Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c808f585323c60a52c534c21625a79d8b5959db7.cer
File:                     c808f585323c60a52c534c21625a79d8b5959db7.cer (raw, json)
Hash identifier:          scUWsIur4QYpzSwMOEZTqrpmlolX8eJquQWRbDF/5WA=
Subject key identifier:   6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F97938
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/c808f585323c60a52c534c21625a79d8b5959db7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 03 May 2019 15:51:58 +0000
Certificate not after:    Mon 14 Oct 2024 20:16:02 +0000
Subordinate resources:    AS: 28107
                          IP: 190.124.224.0 -- 190.124.243.255
                          IP: 2801:0:2f0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16349496 (0xf97938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 15:51:58 2019 GMT
            Not After : Oct 14 20:16:02 2024 GMT
        Subject: CN=c808f585323c60a52c534c21625a79d8b5959db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:28:7d:bb:bb:a8:6a:ce:05:2d:f6:4a:c0:
                    bb:fb:ad:d8:96:37:af:4a:5e:fd:50:8e:29:47:96:
                    b2:41:36:69:66:af:9f:d6:48:28:a3:98:3e:07:42:
                    d0:25:e7:34:44:65:51:08:68:35:b2:19:98:65:66:
                    46:d1:94:09:68:43:7d:fe:e8:2b:4a:d5:4d:7e:09:
                    06:52:6b:e2:c2:3f:3d:84:c9:ea:59:86:45:2f:06:
                    cf:26:f1:3e:a9:23:20:38:99:8e:51:45:cf:23:45:
                    ae:75:66:c1:6f:25:f9:2e:8a:8c:1f:4b:ab:29:91:
                    db:10:ca:3d:6f:6d:49:1a:8b:4e:fe:41:39:0e:ab:
                    04:c8:88:ef:fb:66:59:fb:7d:fc:c1:11:f4:f5:9f:
                    bd:51:c6:d6:b5:b7:4d:b8:f9:c0:27:d1:5b:d8:26:
                    d3:59:50:45:24:51:1f:ea:37:e0:9e:0a:e6:b9:45:
                    e9:c0:da:51:59:75:a5:83:ec:ec:10:6c:ca:3b:b0:
                    76:c5:bc:dd:50:2a:02:16:62:b9:58:68:cf:28:09:
                    25:ec:ff:fa:40:97:d5:9a:e7:15:c1:14:a9:ed:69:
                    f3:a6:fc:71:63:c1:0e:59:f4:90:10:e6:c5:4b:74:
                    89:c4:85:a5:60:79:12:43:1f:61:61:0f:be:4a:a1:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/c808f585323c60a52c534c21625a79d8b5959db7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.224.0-190.124.243.255
                IPv6:
                  2801:0:2f0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28107

    Signature Algorithm: sha256WithRSAEncryption
         46:64:20:b3:b0:41:bd:9d:3a:c8:d7:58:df:5b:af:09:73:dc:
         95:47:f1:de:8a:b1:40:ca:b8:c0:61:6b:50:0c:a2:60:b1:fa:
         e3:79:14:70:3d:48:66:0d:a0:11:1b:2a:aa:6d:eb:f4:3e:b2:
         a1:60:12:10:5d:96:dd:42:d5:33:b5:89:75:e4:8d:1d:67:81:
         ce:3f:de:60:8c:85:8e:4e:a3:e7:4f:84:16:ee:bd:d0:f8:1b:
         01:7a:59:9d:7b:27:da:dc:54:e3:4b:f1:c6:9c:ad:14:48:35:
         ec:e7:6b:30:f2:5d:01:e4:d2:9a:00:d0:33:ca:49:d3:ba:98:
         9d:95:49:7c:73:26:61:63:13:f7:65:5e:91:a6:8c:b2:ed:14:
         7e:39:a9:b4:09:39:74:60:77:d1:67:32:6b:11:15:f5:65:3a:
         d0:ab:5c:b0:2f:ac:58:b6:07:d4:f9:b6:03:1f:4f:ba:ad:5c:
         4c:2a:e5:ef:76:ad:2c:b9:5c:e1:9b:50:cd:80:e2:17:f2:5f:
         7f:26:51:63:95:f4:b8:a4:76:9f:2b:b5:d2:40:74:32:60:09:
         76:fe:4f:a9:28:63:c0:f9:1d:36:64:7a:37:22:fb:dd:d6:92:
         fa:af:c8:91:08:15:1a:d8:9a:87:5c:44:09:57:b4:8e:d2:99:
         7c:91:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----