Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.cer
File:                     bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.cer (raw, json)
Hash identifier:          dMozBayon9qadx94JMh/zeBdrtZ1/w7Rftl72zF4e2Y=
Subject key identifier:   D5:03:72:6D:33:A2:36:33:B3:3C:86:79:A8:3A:8F:E2:4C:01:26:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0CD83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Jun 2019 16:40:52 +0000
Certificate not after:    Sun 07 Apr 2024 14:39:39 +0000
Subordinate resources:    AS: 267890
                          IP: 45.178.12.0/22
                          IP: 2803:da60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14732675 (0xe0cd83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 19 16:40:52 2019 GMT
            Not After : Apr  7 14:39:39 2024 GMT
        Subject: CN=bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:11:5b:93:75:27:3a:f6:6a:ab:79:fc:89:
                    00:64:f8:37:85:81:ad:06:5d:c7:52:63:16:54:fc:
                    71:69:08:f3:10:3b:ac:aa:3c:59:56:7e:52:00:a9:
                    1c:47:a8:4b:91:13:55:fc:ce:8d:9d:01:47:30:19:
                    cb:d2:68:fd:dc:3a:6c:56:7f:7f:df:c4:3f:70:06:
                    23:96:5b:14:be:1d:b5:7b:3e:d7:bb:be:fd:f1:63:
                    35:64:9a:7b:96:d4:9f:1b:ea:11:b6:02:af:e4:09:
                    45:12:b7:5b:ee:9c:cb:a0:d3:eb:32:ac:2b:eb:33:
                    4a:98:3b:87:eb:5f:63:6d:5d:dd:16:38:2e:32:19:
                    bc:f7:46:17:8c:25:4d:42:ad:ff:c4:39:bf:2f:89:
                    9f:4d:3e:8c:0b:94:9d:79:8f:b7:6b:c0:14:c7:d6:
                    7d:76:9e:2a:88:e0:9d:77:e5:9d:af:b2:bf:0f:c2:
                    c4:91:52:b8:9b:c6:6e:18:a9:b8:94:fe:dc:c5:f9:
                    bd:c2:28:f4:96:52:8a:d5:ec:62:02:86:0c:dd:f9:
                    a7:42:57:df:cb:28:28:b3:78:41:a0:a6:9a:18:e7:
                    50:21:41:cb:22:fd:bb:a0:61:f2:1b:74:b5:78:60:
                    69:d4:7f:68:c7:9a:f2:3e:9c:c9:d4:b2:b3:d4:b1:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:03:72:6D:33:A2:36:33:B3:3C:86:79:A8:3A:8F:E2:4C:01:26:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.12.0/22
                IPv6:
                  2803:da60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267890

    Signature Algorithm: sha256WithRSAEncryption
         a6:c7:98:16:24:dc:d6:49:20:97:93:7a:e3:b1:d4:67:a0:8c:
         9f:3f:c4:c8:8f:d7:d3:8f:71:7e:eb:c7:dc:10:13:a3:25:06:
         11:d2:c8:14:cb:29:a8:23:6b:87:70:2e:ec:9c:52:7e:67:86:
         66:04:b3:0c:02:c1:15:34:76:5a:5f:8b:49:55:16:a6:17:30:
         91:3b:56:a1:a6:5d:22:9b:e9:fb:ff:19:87:5f:34:77:85:6f:
         af:06:3b:ef:5e:71:6f:c5:86:26:26:41:69:16:38:c4:5f:81:
         0c:df:aa:3b:d2:cf:d8:8d:a8:0f:ac:8d:d6:9f:3e:84:fb:d8:
         f3:a4:56:a1:90:a9:c7:cf:68:51:db:98:51:ce:9e:ca:4d:3d:
         7e:f1:53:a3:5d:f1:8d:c2:b9:42:64:ce:bb:f6:07:67:64:ba:
         a9:a7:f4:ed:79:fd:75:e1:c0:8f:1d:50:be:df:1b:7b:5e:bf:
         c8:42:5c:ba:91:ea:44:c1:73:6f:db:62:1d:fb:42:fb:40:dc:
         b2:e6:c4:05:5a:46:d6:6b:67:45:83:25:a0:08:4e:77:ac:c0:
         c2:4e:7d:5b:e3:91:4f:99:ab:b6:79:72:67:47:2a:f1:ae:ad:
         d7:3d:a3:33:a5:be:82:d6:1d:a0:84:11:dd:0c:25:9b:5a:9d:
         3b:9b:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----