Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbad518d599bf9b6a5667130c010c70d326a5f9d.cer
File:                     cbad518d599bf9b6a5667130c010c70d326a5f9d.cer (raw, json)
Hash identifier:          lq/6lneIktxSSa10QAezrWfxlVUtDwpX9TEjrRDLD2c=
Subject key identifier:   52:52:3D:FA:87:CA:58:5F:FA:87:B3:2C:E2:6B:5E:08:E8:05:78:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3E461
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/cbad518d599bf9b6a5667130c010c70d326a5f9d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2019 19:53:49 +0000
Certificate not after:    Mon 06 May 2024 17:56:49 +0000
Subordinate resources:    AS: 27930
                          IP: 131.221.24.0/22
                          IP: 190.14.216.0/21
                          IP: 2803:b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14935137 (0xe3e461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 19:53:49 2019 GMT
            Not After : May  6 17:56:49 2024 GMT
        Subject: CN=cbad518d599bf9b6a5667130c010c70d326a5f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:7c:1e:73:a5:f2:d5:ed:26:38:31:12:14:
                    aa:ab:bf:fd:67:86:57:b2:61:af:f3:f6:0e:7f:64:
                    ce:89:e8:0c:e8:d2:38:7b:40:13:f4:94:82:89:a5:
                    aa:96:98:f6:f3:42:e8:99:73:bc:8a:1b:dd:9c:1e:
                    8d:99:95:f7:bb:ff:ef:c7:3c:f5:67:e3:4c:45:2e:
                    29:bf:27:1b:64:7e:35:14:eb:c7:3d:bb:7c:3e:5e:
                    9a:83:be:1b:0e:f7:32:12:57:00:de:1a:92:ff:63:
                    75:f2:d5:51:4b:04:1a:e8:b0:66:d2:86:f0:4f:ee:
                    51:06:70:fb:05:94:7e:5a:86:23:60:37:33:a9:9c:
                    57:03:99:80:ef:06:8a:fa:ed:aa:b3:dd:bd:4a:b2:
                    4e:ed:1d:50:0f:9a:c2:35:48:28:8e:26:ec:d0:c0:
                    c7:2b:3c:f8:8a:db:0a:ff:4f:fb:d2:c9:ee:68:0f:
                    af:9d:54:7e:80:88:60:b1:ee:6d:87:36:a6:be:a5:
                    3a:74:6f:d3:15:b1:a5:d2:f3:03:02:ed:bd:37:6b:
                    6c:6f:6c:82:f0:e6:70:76:d0:8e:36:14:6a:e1:2c:
                    45:c3:84:df:4b:80:4e:46:57:7c:5c:4c:24:3a:81:
                    18:a8:fc:2e:09:c6:27:e2:5a:70:2a:c3:0a:73:3f:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:3D:FA:87:CA:58:5F:FA:87:B3:2C:E2:6B:5E:08:E8:05:78:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/cbad518d599bf9b6a5667130c010c70d326a5f9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.24.0/22
                  190.14.216.0/21
                IPv6:
                  2803:b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27930

    Signature Algorithm: sha256WithRSAEncryption
         95:d3:c3:7a:0c:29:ac:2f:2e:d6:a7:52:ec:22:81:fb:db:ab:
         1f:13:8a:65:d6:2a:43:8d:7b:f4:d4:1e:62:69:5f:c5:a6:8a:
         e7:d0:dd:a3:00:9d:d0:e8:01:9c:28:c2:d9:18:e9:fb:cd:b3:
         aa:c4:58:76:6c:51:9f:dc:74:78:bc:f9:0b:1c:00:23:88:7c:
         70:4b:d8:d5:94:7a:47:1e:27:3c:73:b7:5a:cd:d7:80:6e:c9:
         1b:b3:25:5c:0d:9f:c0:1d:94:d8:5d:85:e2:da:ba:7b:b8:f4:
         b5:6d:3f:20:67:4f:89:b2:b3:ef:44:57:c6:4f:f3:b4:36:e4:
         bb:ac:91:bb:2a:cd:85:75:57:b6:c0:ea:81:95:de:24:71:ce:
         89:00:c6:c4:f6:ff:85:e9:57:a5:e0:2d:e6:de:52:95:76:3a:
         b7:92:f7:67:94:8b:24:57:d9:7f:e9:d2:4f:50:2b:8a:4f:5b:
         1a:48:cc:6c:7f:ef:2b:e4:56:e7:0a:ef:01:a8:04:5b:7a:38:
         65:80:96:9e:3a:5e:1a:25:f6:24:a2:e2:24:c9:fd:5d:1f:37:
         b2:d4:38:e7:18:95:0d:78:64:08:2f:9f:90:10:6c:02:32:06:
         db:56:40:78:e5:54:98:40:de:d6:75:8e:b4:09:53:55:61:24:
         85:f9:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----