Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
File:                     eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer (raw, json)
Hash identifier:          qlkJguMztPJG3/roxUf/nN34iWyrk+0SJvNk00oXUKQ=
Subject key identifier:   08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB50F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Oct 2019 20:17:01 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 4270
                          IP: 170.210.0.0/16
                          IP: 2800:110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16470258 (0xfb50f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 20:17:01 2019 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:7d:b2:e2:17:b0:fa:26:d6:f7:a4:b2:34:
                    f0:87:e6:eb:b6:f8:1a:98:e2:61:11:b7:ef:f3:ae:
                    70:4c:31:b8:19:60:a0:85:70:dd:94:9c:b5:dd:e5:
                    83:6a:3c:83:94:f4:6d:73:25:73:22:38:82:f2:e2:
                    61:e4:77:a9:76:8a:fa:5d:d2:ac:da:7b:8f:f8:28:
                    a9:7f:b1:be:40:50:70:4d:54:77:b9:ea:5c:35:a7:
                    82:cc:ec:00:93:e7:26:c4:e3:32:5f:53:5b:29:6f:
                    1e:b6:ba:5c:8b:7c:43:23:2a:a8:97:d9:3d:07:1a:
                    8a:22:c0:96:bb:78:d0:5d:40:45:b9:4d:9c:c3:06:
                    0b:e8:4f:51:07:29:57:2d:1a:8b:95:62:42:e5:dd:
                    46:4a:38:6d:a3:c5:5d:68:a3:9b:ff:b7:6c:3a:a6:
                    c9:3c:82:5a:2e:69:2f:64:3a:9b:4b:5b:3a:ff:04:
                    7f:de:79:45:b7:68:8d:71:1c:ae:d9:b7:84:a6:60:
                    b8:41:09:0c:98:f0:02:9c:69:96:23:9b:ec:59:9b:
                    18:80:41:ad:94:af:c3:d0:fe:ad:a6:26:4f:3c:ce:
                    42:a8:52:24:48:45:aa:81:6a:56:a5:83:5e:23:78:
                    1e:fe:5e:2d:89:0c:98:88:e2:55:c4:72:74:d9:80:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.0.0/16
                IPv6:
                  2800:110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4270

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:8c:91:7c:af:86:c6:6a:50:8f:bd:1e:41:15:93:5b:3f:
         3d:17:78:78:9e:30:0e:5c:6f:2c:3d:37:3e:a6:6b:2f:5b:69:
         f8:71:8b:2e:31:86:06:8f:fc:3d:a5:9f:87:6c:3a:34:df:3f:
         b9:a8:a6:e7:39:5c:a1:a7:66:84:b8:14:a9:b6:dd:5a:db:84:
         af:f7:29:71:d0:cd:46:6b:8b:48:f6:ff:f1:47:4d:4a:1e:a0:
         57:b5:11:cf:d5:43:6e:67:4b:9a:b6:60:7c:19:4c:59:79:95:
         b5:aa:9e:74:13:35:6e:17:17:67:54:e6:82:47:28:e6:d5:de:
         08:4a:4c:f2:cb:18:aa:84:ee:e9:6f:ef:ed:70:e4:5e:44:96:
         2e:32:25:8e:8d:19:16:f1:6c:52:12:42:63:2e:fb:05:ec:3d:
         e8:2a:ae:b1:d0:c7:b4:7c:8a:d9:d0:47:52:7e:b3:5c:7c:3e:
         01:e9:b3:55:83:54:25:d7:3f:08:82:59:06:bb:50:6c:aa:22:
         12:55:a3:c7:41:96:cf:95:d0:c7:b8:7a:b2:9b:c1:fc:0c:2a:
         67:40:b0:4e:d4:a3:d4:01:df:e8:1f:af:16:a7:e4:86:5f:ab:
         fc:c6:2c:01:21:8d:7a:12:49:d8:d8:17:f4:9c:dd:9c:12:13:
         a6:b1:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----