Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd14ab01086637c7b6f31d7a05d0d21a056c4687.cer
File:                     bd14ab01086637c7b6f31d7a05d0d21a056c4687.cer (raw, json)
Hash identifier:          jkXK3BQLm+RM9K08y2WUM8TkwcdLARoxJ/OTP6PFLz0=
Subject key identifier:   BF:7D:DC:D1:EC:24:93:BD:20:72:66:DA:27:94:71:D8:95:A9:E3:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5DA05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/bd14ab01086637c7b6f31d7a05d0d21a056c4687.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 May 2019 22:50:48 +0000
Certificate not after:    Fri 17 May 2024 17:44:32 +0000
Subordinate resources:    AS: 266854
                          IP: 45.239.60.0/22
                          IP: 2803:62a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15063557 (0xe5da05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 22:50:48 2019 GMT
            Not After : May 17 17:44:32 2024 GMT
        Subject: CN=bd14ab01086637c7b6f31d7a05d0d21a056c4687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:71:7f:b5:fa:25:53:e9:ff:5a:a0:64:24:
                    c2:33:69:c6:2b:d9:4c:d8:6d:22:0d:13:b9:cb:18:
                    7b:c2:a5:c9:01:11:89:ca:25:e9:bd:6a:d4:75:48:
                    8b:78:a5:6e:f9:60:7c:a4:92:ce:bd:30:95:6d:e6:
                    22:6c:95:a9:78:c6:54:9c:3f:e1:d3:c6:3f:bd:4d:
                    5f:a2:2c:ab:8b:46:a1:41:69:13:67:f4:d7:a0:c2:
                    5a:a7:8f:d9:5a:7d:c2:4a:92:25:aa:ae:9b:be:35:
                    ed:6f:75:8c:33:0a:93:58:ca:58:9c:e7:f2:fd:d3:
                    72:ff:43:3f:ae:4f:d1:aa:2d:5f:7a:d2:86:0b:3c:
                    66:92:71:fa:58:af:78:71:1a:9c:bc:79:b9:33:17:
                    a0:9b:1e:ad:d7:c8:7c:fa:9d:35:63:64:f4:4e:f4:
                    62:e3:1b:9a:bc:86:48:d8:4c:19:83:e2:32:38:a7:
                    ad:11:68:fe:ac:31:48:88:02:16:46:19:24:f4:fd:
                    38:f4:59:75:07:06:1e:08:4b:a8:68:39:30:71:39:
                    c4:72:eb:5f:e5:1a:1e:ef:79:60:19:d1:45:db:f4:
                    a9:3d:8b:de:d6:53:36:f7:c8:45:b0:07:85:54:8b:
                    20:86:02:0e:25:91:b7:0a:69:cf:97:14:fe:8d:ef:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7D:DC:D1:EC:24:93:BD:20:72:66:DA:27:94:71:D8:95:A9:E3:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/bd14ab01086637c7b6f31d7a05d0d21a056c4687.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.60.0/22
                IPv6:
                  2803:62a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266854

    Signature Algorithm: sha256WithRSAEncryption
         56:34:80:f9:9f:f7:e0:a2:79:7b:ed:e0:5a:b9:69:f5:4e:06:
         31:93:10:3a:91:9d:92:69:a1:aa:55:62:70:3a:9d:08:cd:b4:
         b3:c5:c1:cf:6d:02:1f:3d:25:5e:de:94:8f:5a:0f:6d:c4:7d:
         fd:ac:8f:94:fd:ab:16:bf:7a:88:af:8c:a1:a3:41:6a:07:54:
         6e:96:ee:07:d7:00:3e:76:60:61:df:a6:29:49:db:43:61:55:
         6d:4a:e5:47:80:14:48:73:7c:65:82:de:54:ec:b5:61:7e:7f:
         e9:11:44:5a:1b:9d:66:53:db:10:05:b8:1c:67:17:e8:b8:9e:
         e7:37:d9:a8:c9:45:44:59:8d:ea:41:5a:88:76:c8:e7:c6:f5:
         6d:04:e3:d5:1e:ea:16:f0:e9:0f:64:f1:61:c7:81:8f:40:56:
         64:a4:73:89:3d:7d:76:e5:53:01:f1:f5:95:11:f5:46:6f:c0:
         59:af:8a:c0:56:31:6b:2c:8c:09:43:a9:d1:e8:b3:94:90:94:
         c2:c5:56:02:79:d1:5a:9a:96:a3:95:7f:5d:88:e1:54:62:ca:
         75:96:0f:10:f1:41:93:c0:00:05:cf:15:6e:2c:f7:82:65:f7:
         44:4f:e7:83:21:d9:88:2c:bc:9a:26:9f:7c:1c:69:9c:c3:27:
         26:ed:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----