Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc.cer
File:                     c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc.cer (raw, json)
Hash identifier:          n1PP0qm/HqZiSkHu1RGcraGyZzxy+6dLhh+nKbb3Xmg=
Subject key identifier:   1A:80:CF:15:DA:0F:8C:3D:6E:8C:41:BE:19:4D:C6:91:73:AA:0D:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBBA04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 27 Apr 2019 23:34:25 +0000
Certificate not after:    Sat 10 Feb 2024 18:22:56 +0000
Subordinate resources:    AS: 267830
                          IP: 45.172.224.0/22
                          IP: 2803:460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14400004 (0xdbba04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 23:34:25 2019 GMT
            Not After : Feb 10 18:22:56 2024 GMT
        Subject: CN=c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ca:ec:b7:76:6e:6e:5f:d6:11:24:b1:d7:d4:
                    9f:b1:d8:c4:f0:22:e5:5d:2e:ba:ee:63:28:ad:c4:
                    e7:04:66:07:e5:95:b3:90:24:5b:75:13:9c:49:2e:
                    0d:a3:af:c6:25:df:a4:ca:06:b5:dc:9d:66:71:86:
                    4c:35:b8:6d:b2:45:65:ef:f8:9b:4c:f8:a6:a4:de:
                    eb:61:19:2b:e0:ee:b9:df:0e:7d:0a:4b:71:22:9d:
                    0d:a9:33:bf:ca:99:55:1a:9c:bf:7b:8d:da:d1:24:
                    a4:f3:41:ea:b3:58:d9:44:cd:a1:e6:42:bc:80:29:
                    4c:5e:e0:42:14:74:86:01:36:6f:ab:73:24:39:99:
                    f1:9a:d4:c1:9b:4a:d2:3b:c1:81:b2:a3:cc:e4:60:
                    80:9a:26:5e:12:5e:42:9d:ca:7b:38:a1:09:fe:09:
                    24:ec:35:8c:b7:7b:e9:0a:a0:ea:7f:c6:1a:1b:7c:
                    88:ba:80:3b:22:4f:bf:b2:0a:f6:3c:55:09:7a:bd:
                    27:d3:c5:18:54:b2:6a:68:ed:e0:94:4e:63:8a:39:
                    43:f0:67:29:8a:88:61:4b:e0:60:fe:56:bb:40:71:
                    3b:8b:f1:99:67:81:d5:ff:49:b3:21:d7:70:ce:20:
                    05:a1:89:d5:c4:25:dc:77:07:bf:2a:c3:4b:6f:ac:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:80:CF:15:DA:0F:8C:3D:6E:8C:41:BE:19:4D:C6:91:73:AA:0D:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.224.0/22
                IPv6:
                  2803:460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267830

    Signature Algorithm: sha256WithRSAEncryption
         26:6d:83:36:35:bf:38:3f:dd:32:ae:3e:cf:28:7a:f7:f6:40:
         ed:7d:39:c3:08:cf:17:5f:e7:cb:51:aa:35:0e:9a:37:9a:de:
         b0:5d:5e:b0:ac:f2:56:81:13:2a:a6:e5:fa:20:5d:ab:d6:75:
         26:c0:fe:8c:97:aa:74:be:c1:5f:fc:46:f5:57:1b:07:f5:3e:
         78:a1:b3:80:45:6f:4f:c7:87:15:01:8d:b9:71:6e:1d:96:d8:
         b5:0b:48:d1:d9:66:aa:dd:54:14:8f:cd:ad:0d:27:25:fe:62:
         65:e8:af:bf:3b:e3:65:7a:95:88:fb:d5:5d:ff:c8:8e:7d:b8:
         ea:04:c5:40:43:44:13:23:7c:00:37:a7:87:1e:4b:f1:87:fb:
         58:b1:fe:12:cd:42:85:02:ef:67:06:f0:70:d3:b6:f5:f2:d9:
         67:5c:e1:02:55:43:08:57:3c:5b:fb:da:81:46:a4:b7:2d:bd:
         88:71:4a:48:65:90:ee:3f:c0:b6:a7:01:be:64:03:d9:96:d1:
         db:88:d9:28:e9:c7:97:d4:f5:8a:fe:9f:13:27:aa:a6:36:8b:
         1f:9e:66:d1:2e:cf:dc:3c:0d:fa:9c:29:d0:39:4b:13:27:4d:
         a4:b9:30:8b:cf:58:42:a8:14:82:69:07:9d:b4:2b:5b:34:f3:
         ab:f2:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----