Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e25e5ef58601a15daf52d8890b9556720123c94e.cer
File:                     e25e5ef58601a15daf52d8890b9556720123c94e.cer (raw, json)
Hash identifier:          /UNWM4EGUIIVI3byLh34IlXWLQU+tZd8nASdIi0VH5I=
Subject key identifier:   65:8F:A1:E2:BC:66:24:13:AB:0E:8E:29:02:42:7C:A1:B4:29:CE:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBB970
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e127b6e7-5d7d-4411-adae-92d7eab040ef/e25e5ef58601a15daf52d8890b9556720123c94e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e127b6e7-5d7d-4411-adae-92d7eab040ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2019 00:05:06 +0000
Certificate not after:    Sat 29 Jun 2024 18:46:52 +0000
Subordinate resources:    AS: 265509
                          AS: 270136
                          AS: 270236
                          IP: 168.195.204.0/22
                          IP: 2806:282::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15448432 (0xebb970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 19 00:05:06 2019 GMT
            Not After : Jun 29 18:46:52 2024 GMT
        Subject: CN=e25e5ef58601a15daf52d8890b9556720123c94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fd:9e:d1:1b:a7:1e:ed:fe:3d:83:17:c8:24:
                    f8:bf:b0:b5:c0:4a:66:c3:85:e6:c0:3d:ec:93:19:
                    e8:e8:37:ee:2a:3a:22:32:fb:9c:4c:fc:1c:de:ec:
                    1e:6d:65:3f:f6:4a:14:ed:88:c2:4e:3a:af:00:1e:
                    16:20:95:e9:82:05:b1:51:dc:23:4b:c7:ea:d0:e5:
                    9e:cb:34:9d:7d:d1:ac:67:f6:7a:83:83:94:37:a4:
                    a1:5b:a5:22:e8:52:a8:af:be:8b:4f:6f:97:2d:ae:
                    84:57:f7:cc:b6:2a:60:27:ba:b5:4f:53:94:e8:a4:
                    0e:e6:0a:a8:b1:9d:1e:3d:15:f9:7d:5a:bc:68:22:
                    2c:ae:27:20:4d:e2:a2:6c:b6:34:8c:bf:b7:69:da:
                    6e:7b:c7:da:a9:b1:2b:12:98:db:4c:ba:8a:4f:39:
                    53:e2:a5:d6:e8:b3:a5:96:23:ac:e9:e2:bc:e6:a0:
                    2b:8c:75:08:2e:f3:a2:45:5e:18:7a:25:87:e5:0d:
                    8a:8a:8d:0e:4e:8d:32:78:80:09:aa:06:3d:90:06:
                    c4:86:5d:34:7a:67:51:7f:a9:5e:41:14:42:f7:63:
                    b4:09:35:b7:c1:a7:4e:e7:42:70:2f:ba:5c:0f:67:
                    15:fd:a1:62:29:f7:21:48:e3:ff:4b:c7:11:a9:10:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:A1:E2:BC:66:24:13:AB:0E:8E:29:02:42:7C:A1:B4:29:CE:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e127b6e7-5d7d-4411-adae-92d7eab040ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e127b6e7-5d7d-4411-adae-92d7eab040ef/e25e5ef58601a15daf52d8890b9556720123c94e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.204.0/22
                IPv6:
                  2806:282::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265509
                  270136
                  270236

    Signature Algorithm: sha256WithRSAEncryption
         b2:79:44:f1:8c:08:bc:70:4d:bb:fe:4e:48:af:46:7e:a0:f6:
         24:51:98:44:55:c8:85:a1:63:75:9b:90:31:0e:a8:80:e7:02:
         08:fc:62:dd:e8:a4:0c:57:66:fd:91:30:93:65:08:8d:d4:a2:
         a1:d4:14:9d:cb:13:ff:c2:97:ab:19:5b:99:02:f4:78:eb:ab:
         ca:2d:fc:d3:82:bd:b3:a5:cc:9e:ba:60:0e:f0:9b:fe:d8:be:
         25:01:76:8e:26:75:47:da:46:bc:41:83:86:ab:fc:1d:27:13:
         f7:7d:9d:89:f8:a5:02:94:91:98:59:4a:13:f0:3f:39:2a:35:
         13:50:20:bb:08:7f:7c:23:f0:4a:b9:97:e8:41:3b:fe:9f:de:
         2f:a5:9c:6c:48:e1:4f:fc:b1:93:08:7a:c3:88:e0:99:9c:72:
         33:9f:9d:f8:98:a5:70:e6:1f:3b:83:33:bf:19:02:e6:25:b9:
         be:67:a4:03:f4:74:79:be:f8:3e:b2:b4:dd:4a:20:8b:69:38:
         ae:fa:24:f1:14:85:a2:ae:49:80:5d:8b:79:ec:c2:6f:90:07:
         30:b8:f6:6b:3e:a0:40:e1:5f:74:07:b6:2c:fb:f2:af:d9:dc:
         a7:6d:02:07:8f:6d:ea:c6:29:47:18:23:78:04:1c:1e:bc:d6:
         1d:b3:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----