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.88.0/22
                IPv6:
                  2803:a260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267864

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:08:5c:3c:1a:f8:a0:b3:51:ae:5c:a0:1a:19:d8:66:1d:
         d7:e1:29:a4:24:68:7d:54:4e:49:db:d3:e7:78:b8:34:70:ac:
         36:6a:6b:6b:35:29:08:f5:3e:2d:a9:40:47:33:d0:c2:f2:29:
         39:e1:56:b5:1a:1f:40:e5:a8:26:5b:f1:7a:d8:83:28:92:f1:
         9d:7f:d3:33:ae:54:fc:14:4a:59:d1:ba:ea:40:d5:61:68:12:
         f1:c3:37:89:b7:31:31:cf:65:bb:b9:98:54:8a:9e:f1:8a:2a:
         11:ce:ef:d8:2c:d6:3c:c9:32:b0:cd:bf:08:c3:88:5b:4a:e1:
         9a:19:58:2d:29:5a:3b:e2:18:3d:92:64:c8:f5:d5:81:58:ed:
         ac:ec:a7:ef:f0:91:82:f9:0e:a3:4c:ce:4d:55:70:8d:45:cb:
         e9:d9:07:cf:12:db:ff:4f:40:2a:43:24:7f:10:55:76:47:79:
         bc:15:68:4e:53:c2:40:d9:9f:79:af:6d:79:89:ef:56:d5:3c:
         7e:58:c1:f2:fd:b4:1f:f7:46:63:e7:64:ec:94:6b:e5:e3:7e:
         fa:90:5e:61:07:ae:b5:1f:1d:fc:4f:a3:65:f9:06:53:a3:28:
         cc:58:bf:c8:7d:5d:26:91:c3:10:f7:7a:18:e1:b2:ea:b7:e4:
         8b:a1:e4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----