Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e559225476bc467cb73e1777186dbca1caa93294.cer
File:                     e559225476bc467cb73e1777186dbca1caa93294.cer (raw, json)
Hash identifier:          l3tMyvzUScAdWKlCLRQAU092uUI6mHQJkgYZfhMm0Hc=
Subject key identifier:   02:83:F1:D6:F5:67:C1:2B:26:7F:1F:D2:6C:4D:F6:D4:8E:B3:AB:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6B125
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/e559225476bc467cb73e1777186dbca1caa93294.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Feb 2020 03:18:54 +0000
Certificate not after:    Thu 07 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 269934
                          IP: 45.190.13.0/24
                          IP: 190.83.2.0/23
                          IP: 2803:4ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14070053 (0xd6b125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 03:18:54 2020 GMT
            Not After : Dec  7 05:00:00 2023 GMT
        Subject: CN=e559225476bc467cb73e1777186dbca1caa93294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:87:88:f7:e1:69:6a:3a:3e:6d:a9:31:5f:
                    79:96:c6:ca:85:fa:ae:34:48:cb:5e:8b:16:51:fd:
                    7a:c4:13:b5:9e:b4:6d:15:68:9a:cd:d1:49:4f:55:
                    b1:4f:ac:88:75:bd:f8:b8:8e:0e:a1:af:e1:33:b2:
                    7c:b9:ed:61:88:62:34:0e:c2:f0:b9:91:3f:2b:ff:
                    09:c0:b9:1d:bc:32:7c:d9:43:71:09:69:be:0c:43:
                    4b:38:28:14:b1:a2:6b:96:30:fc:99:60:91:9e:e9:
                    36:8d:f5:a9:1c:ee:b9:7a:0d:28:64:7c:48:81:58:
                    4f:89:ba:8e:08:88:63:4e:71:0d:64:f2:47:f8:46:
                    6b:b6:1c:cf:0b:15:19:43:c2:70:09:9a:b2:d4:d8:
                    5a:6b:cf:21:b1:11:f5:46:0b:0d:e8:90:3c:4a:1a:
                    33:6b:ce:73:2c:58:78:80:d4:96:59:66:f4:eb:fd:
                    c1:e9:48:46:f7:1f:27:5c:c5:e3:0a:f2:d8:57:d9:
                    9e:9d:e7:45:1a:f0:3a:a4:ab:ed:89:50:d5:f1:5e:
                    65:93:ca:da:b7:3a:1a:dd:68:e6:65:36:33:7e:05:
                    be:44:bd:3b:ce:0e:e4:ee:f2:db:8f:7c:f8:10:4d:
                    c0:9c:44:a9:6c:de:32:50:84:7b:10:80:43:2e:43:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:83:F1:D6:F5:67:C1:2B:26:7F:1F:D2:6C:4D:F6:D4:8E:B3:AB:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/e559225476bc467cb73e1777186dbca1caa93294.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.13.0/24
                  190.83.2.0/23
                IPv6:
                  2803:4ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269934

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:3b:fe:11:6f:0e:67:b1:a0:24:0a:8b:78:f2:90:96:16:
         7f:fe:e5:98:1c:e9:f1:22:0e:d4:98:bb:d2:d3:ba:c1:7e:d5:
         48:94:85:f8:62:f7:96:c1:53:0f:d0:9d:16:73:44:9c:9e:df:
         20:57:0b:8f:fe:d4:32:f6:84:b6:26:ac:32:1c:51:23:b3:ad:
         ce:92:52:e3:8a:6f:ee:3e:6a:9b:98:c9:68:9b:a0:ba:0e:e0:
         f4:98:f0:c3:9f:61:85:df:a1:27:4f:d4:ee:9f:d3:0b:d5:79:
         1f:86:93:b3:73:21:ca:e3:41:30:bd:78:9c:dd:0e:31:c9:df:
         13:54:40:07:ed:b5:7b:1a:c7:c3:96:03:57:8f:da:6c:e1:c2:
         99:ce:d0:f2:7e:2d:b3:c1:16:91:43:9e:57:c5:dd:58:9d:e0:
         3f:d5:c3:b0:fe:1d:8e:52:e0:29:f9:5b:8c:07:e0:ac:69:e5:
         60:93:b1:0a:82:a2:cb:91:8e:ea:11:2e:8e:ac:8f:c8:9a:a7:
         e5:7b:7d:81:3d:23:5e:4f:9b:16:49:3f:6c:c3:f0:6a:11:87:
         0a:98:1e:8e:98:0d:6a:b5:4e:68:31:c7:8c:54:05:a1:0b:21:
         08:fa:5b:ce:dd:de:fb:25:4d:98:80:d8:74:10:be:b6:08:24:
         eb:a2:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----