Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
File:                     e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer (raw, json)
Hash identifier:          tIwOZEh4+e3Iekh+uz42zpJTRXyuPLtLiVxrDwOINWU=
Subject key identifier:   95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D98DF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Oct 2019 13:20:36 +0000
Certificate not after:    Sun 14 Jan 2024 16:03:53 +0000
Subordinate resources:    AS: 267799
                          IP: 45.173.14.0/23
                          IP: 45.173.44.0/24
                          IP: 2803:bfa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14257651 (0xd98df3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 15 13:20:36 2019 GMT
            Not After : Jan 14 16:03:53 2024 GMT
        Subject: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a8:49:d5:6d:dc:4f:9d:26:70:29:27:0a:89:
                    c6:38:e6:93:e3:68:69:a0:24:be:ad:29:d8:37:fe:
                    ce:e4:45:dd:1a:f8:bb:39:f4:85:4e:26:7b:7b:ac:
                    13:ec:26:df:21:10:c4:b4:b0:33:04:30:c0:af:72:
                    45:b5:de:28:b4:08:1b:28:b6:9a:b7:50:c0:be:05:
                    83:03:88:d2:f3:24:ba:f7:90:90:d1:d6:34:31:d7:
                    44:97:dc:c1:5e:cc:42:a2:80:e9:30:fb:61:96:97:
                    7a:cf:7c:b3:72:92:4e:fe:9a:1a:98:db:7e:1f:00:
                    eb:98:d7:31:50:a8:fc:72:e7:12:64:fa:e4:13:a4:
                    99:02:6d:82:17:4a:77:c8:f8:7b:4a:02:f8:80:87:
                    d8:19:58:17:3d:50:7e:4a:8f:e8:0f:53:65:44:81:
                    db:e2:32:75:d1:c7:a1:c4:9a:c5:5f:65:43:29:2e:
                    b9:3d:48:7f:14:69:a9:6c:bb:76:ec:83:7f:bb:3c:
                    fc:84:6e:93:cc:b9:31:91:9b:21:5a:a9:d3:fa:f7:
                    0f:2b:a4:eb:97:9f:cd:3e:e5:b9:8a:2a:55:93:7a:
                    08:c6:c2:de:cf:be:87:e5:fd:ca:9c:90:a5:fa:4a:
                    3a:67:cc:57:70:d9:fc:7f:e7:70:0f:ac:c8:3c:d4:
                    f6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.14.0/23
                  45.173.44.0/24
                IPv6:
                  2803:bfa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267799

    Signature Algorithm: sha256WithRSAEncryption
         58:56:14:18:b1:44:0c:48:cf:08:94:db:4d:77:ff:47:f0:6e:
         4f:a7:52:dc:34:3c:fb:6e:2d:91:8a:11:4b:20:74:0d:c6:4d:
         41:db:c7:cc:15:3a:d5:f3:15:85:ab:e6:17:0f:fd:f3:33:9e:
         d6:3a:1d:3b:96:bb:3f:cf:3d:f3:c2:9e:b0:d4:8e:96:45:13:
         9a:68:1b:51:ff:26:9d:8d:e5:f4:97:79:3f:99:c0:66:2a:9a:
         16:72:02:8e:3f:40:87:ca:4f:cc:a7:df:37:a2:49:46:5a:02:
         67:f5:b2:ad:5c:a1:4c:75:24:32:14:60:e4:73:05:33:b8:cc:
         b4:cd:0e:38:c8:7f:6e:6c:82:06:44:f5:fc:44:bf:e9:91:6e:
         15:32:96:69:67:a5:b8:d5:58:d0:24:bb:49:53:9b:cd:c3:8e:
         6b:b4:25:43:c1:86:e0:1a:23:12:2e:3a:27:5f:55:5c:c9:42:
         7e:56:d7:01:3c:39:a3:e6:ac:9a:93:2a:56:c5:a7:c7:6d:bf:
         e6:bf:2e:46:b9:55:c9:33:24:11:54:4b:ca:46:d1:c2:f6:92:
         ce:ba:9b:72:96:f9:0a:21:ca:22:5b:df:4d:b8:a2:a3:48:bc:
         7c:39:1b:06:e6:c1:9b:e3:f4:6b:0a:63:f3:87:92:d6:6b:fc:
         13:9a:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----