Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9b66be6ecc75830506521bc2ec11d7c3adf7191.cer
File:                     c9b66be6ecc75830506521bc2ec11d7c3adf7191.cer (raw, json)
Hash identifier:          bSiSZo+ML3wYVLcbdIhUDHmYc2TDl47mdDf5pgls2W0=
Subject key identifier:   66:9A:93:1F:4A:55:C8:43:8A:D3:8F:4A:C0:A9:AF:33:18:FA:8C:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2A861
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/c9b66be6ecc75830506521bc2ec11d7c3adf7191.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Dec 2019 12:40:31 +0000
Certificate not after:    Thu 22 Aug 2024 21:33:36 +0000
Subordinate resources:    AS: 269820
                          IP: 45.186.200.0/22
                          IP: 2803:2760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15902817 (0xf2a861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 13 12:40:31 2019 GMT
            Not After : Aug 22 21:33:36 2024 GMT
        Subject: CN=c9b66be6ecc75830506521bc2ec11d7c3adf7191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:25:fd:5b:9a:59:44:58:40:35:e0:ac:31:
                    01:ad:da:6f:c5:59:d5:4f:bb:a9:ab:2a:8e:a5:64:
                    f9:fa:d6:12:c6:52:57:ae:c4:17:df:21:82:8c:a5:
                    c4:20:6e:bb:13:08:4e:e8:23:88:11:d1:ce:be:34:
                    64:a4:34:33:c5:84:e4:b9:dd:3b:01:d9:03:5f:32:
                    63:2d:94:97:30:bb:78:69:96:2b:e2:ff:5f:43:b3:
                    73:d2:97:ad:76:c0:fd:94:79:94:25:b5:46:50:2a:
                    b7:7e:03:6b:7e:71:38:6d:5c:31:0a:e9:f9:94:3a:
                    8d:33:47:cf:41:41:ab:1e:59:ad:97:7c:4e:17:fa:
                    28:76:cd:72:9b:19:28:0f:7a:e3:bf:dc:57:28:44:
                    2f:07:06:34:53:3c:33:d9:d7:70:3a:e3:c6:db:48:
                    9d:e8:74:55:30:d7:37:cf:6b:54:6f:83:91:49:f1:
                    87:2b:e2:f6:9c:14:e2:0e:65:b6:35:c8:ca:23:3e:
                    e9:5f:c5:4d:ef:fb:e4:ac:28:72:07:bb:96:0e:05:
                    0e:66:f6:a4:f9:f6:26:08:7b:84:08:9e:66:97:f9:
                    21:63:b2:15:a9:84:58:6f:81:ca:6e:fd:a9:f6:39:
                    b9:00:1f:6b:4b:56:6f:81:83:9f:62:6a:68:91:5c:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9A:93:1F:4A:55:C8:43:8A:D3:8F:4A:C0:A9:AF:33:18:FA:8C:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/c9b66be6ecc75830506521bc2ec11d7c3adf7191.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.200.0/22
                IPv6:
                  2803:2760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269820

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:3f:4b:29:c6:2a:c5:c9:59:d5:d1:08:be:7a:94:f2:6c:
         63:69:6c:94:85:7e:6f:bb:2c:89:9c:62:b0:c0:da:87:46:2c:
         c2:92:8d:dd:f1:9f:8c:cd:8c:70:b5:fc:11:09:81:53:c1:00:
         a8:fb:3b:65:9c:e9:da:8b:69:3e:42:6d:98:35:d2:c5:53:d4:
         7b:dc:ea:f1:46:ad:83:7e:b6:aa:b0:ee:16:9a:16:63:69:8e:
         3e:2f:8f:12:c8:f1:17:c6:11:ee:7e:15:64:25:6f:3b:e1:13:
         b0:0f:47:1c:78:8f:db:fc:78:cc:9f:5f:b9:6f:f5:87:4e:e2:
         ae:4e:01:d3:3e:fb:06:02:ee:4e:49:c6:f1:f8:b0:a1:26:ea:
         c4:47:cc:7a:d6:5e:ec:79:0e:31:24:61:31:9a:60:cc:dd:5a:
         9c:0c:8f:56:6f:e5:2e:10:c2:e6:d3:80:f1:d6:ec:59:a5:a3:
         74:44:db:f8:db:85:72:ab:40:80:51:e5:4e:8c:e6:15:b6:b5:
         fa:d3:78:9b:a4:fa:24:4d:7f:93:37:af:06:49:d3:5f:fc:5e:
         22:88:fa:cb:75:80:b9:2b:f1:06:e1:1b:14:71:4f:df:e3:8a:
         3e:92:a6:a3:ea:e7:33:38:5d:f4:6b:78:62:4f:cc:0d:27:eb:
         f1:90:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----