Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecf201e9b0d7e19d0478597649217b6a3bdcccfc.cer
File:                     ecf201e9b0d7e19d0478597649217b6a3bdcccfc.cer (raw, json)
Hash identifier:          RFiJJR7NPoEtyfTbXi3W0/CsuQpvE08rjY2lTIfWwdM=
Subject key identifier:   8C:16:CA:F0:40:A5:1B:EF:04:7C:EE:09:BB:29:BF:4C:2F:11:49:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD98C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa8ed548-fc4e-4018-a3f8-43300af5eba0/ecf201e9b0d7e19d0478597649217b6a3bdcccfc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa8ed548-fc4e-4018-a3f8-43300af5eba0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2019 20:58:34 +0000
Certificate not after:    Sun 03 Mar 2024 20:43:14 +0000
Subordinate resources:    AS: 271865
                          IP: 190.105.156.0/22
                          IP: 2803:f410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14522568 (0xdd98c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 29 20:58:34 2019 GMT
            Not After : Mar  3 20:43:14 2024 GMT
        Subject: CN=ecf201e9b0d7e19d0478597649217b6a3bdcccfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:47:1e:8e:4b:0a:18:2d:05:e3:fc:17:7a:
                    dd:7a:7d:fb:97:90:9a:85:0b:0d:fb:5a:a1:d1:c6:
                    dd:f6:c1:a0:6d:99:b8:8e:38:07:84:f6:d3:a3:fc:
                    61:26:8e:66:6a:b3:f2:48:d3:bb:36:62:31:a5:8c:
                    c5:20:1e:61:9d:9c:eb:2e:8a:13:07:81:32:b5:32:
                    ff:56:e8:31:98:49:b3:2f:a1:af:46:0a:63:83:6d:
                    5f:65:42:c2:19:35:39:39:ca:9b:ce:b1:3d:20:c0:
                    d7:3a:04:bc:66:32:1e:62:48:9a:57:0f:db:50:55:
                    b2:f9:23:e2:c4:93:8d:81:e4:eb:bb:26:6d:50:81:
                    1f:a3:ca:04:98:c2:35:8f:16:f3:d6:76:b8:ae:86:
                    e7:84:e3:4a:1b:ac:da:8e:52:7d:ce:4b:81:54:82:
                    94:61:47:85:97:98:a3:d1:b5:66:4e:32:b2:b5:fc:
                    2c:2a:e9:42:de:25:c0:c3:4d:17:58:ab:98:51:5a:
                    46:29:00:ea:b9:61:69:c9:89:53:3e:6d:fe:13:b9:
                    30:e7:86:f7:f6:48:b5:58:c4:0e:4d:c1:5a:cd:32:
                    d5:8e:d1:fb:6e:d7:55:6b:78:67:05:e5:6c:b1:2d:
                    a2:ae:ed:39:87:21:0f:7f:fa:fa:c8:60:3b:2b:df:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:16:CA:F0:40:A5:1B:EF:04:7C:EE:09:BB:29:BF:4C:2F:11:49:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa8ed548-fc4e-4018-a3f8-43300af5eba0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa8ed548-fc4e-4018-a3f8-43300af5eba0/ecf201e9b0d7e19d0478597649217b6a3bdcccfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.156.0/22
                IPv6:
                  2803:f410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271865

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:35:c0:76:e4:45:f0:1c:22:29:49:5c:19:f4:af:e2:b8:
         91:51:6b:44:09:1d:24:aa:4e:b9:df:59:9d:17:94:09:fc:18:
         ae:aa:d9:04:cb:2a:ae:e9:2e:73:51:d8:f8:03:99:5f:ef:1e:
         44:d5:bc:11:e8:08:28:a8:55:bd:0a:17:02:cb:a1:b6:b1:8d:
         c0:8e:71:ed:bf:d0:e7:07:64:da:d1:9a:17:bb:58:bb:7b:2b:
         c4:02:16:fa:d1:8a:bb:3d:ad:d2:5c:0c:ad:0a:bb:83:02:d2:
         a3:ee:72:c7:c6:1c:f4:d8:a8:d5:1e:c2:7f:0f:59:8d:c1:94:
         b3:49:85:77:53:78:7c:03:62:75:58:00:fe:34:78:78:6c:69:
         6a:65:09:97:27:4f:95:68:cf:96:85:85:15:9f:00:ea:92:57:
         99:25:94:12:aa:90:97:c2:2b:af:ab:6a:05:ee:b4:8e:43:86:
         0c:7b:aa:9f:67:b4:17:37:96:c1:6a:ff:af:41:ff:b7:38:7f:
         8c:2e:e9:5f:b6:8e:c1:14:bd:2e:2d:a4:29:5a:69:64:a9:9d:
         16:bc:13:19:02:f4:7c:0c:b4:1c:39:b3:ad:69:42:24:96:17:
         4d:d1:e0:c0:e0:c9:0b:b2:02:fb:9c:0a:47:3e:a5:b9:be:26:
         04:f7:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----