Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
File:                     cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer (raw, json)
Hash identifier:          KCxih+uSaLuK3DoeXsyUSUXD8TBwkSiDrcSRfkjdJ8I=
Subject key identifier:   86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67EA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Nov 2019 20:12:24 +0000
Certificate not after:    Fri 11 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 266668
                          IP: 45.228.188.0/22
                          IP: 2803:a920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15105699 (0xe67ea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 19 20:12:24 2019 GMT
            Not After : Oct 11 05:00:00 2024 GMT
        Subject: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:9b:6d:98:a5:92:1a:2e:ba:bb:4e:f5:90:
                    fa:5b:38:2e:6b:04:cd:39:fe:e3:f7:13:5e:1f:62:
                    38:5c:97:81:61:b9:b3:f5:4e:a3:ea:61:a7:b9:32:
                    2a:9c:1c:3f:6b:98:c2:6d:af:1e:35:80:8a:f6:50:
                    34:41:3d:82:a8:0b:43:07:d3:b1:98:1e:74:c0:f9:
                    23:5c:6c:b4:0c:48:90:44:8e:03:1f:14:ad:91:53:
                    06:91:b9:8d:a5:c2:44:c7:0a:5e:7c:d6:71:8f:17:
                    dc:71:89:56:0c:bb:32:64:7a:e7:45:35:0f:00:b6:
                    40:a2:bf:22:d0:d6:25:ec:73:7c:f6:92:75:94:d7:
                    16:23:7d:23:ed:9f:0b:ac:57:83:6d:cb:c0:de:f7:
                    1e:3d:3e:61:40:50:9c:ec:d4:da:ef:8b:ec:45:d3:
                    96:0f:20:fa:55:c9:ce:3e:74:0a:db:8b:a3:96:3f:
                    8e:3b:99:d9:83:1e:98:cf:9c:20:9a:3f:4b:89:e9:
                    c0:7f:5e:e6:ed:e7:4b:86:bd:18:aa:5f:c6:de:a2:
                    9a:0b:f4:d8:8a:a6:ff:c4:dc:fa:38:72:1f:2e:17:
                    11:1a:21:61:5f:46:54:e0:83:79:a4:10:ee:e7:f1:
                    65:ee:cc:78:d1:fd:82:ac:69:9e:05:04:61:82:10:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.188.0/22
                IPv6:
                  2803:a920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266668

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:4b:40:49:e1:01:99:0a:37:8a:8a:08:14:77:cd:cf:e6:
         ac:49:71:f2:a4:1b:58:e8:68:d0:23:6a:d1:f2:97:db:6e:56:
         5e:8b:34:df:a5:65:11:86:c1:6c:5e:8a:f3:0a:9f:b2:c6:ed:
         79:86:76:8e:4a:7d:37:f1:40:47:67:75:7b:07:ab:11:aa:32:
         86:b0:4c:e9:80:99:2d:7f:69:65:a2:51:f3:f3:f9:67:86:c9:
         f5:e7:f4:8f:6c:38:cc:c0:27:1a:8c:f8:fe:bb:b8:59:10:cf:
         9c:f9:08:7d:bc:b3:98:56:4d:59:7c:c2:68:45:64:35:dc:72:
         57:e3:d1:54:f7:ec:3e:6a:18:2d:63:12:06:c6:5e:2f:ab:4c:
         79:42:ce:8f:81:eb:33:0a:6a:b5:44:b7:cd:33:27:e5:81:c3:
         51:c0:e5:e4:4b:42:fa:af:9b:f7:0e:dc:f7:fe:3c:2a:92:8a:
         a0:51:fe:ec:45:3a:b1:96:68:ab:39:c3:8e:e8:25:a4:e1:45:
         11:5c:64:a5:5f:df:d8:dd:43:0f:80:8f:b2:4c:3e:be:1a:b3:
         26:31:c5:82:9b:df:f3:a9:a1:85:ab:49:94:59:ca:6b:04:90:
         1d:f0:20:ee:0b:e8:15:5e:dc:52:2c:6d:6c:da:4d:a1:0b:05:
         3b:75:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----