Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85310cb09e317af1a1a72943ec326837f291fc2.cer
File:                     f85310cb09e317af1a1a72943ec326837f291fc2.cer (raw, json)
Hash identifier:          yLKEM+4gyE1zBJBbIEZXW0VjFDY5A0p3Lt0ozDNqazQ=
Subject key identifier:   17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2C62A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Nov 2019 00:21:39 +0000
Certificate not after:    Sat 24 Aug 2024 19:27:16 +0000
Subordinate resources:    AS: 269855
                          IP: 45.187.48.0/22
                          IP: 2803:a760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15910442 (0xf2c62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 00:21:39 2019 GMT
            Not After : Aug 24 19:27:16 2024 GMT
        Subject: CN=f85310cb09e317af1a1a72943ec326837f291fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:34:57:d9:5d:00:7b:5b:f6:62:35:72:6b:
                    b6:36:42:18:99:8e:fb:47:f5:cf:bf:0f:95:0f:eb:
                    e6:65:f6:1f:f4:92:f4:b6:06:9c:e2:fd:bd:d7:9b:
                    15:1e:08:94:e1:13:b0:2e:87:f7:a4:18:6f:c5:37:
                    16:89:e0:19:a4:00:b4:bd:9d:eb:f6:cf:05:53:c7:
                    34:d0:15:73:e4:f2:5a:a0:89:7e:48:6c:4a:76:c1:
                    e9:8c:c8:11:9c:ee:e9:3e:87:60:08:5d:3f:db:f7:
                    02:45:ef:6e:b1:cb:40:5e:6e:f9:6a:f3:71:ca:12:
                    28:73:fb:21:89:e4:d0:86:c5:a4:a7:d9:e3:b2:06:
                    86:75:7b:44:84:a1:7c:90:d9:39:28:8f:68:c1:e4:
                    ea:d6:85:1c:fb:45:e8:dc:ad:65:90:fc:df:0a:3b:
                    5d:8d:e1:97:0b:92:0c:dd:a2:58:d3:4b:9d:ad:fa:
                    62:0b:8b:02:33:5e:b4:37:c7:9d:64:38:a6:fc:ce:
                    af:4e:47:b0:e8:e5:12:86:e2:b4:b2:bc:5f:67:21:
                    65:4f:33:62:c5:de:1f:60:ee:01:78:b1:3a:2f:3a:
                    5b:b7:93:25:31:c4:62:84:a6:05:67:25:b2:c2:ff:
                    9a:3d:a7:c8:1b:2d:84:a7:3d:5b:00:85:e8:6a:e1:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.48.0/22
                IPv6:
                  2803:a760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269855

    Signature Algorithm: sha256WithRSAEncryption
         bf:d0:d7:2b:cd:39:34:cd:1b:27:9e:e2:12:d0:5d:6d:eb:45:
         02:8e:7e:03:fe:af:f5:1d:15:50:6d:aa:fb:a0:ac:49:b8:99:
         6e:1a:1a:c2:b6:20:25:ae:7a:43:d6:4d:42:59:0b:01:36:72:
         5a:c2:95:2f:63:30:54:d0:7b:95:b6:66:7f:db:23:e5:ff:8e:
         b6:52:a2:60:ea:ac:a8:a4:7f:5b:c1:fd:ec:fb:05:42:16:f7:
         32:b5:d0:b8:dc:44:9b:c6:36:fb:3f:b9:4e:6e:21:66:83:05:
         87:77:0c:c0:d0:b3:1d:66:8f:f6:4d:c7:32:8b:29:28:5a:f2:
         59:8b:e0:d2:97:89:08:06:94:a8:ff:85:7a:34:bd:a4:0c:45:
         b8:4f:79:b9:4a:4c:59:8b:57:44:b2:84:2e:86:ff:eb:54:11:
         55:de:2f:77:04:6b:59:7b:ac:f6:e7:c2:f5:e5:b0:e6:be:1e:
         18:b9:72:63:8e:c4:c8:42:76:14:25:69:33:cc:86:0c:b2:20:
         39:44:9b:13:fa:2b:0e:c8:c4:d9:66:cf:80:2b:ce:fd:1f:3f:
         a8:58:09:31:b7:de:9a:9d:d0:45:13:5a:81:39:d9:1b:23:e7:
         c1:2c:d6:a5:92:00:74:22:af:12:b3:94:e9:16:4e:4b:04:dc:
         95:d9:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----