Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d859ad1e19f2ad313763c624cb729482cdaa2d58.cer
File:                     d859ad1e19f2ad313763c624cb729482cdaa2d58.cer (raw, json)
Hash identifier:          vAUW6PPwNvCaeOUQNN7DuOoKXwnOjh6TyPsqlbdArmk=
Subject key identifier:   DC:68:32:5F:D2:E4:7D:88:B9:02:23:DB:48:E6:6E:83:6E:D2:2D:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB95BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/d859ad1e19f2ad313763c624cb729482cdaa2d58.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Jun 2019 03:59:15 +0000
Certificate not after:    Thu 08 Feb 2024 13:52:49 +0000
Subordinate resources:    AS: 264679
                          IP: 45.171.36.0/22
                          IP: 168.205.120.0/22
                          IP: 2803:9860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14390718 (0xdb95be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 24 03:59:15 2019 GMT
            Not After : Feb  8 13:52:49 2024 GMT
        Subject: CN=d859ad1e19f2ad313763c624cb729482cdaa2d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:8d:b6:8b:7b:7a:15:6d:88:86:57:29:dc:
                    e1:97:af:fe:81:bf:9e:0d:c6:b6:97:ea:7e:fd:c6:
                    57:23:ad:7d:99:7f:ea:f0:7f:ce:a5:83:00:ad:72:
                    30:33:30:ab:e6:4b:c6:e3:bc:e0:f9:1a:e4:45:04:
                    92:5f:dd:d1:88:57:d5:42:3c:ea:27:c8:fb:d9:eb:
                    47:55:b6:49:6d:94:34:cc:b9:53:c3:11:0e:c0:bf:
                    38:07:61:cb:44:42:4c:d0:ca:d0:f2:68:e8:59:f8:
                    a4:fe:70:3a:ac:02:24:c0:6c:8e:a7:21:63:cb:be:
                    b1:42:34:c7:b1:0a:b0:82:b5:59:ca:d1:f4:c0:5f:
                    12:bf:9e:54:93:b6:53:ab:77:dd:fb:9f:31:83:ef:
                    02:a6:1b:60:12:ab:32:f3:f6:01:cc:54:14:55:b1:
                    b7:eb:e8:d2:66:39:66:ed:b0:31:86:11:0e:c2:9d:
                    48:0a:35:a8:e1:17:46:23:34:3a:e0:24:ec:b4:50:
                    d5:c9:fc:31:a1:9f:5d:fc:29:36:88:e1:70:21:2c:
                    e1:e2:3c:57:fe:ce:ec:e1:85:50:cb:4c:b7:50:2a:
                    6c:a6:49:b6:80:98:7a:d6:09:bd:63:3f:0b:dc:a5:
                    d8:2e:49:f1:ad:d6:d5:98:55:ec:ef:1e:cd:cf:e4:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:68:32:5F:D2:E4:7D:88:B9:02:23:DB:48:E6:6E:83:6E:D2:2D:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/31cd2161-a38f-4982-9480-8aac1430885b/d859ad1e19f2ad313763c624cb729482cdaa2d58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.36.0/22
                  168.205.120.0/22
                IPv6:
                  2803:9860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264679

    Signature Algorithm: sha256WithRSAEncryption
         96:30:af:7a:49:b0:c0:58:60:19:78:5e:8e:12:f6:65:b9:05:
         2e:d0:c9:43:b6:53:13:8b:75:db:dc:ac:3e:9b:da:ae:26:21:
         c1:63:37:bd:d7:b5:12:a2:b8:c9:f0:bd:83:13:f3:e8:06:83:
         81:45:04:33:19:5a:a7:75:53:1d:bd:a7:a2:a8:3a:c6:c5:a0:
         1a:74:e6:14:80:db:fd:95:c5:c5:ef:99:f8:fd:91:3c:e0:f3:
         a5:9b:b1:c7:57:0b:b4:31:f0:c4:ee:fb:5b:0b:7d:ca:6c:19:
         51:f6:4d:e3:57:de:4d:3f:c5:6c:60:7d:32:20:02:d6:9b:7f:
         1c:bb:11:3d:31:08:65:06:e4:5a:96:7d:f1:c7:a0:ef:48:cd:
         c1:a8:0c:bd:26:d2:05:94:9d:d1:71:a6:75:74:4d:ac:d2:df:
         7d:64:69:31:87:1a:2b:21:23:24:33:9e:30:d1:b9:f8:cf:35:
         8c:88:4c:10:8f:06:bc:5f:bc:ac:cd:ad:b3:06:49:51:01:e5:
         ae:0f:f5:69:0a:72:65:c1:6a:2d:19:88:05:e7:5c:c2:aa:4a:
         ae:d7:6b:ba:fd:ad:93:f2:71:c3:57:69:f9:c4:99:7f:8b:48:
         93:fe:ac:3a:d0:da:4a:7c:04:ee:65:a5:bc:1e:78:63:62:2e:
         41:41:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----