Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f874de583b1a819b42bd42d47f01f80389f5d7aa.cer
File:                     f874de583b1a819b42bd42d47f01f80389f5d7aa.cer (raw, json)
Hash identifier:          q/0kmiVy0WPWQRMCeB1ow00Jb5M0h4EHzdbW7ViTB/s=
Subject key identifier:   58:9A:42:00:83:C5:DF:4C:B9:2F:34:4F:62:99:6E:B3:89:2F:07:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDA208
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/f874de583b1a819b42bd42d47f01f80389f5d7aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2019 19:38:53 +0000
Certificate not after:    Sun 14 Jul 2024 17:00:08 +0000
Subordinate resources:    AS: 265820
                          IP: 45.71.52.0/22
                          IP: 2801:18:b000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15573512 (0xeda208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 25 19:38:53 2019 GMT
            Not After : Jul 14 17:00:08 2024 GMT
        Subject: CN=f874de583b1a819b42bd42d47f01f80389f5d7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:0e:22:04:32:37:3d:3c:3e:d7:eb:96:d9:
                    a4:33:66:ff:87:47:a1:82:0e:df:a0:22:e6:a5:cd:
                    8a:01:db:3a:1d:73:5b:32:ad:2b:66:5f:ab:b1:6e:
                    08:c2:cc:e6:ca:44:20:77:33:3e:71:2f:0a:86:b4:
                    a6:c4:52:c3:82:8a:b0:4b:46:40:72:55:e2:4f:c2:
                    4a:ec:04:2c:2b:d3:04:2b:55:93:6b:01:e9:b6:7a:
                    5a:7e:f4:35:10:96:b9:58:40:6d:b2:45:ed:6b:bf:
                    8c:23:4f:af:40:83:f7:2e:d9:34:96:6d:52:a0:6f:
                    13:fa:45:96:a0:ac:ff:70:ae:ba:63:f6:c3:85:72:
                    d8:69:61:39:2d:8a:95:6f:e2:0b:40:47:d7:11:97:
                    e8:07:d9:1d:25:70:f4:df:ff:3a:9e:91:b4:4f:eb:
                    b4:3a:08:7a:6d:c9:28:83:33:5e:7e:a9:b7:59:b3:
                    21:81:01:33:e5:55:fd:6f:c9:90:1b:5e:95:90:2d:
                    0a:ed:95:ca:3d:d1:93:a2:65:c1:0a:88:dd:4f:ec:
                    7e:fc:36:87:db:30:85:0d:b8:51:55:ed:ac:40:d6:
                    08:1b:6c:80:ea:75:12:2e:52:07:d6:6d:30:66:f7:
                    dc:3e:60:a6:9c:9e:f8:f8:56:da:10:94:ea:1f:2a:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:42:00:83:C5:DF:4C:B9:2F:34:4F:62:99:6E:B3:89:2F:07:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/f874de583b1a819b42bd42d47f01f80389f5d7aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.52.0/22
                IPv6:
                  2801:18:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265820

    Signature Algorithm: sha256WithRSAEncryption
         82:77:b1:ea:6c:64:18:f4:b6:3e:42:a1:22:20:40:51:aa:17:
         4b:ea:09:11:85:c9:cc:4b:0c:ec:f6:f3:7f:51:82:a4:5c:62:
         59:43:56:aa:0f:83:cb:f8:1f:88:26:d2:1e:9e:8a:db:d2:58:
         ed:a9:a8:27:2a:ad:cc:d1:40:d9:10:6b:8d:de:5c:99:82:2c:
         7c:5d:de:1e:da:7a:7b:84:87:de:49:8e:24:c1:46:10:5d:f4:
         c2:cc:f6:b4:83:bb:0f:89:f8:b3:9b:7e:16:12:2b:cd:dd:a6:
         5d:9f:c9:36:74:ad:c5:06:16:d7:58:40:d9:51:7d:92:e3:9f:
         62:58:0a:76:ee:f5:ec:fe:d8:06:ec:61:2a:c8:3e:7c:86:96:
         a7:e5:0b:3e:8f:33:2d:a7:5a:b0:cf:89:cd:ce:6e:bb:ca:ca:
         20:ee:09:e4:b1:7d:c0:8f:0a:13:52:49:03:4e:13:03:0d:3e:
         ad:3d:a7:c3:b0:82:d5:29:fc:ca:34:9d:8d:ac:a0:76:de:9f:
         56:8c:cb:62:fb:44:ed:07:b3:21:ab:5f:9d:ef:76:ba:89:e0:
         2d:ec:07:73:aa:9b:91:a2:4c:40:28:f4:a4:07:25:6b:f4:a1:
         61:c7:69:ae:e9:c0:36:dc:b6:bb:29:a0:a6:90:12:93:17:d4:
         7d:c7:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----