Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b89e6f83f092429d4e523cebb3044e5f86895d46.cer
File:                     b89e6f83f092429d4e523cebb3044e5f86895d46.cer (raw, json)
Hash identifier:          hCb1R5HUQVYEEtB/J0JjT/FXlrNY0Gtk0Sm0c/pAUmg=
Subject key identifier:   BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE3520
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/b89e6f83f092429d4e523cebb3044e5f86895d46.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 Oct 2019 09:10:45 +0000
Certificate not after:    Sat 20 Jul 2024 21:50:21 +0000
Subordinate resources:    AS: 265825
                          IP: 45.71.156.0/22
                          IP: 190.2.128.0/18
                          IP: 190.185.0.0/18
                          IP: 2803:3420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15611168 (0xee3520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 09:10:45 2019 GMT
            Not After : Jul 20 21:50:21 2024 GMT
        Subject: CN=b89e6f83f092429d4e523cebb3044e5f86895d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:0d:69:a8:8f:78:d2:b0:4d:4a:17:ae:45:
                    8e:46:93:d0:c8:4b:57:9f:dd:28:a1:97:20:5c:b1:
                    8b:20:25:15:f7:b2:a0:0d:e1:e2:3b:d2:f9:69:f8:
                    55:72:ee:dc:26:b0:5b:a0:33:2e:ce:49:b9:f4:e7:
                    1d:1e:f8:44:fa:50:d2:cb:c3:52:10:58:07:a2:29:
                    0e:b0:72:2e:21:a4:ef:64:d5:31:7f:ca:21:2f:43:
                    4f:01:ea:93:5d:be:a4:1a:d7:c9:62:28:58:ce:26:
                    c1:8d:c2:6c:2f:f6:cf:61:40:ca:3c:1b:4d:36:61:
                    6b:de:c8:1d:86:bb:4c:eb:99:18:61:30:82:a1:29:
                    4e:0e:99:c1:2c:46:28:a5:dd:8a:f6:d2:0d:8e:63:
                    d5:4a:81:a1:af:f3:ca:41:f0:d5:33:8b:3b:ea:15:
                    03:b4:a2:c4:e0:0a:96:f4:b5:b8:b4:b6:cc:c5:a2:
                    b2:00:25:1c:6a:d8:b0:e5:8a:77:23:42:dc:04:2e:
                    7d:fc:29:21:60:92:7f:df:80:86:41:d7:2f:35:f5:
                    55:af:f7:69:5b:51:2f:18:83:5b:94:6e:2a:23:06:
                    75:66:63:9a:b8:36:e0:0c:13:72:86:da:02:f1:e9:
                    cd:6a:66:f2:21:41:77:c4:f6:50:bf:80:43:97:cd:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/b89e6f83f092429d4e523cebb3044e5f86895d46.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.156.0/22
                  190.2.128.0/18
                  190.185.0.0/18
                IPv6:
                  2803:3420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265825

    Signature Algorithm: sha256WithRSAEncryption
         46:01:69:11:8c:e4:40:05:1f:e1:28:f9:27:67:3a:f5:ce:40:
         b7:27:0a:35:fa:3d:90:c3:06:18:83:d0:c3:ee:2a:24:ef:3d:
         83:d5:b1:b0:a6:a6:14:eb:e6:ee:55:41:9c:a4:b3:b6:37:15:
         24:68:84:db:29:27:74:0b:7f:f1:39:c6:46:fb:c9:b9:73:65:
         6f:04:c2:e4:34:d2:a2:52:92:ce:2d:51:0f:6b:3d:69:f6:d5:
         d4:a3:df:79:2d:63:a8:69:f7:12:22:ef:ab:7c:14:34:f9:4a:
         f8:6d:85:d0:f6:ce:64:4f:47:40:d3:95:c3:f2:8c:94:5e:bf:
         cc:1f:a0:f9:fb:c7:f1:e7:9b:9f:20:5f:b3:b9:60:2b:22:c9:
         95:0e:61:9e:42:da:f3:34:c6:00:09:f6:2b:28:49:2b:a7:d2:
         81:68:2e:a9:89:24:81:73:3f:cf:38:7d:01:0b:5a:e2:e1:ac:
         c6:2b:7e:75:19:1a:ce:d7:dd:ff:17:88:b4:79:04:bb:a4:b4:
         e7:5f:17:a8:35:62:b9:24:f0:38:58:9b:86:03:64:79:f4:eb:
         6d:92:b3:51:2c:ef:9c:ea:f2:53:5e:d4:e0:f0:92:ec:38:83:
         af:15:d6:a6:42:49:c4:77:0b:d8:a6:e2:62:89:31:99:13:f5:
         be:7b:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----