Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer
File:                     e968e7767f9eef64694a8a23c6caf72aa6d20432.cer (raw, json)
Hash identifier:          +u5noAdOOGEV8H9JDkVL4/z/D96N8cgAx2U7gwT/42M=
Subject key identifier:   40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F44394
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/e968e7767f9eef64694a8a23c6caf72aa6d20432.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Apr 2019 17:19:58 +0000
Certificate not after:    Sat 07 Sep 2024 18:36:18 +0000
Subordinate resources:    AS: 265867
                          IP: 45.225.70.0/23
                          IP: 45.225.74.0/24
                          IP: 2803:3620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16008084 (0xf44394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 29 17:19:58 2019 GMT
            Not After : Sep  7 18:36:18 2024 GMT
        Subject: CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:c6:2f:56:cd:1a:97:cf:1a:74:4b:34:a8:
                    33:05:75:5f:36:d6:4f:3b:c9:f3:2e:00:93:fb:f4:
                    ef:5d:67:91:8b:38:83:88:2f:1b:b5:d6:02:47:6e:
                    f6:72:bd:f8:65:8e:44:dc:03:a7:a4:a1:2a:64:04:
                    92:54:b6:b9:64:4d:c6:cb:d7:0d:e7:74:47:b5:0a:
                    88:a7:66:09:4a:9d:ce:f5:63:e0:70:66:a1:6f:6a:
                    6e:ae:09:6a:ee:b1:6d:bb:fb:34:1f:90:c8:51:02:
                    cd:09:cc:f1:fd:6f:f2:5f:b1:61:cd:bf:de:1a:62:
                    7b:e7:82:c0:16:48:0b:78:97:00:7e:68:6d:45:ff:
                    8d:b3:c5:15:b2:43:d4:e3:13:f7:0f:e2:7d:09:3a:
                    8b:53:1d:f2:7d:e4:f2:62:98:e9:6e:b0:3f:58:ec:
                    ca:82:ff:94:aa:28:2e:d5:1f:80:81:21:06:4d:35:
                    a4:6a:b9:39:e7:e0:73:74:47:b6:f7:69:c4:6f:f3:
                    80:46:b1:cf:0a:55:a5:2e:9f:f8:cc:e4:6b:7b:fb:
                    b2:42:17:a7:83:11:3b:bd:91:2d:8c:2a:48:ef:6c:
                    48:9e:03:53:cc:62:56:19:81:00:d1:05:07:14:31:
                    ef:13:3f:58:6a:5f:71:5e:d2:6c:3a:08:38:9f:0d:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/e968e7767f9eef64694a8a23c6caf72aa6d20432.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.70.0/23
                  45.225.74.0/24
                IPv6:
                  2803:3620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265867

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:cb:2c:d7:40:e4:e3:18:89:57:23:00:b8:59:7d:60:2b:
         cd:ce:be:c2:6d:4b:03:02:ad:7b:6a:68:da:97:b6:f8:f5:53:
         59:2d:90:34:e9:db:5b:ee:84:5f:1f:7a:a1:83:67:3e:97:83:
         8e:50:ae:23:21:fd:dc:2b:2f:a9:c7:f1:be:fb:88:50:f2:70:
         2a:aa:f0:cb:e4:f2:6f:2f:8f:a0:5f:b4:32:b3:1f:26:0f:22:
         5d:b8:c8:69:3e:76:b5:12:bb:0c:19:9e:36:b4:3e:40:88:bb:
         3f:de:e6:0c:1e:c7:a8:1c:ca:c3:f1:39:10:60:75:2b:1a:b9:
         1a:f6:77:53:a4:c4:1d:5c:ad:ae:32:f2:04:a7:ea:42:48:dc:
         29:39:ea:3c:08:c4:ce:26:91:09:dc:96:68:0f:69:fa:d6:7d:
         0f:c4:b7:df:56:46:1a:6d:be:62:1f:5d:ec:2f:6d:fe:e2:a0:
         bf:fb:60:fd:d7:83:22:48:0d:65:2c:e2:42:0f:53:62:39:c6:
         a2:9e:6d:19:90:e5:a1:3e:ee:b1:89:e4:2f:fe:94:74:39:44:
         17:d0:b4:3a:35:e3:24:05:20:b1:d3:3d:4a:ef:da:24:24:3e:
         5d:a6:9d:e0:7a:30:0f:1d:8a:fc:b4:85:2e:38:90:81:1f:e4:
         5d:d1:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----