Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer
File:                     1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer (raw, json)
Hash identifier:          qVY+F0z/uXi0uQLTkoGEsEU2z8Bsfv2w/VgMvvtNOfw=
Subject key identifier:   D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010174E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 Mar 2020 14:10:15 +0000
Certificate not after:    Tue 17 Dec 2024 14:30:29 +0000
Subordinate resources:    AS: 269949
                          IP: 190.83.124.0/22
                          IP: 2803:eae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16872680 (0x10174e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 24 14:10:15 2020 GMT
            Not After : Dec 17 14:30:29 2024 GMT
        Subject: CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:b7:f9:9c:e0:fb:dd:aa:60:df:83:c1:35:
                    dc:bd:01:74:8f:15:c3:7e:37:a4:b3:f1:30:f6:37:
                    da:12:b9:cd:da:36:4f:7f:71:b1:7a:48:b1:a3:2d:
                    f5:87:bd:b4:35:01:82:e0:7e:fa:72:d3:8f:c0:90:
                    58:da:b9:a2:a5:a4:80:9d:39:71:12:f6:4a:27:2a:
                    8e:99:38:b2:00:a8:ea:56:1f:77:99:81:ba:d2:a0:
                    ae:78:92:cb:2e:12:84:1c:64:f9:55:e0:1e:d0:fe:
                    7c:15:7e:79:3d:18:44:ad:23:e7:0f:34:49:80:5e:
                    14:60:f7:54:06:26:46:ea:8e:85:0e:68:46:ab:35:
                    f7:85:f6:45:ff:49:a3:e5:a5:e2:20:20:6b:55:a7:
                    fc:65:36:70:58:14:cf:d0:3c:3c:f9:41:7b:ec:04:
                    a1:06:8a:d1:97:35:81:a6:58:09:85:c4:82:7b:4f:
                    0b:37:f3:f8:e5:bc:25:56:f4:88:31:e7:14:a2:4a:
                    cc:2c:ee:39:f5:c5:e7:f8:6d:0b:54:fc:5d:45:43:
                    e9:88:d5:d8:d6:2b:42:aa:f7:9d:e2:ca:4e:84:99:
                    02:61:f0:50:bd:d8:78:74:70:81:b4:1b:4d:7e:cf:
                    50:a2:df:0b:6d:12:4a:eb:26:91:d4:6a:55:4f:e7:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.124.0/22
                IPv6:
                  2803:eae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269949

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:27:69:e9:11:34:c2:a2:62:e7:2a:3e:63:67:23:a4:50:
         f9:c0:c1:c9:5d:2c:5f:b9:ba:a9:0e:29:26:41:23:e1:e9:7f:
         23:d7:3d:53:de:fd:f0:5a:c1:d1:6b:8e:d3:fc:f8:ef:5b:87:
         51:72:db:c5:76:38:4a:ef:59:93:32:f3:69:1b:28:a8:e7:ff:
         15:8c:7b:fb:88:72:43:55:21:cf:0f:70:2f:14:7c:98:b7:20:
         26:1b:b6:48:8a:04:bb:19:a1:64:96:90:3d:11:f5:83:be:ec:
         ae:75:a1:bf:c5:b1:60:4c:5b:dd:05:dc:1b:c7:37:07:05:c6:
         95:67:5f:fb:7c:bd:b2:82:c3:75:64:08:9e:4b:ef:c3:2a:7f:
         26:80:43:bd:14:1b:f5:46:bf:9d:65:9b:63:f5:71:ac:ce:dc:
         84:2f:92:73:4c:03:9e:99:67:63:81:3f:db:d1:17:ac:0a:f9:
         31:fa:b8:f0:fe:f8:c5:50:a7:21:e4:c7:f5:cd:c2:dd:10:45:
         14:ff:db:21:e7:fd:87:6c:27:f2:31:3a:49:dc:de:ad:f4:a1:
         63:69:32:5e:20:c9:96:00:32:af:fa:47:ee:23:f9:f0:c2:36:
         9b:63:36:6b:c4:51:1f:32:62:5f:c1:1a:09:d3:de:61:10:5a:
         cb:1c:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----