Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ccfe17e5178d2b172151d697f641cae961bbfea.cer
File:                     5ccfe17e5178d2b172151d697f641cae961bbfea.cer (raw, json)
Hash identifier:          1231RXIc9Ncp8wyLnyORg77nOTju2AXSbS89RIbPdic=
Subject key identifier:   3D:CC:C1:C0:89:62:FE:54:7D:47:B8:D6:7F:EE:74:01:CF:7A:0A:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101953D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/5ccfe17e5178d2b172151d697f641cae961bbfea.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2019 20:30:33 +0000
Certificate not after:    Wed 18 Dec 2024 20:44:27 +0000
Subordinate resources:    AS: 264707
                          IP: 168.121.80.0/22
                          IP: 2803:2d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16880957 (0x101953d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 20:30:33 2019 GMT
            Not After : Dec 18 20:44:27 2024 GMT
        Subject: CN=5ccfe17e5178d2b172151d697f641cae961bbfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:38:75:e6:ae:8b:ce:ef:b4:ad:01:b0:7e:
                    50:0d:67:94:ff:02:4c:e8:9a:5a:a5:9a:5a:06:9f:
                    2a:a6:3a:c2:08:0b:84:e2:4e:12:3b:e3:40:7c:10:
                    13:69:b9:c3:3d:f0:be:cb:60:de:63:b6:ba:be:a1:
                    68:f6:55:55:26:9f:8d:5e:cb:90:f1:5f:5a:14:24:
                    51:a4:d6:f5:1d:2d:14:cc:c3:75:04:8b:d6:1c:c0:
                    4c:47:80:ce:79:5f:6d:d8:8c:2c:d1:5b:00:3d:07:
                    61:f4:ec:b3:aa:cf:8e:d3:c4:b4:db:07:f3:29:15:
                    97:7e:c5:73:cb:84:01:03:49:e7:ba:fd:8d:4f:74:
                    ec:95:17:02:b6:82:ea:b6:fe:c0:8c:a6:dc:38:10:
                    28:19:c9:22:83:75:e8:07:15:94:7c:cb:5d:07:cb:
                    9e:5f:ad:09:4d:d5:43:d4:c8:97:96:83:18:ba:9e:
                    47:38:ed:de:d5:e1:37:a9:06:60:27:d6:50:bc:3c:
                    b1:d3:5b:93:2e:e5:58:a3:d3:95:ae:91:81:6f:02:
                    40:03:5e:70:98:2c:ec:71:a3:f9:a9:4d:49:e9:96:
                    f4:36:cb:51:1b:72:b5:8c:ae:35:3c:ba:8e:82:35:
                    ea:a2:1c:ff:cf:6b:b6:42:13:15:b2:37:6d:e6:2e:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CC:C1:C0:89:62:FE:54:7D:47:B8:D6:7F:EE:74:01:CF:7A:0A:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/5ccfe17e5178d2b172151d697f641cae961bbfea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.80.0/22
                IPv6:
                  2803:2d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264707

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:85:2f:ef:92:69:f5:0b:30:d2:9e:6d:ca:da:5a:4c:9c:
         2e:12:c5:50:81:70:9d:01:d2:c8:5a:8d:da:27:ce:01:a7:3f:
         11:e1:b2:d6:e3:f8:fb:4f:cb:57:ef:9e:0a:17:0b:52:b9:52:
         f1:a6:78:d2:6a:93:c8:f8:d5:b8:e4:c0:c4:54:6e:3f:f5:e6:
         8c:4f:9e:ad:43:21:0c:ac:34:d4:d4:5a:7e:dc:b7:55:a0:de:
         85:18:d0:bc:3d:2f:53:06:88:fb:80:99:27:0b:08:01:9c:ba:
         02:c0:eb:d4:02:f6:92:40:9e:bb:da:a0:a3:b7:e9:5c:79:8e:
         11:38:4c:db:f5:2a:d2:b7:91:a4:c1:3b:b5:0a:b5:51:bb:42:
         83:db:67:ff:0a:ac:a7:03:d5:e5:74:bd:c0:3b:0e:90:69:c3:
         74:06:93:e7:f7:10:d6:4c:f9:9b:af:04:82:3c:6d:94:ef:5e:
         01:85:44:2f:74:67:05:72:90:5f:77:0c:33:ba:63:d7:c6:b1:
         08:85:7b:ee:42:8b:c2:36:38:4a:2c:91:b4:a4:ec:30:9d:7a:
         a8:7c:b9:81:95:cd:ce:d2:4e:ca:8d:9d:a7:4a:34:b4:de:71:
         9e:aa:65:08:d1:47:53:8f:03:6a:87:de:c6:30:d0:b6:82:09:
         a5:53:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----