Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2400b14f7891777638316ac6e8472dfc450b857.cer
File:                     e2400b14f7891777638316ac6e8472dfc450b857.cer (raw, json)
Hash identifier:          Kr1KPngIgMF97byNmP+hTDQPkJ/GlLmdYRo4thNGUV8=
Subject key identifier:   24:5C:81:20:04:12:A6:80:C1:BD:B0:90:E3:A7:B3:3A:97:9B:D8:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D69114
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/29c4c763-4c96-467f-98df-e3df86e1926c/e2400b14f7891777638316ac6e8472dfc450b857.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/29c4c763-4c96-467f-98df-e3df86e1926c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Sep 2018 15:55:59 +0000
Certificate not after:    Tue 05 Dec 2023 21:44:51 +0000
Subordinate resources:    AS: 266726
                          IP: 45.227.131.0/24
                          IP: 2801:14:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14061844 (0xd69114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 15:55:59 2018 GMT
            Not After : Dec  5 21:44:51 2023 GMT
        Subject: CN=e2400b14f7891777638316ac6e8472dfc450b857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:57:7d:33:45:62:d9:c3:13:da:2e:64:ac:
                    1f:ce:bb:3c:39:d8:91:ba:89:ca:41:37:1e:8b:99:
                    3c:fd:3e:5b:46:07:c8:08:b2:4f:00:e0:86:9c:b0:
                    00:e4:60:b8:72:59:f0:b4:de:85:d7:c9:68:da:93:
                    b9:63:16:82:ef:d1:46:62:67:a5:27:3b:e1:ca:c8:
                    29:55:24:34:cb:97:bd:72:54:9d:c0:df:18:93:7b:
                    eb:8a:17:e2:dd:36:13:fa:5c:9d:b7:f2:f9:43:35:
                    57:8d:bf:a0:80:92:6f:b3:95:bd:f0:b8:d5:7e:54:
                    d5:8d:e9:f6:71:ed:5d:18:a6:23:41:71:06:52:fa:
                    c6:be:a9:59:a3:8b:8f:ff:86:d9:14:71:94:1c:46:
                    e5:e5:b4:67:f2:12:9b:85:bd:91:16:07:ee:d1:02:
                    37:9c:e4:fc:08:7d:00:d3:9d:d2:95:54:7c:fa:09:
                    5e:aa:3e:a4:a2:6e:ab:e0:f4:3b:cd:42:f1:ea:0c:
                    3f:49:67:89:19:a6:32:0c:d5:fc:80:90:f8:4e:0c:
                    2c:56:4e:63:e4:53:82:bb:d6:2e:a9:01:e7:4c:0d:
                    60:58:1a:e2:4c:b8:50:68:b6:c7:51:0d:75:a6:16:
                    26:8e:f3:71:6f:dc:20:df:3f:1f:5f:30:d8:eb:28:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:81:20:04:12:A6:80:C1:BD:B0:90:E3:A7:B3:3A:97:9B:D8:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/29c4c763-4c96-467f-98df-e3df86e1926c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/29c4c763-4c96-467f-98df-e3df86e1926c/e2400b14f7891777638316ac6e8472dfc450b857.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.131.0/24
                IPv6:
                  2801:14:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266726

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:3b:4c:86:f7:32:1a:5a:4e:1a:17:c1:c7:7d:ec:27:10:
         32:e6:44:b5:10:5d:48:f2:c7:fd:2f:05:ba:30:79:3e:90:88:
         31:35:8f:df:b2:67:9f:0a:58:40:52:7e:13:9a:b7:45:2a:d4:
         73:c4:26:48:44:da:46:7b:49:c0:57:6c:58:bf:0d:af:0e:de:
         a1:a3:7b:b6:71:3e:f0:7a:2e:e9:c4:4f:e9:c9:45:bd:1d:99:
         ce:88:bb:97:3a:ce:19:f9:fd:65:48:d6:07:08:bd:79:6c:e1:
         ed:c6:e6:72:84:e6:b7:b8:e2:85:cb:ff:77:f7:51:b1:1c:24:
         c9:4e:53:c9:6c:20:db:a6:25:ee:62:01:bc:04:5b:15:da:6d:
         a9:97:a3:a6:9d:a8:70:7e:e4:f1:a5:00:ca:e2:31:d1:59:e6:
         e8:6b:0f:cf:b2:ff:81:af:86:2b:de:6c:46:34:32:de:83:87:
         d3:4a:46:b8:f7:2b:0d:3d:fe:35:b9:fb:a5:dc:82:8b:25:ca:
         f8:f3:d1:9d:06:7d:56:9a:3f:03:46:a5:a1:02:29:3d:59:54:
         f6:9d:45:73:b5:81:79:bb:7d:ac:45:95:7c:05:39:e1:cc:88:
         4a:57:b1:58:67:8d:6e:89:bd:e5:40:32:b5:56:a9:e9:0b:12:
         c4:5f:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----