Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
File:                     75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer (raw, json)
Hash identifier:          V46wU7wKkPhnVLoBsK9ZRAgnx0rVPZEFwX7t+IQsGMQ=
Subject key identifier:   5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103E9ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Aug 2020 18:05:56 +0000
Certificate not after:    Tue 14 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 19889
                          IP: 161.22.0.0/19
                          IP: 181.118.224.0/19
                          IP: 190.3.128.0/19
                          IP: 190.57.192.0/19
                          IP: 200.85.96.0/19
                          IP: 2800:6d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17033709 (0x103e9ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 26 18:05:56 2020 GMT
            Not After : Jan 14 14:00:00 2025 GMT
        Subject: CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:6f:b9:5e:78:8c:92:9c:ae:36:84:86:84:
                    7c:df:c0:c9:c1:13:9a:b6:db:e2:95:c8:6f:a9:ff:
                    62:00:a0:c2:3d:7e:86:63:e4:5a:b8:47:99:77:87:
                    d5:51:47:8c:c7:25:96:c8:2f:cf:1e:6f:eb:b5:d2:
                    d2:46:4a:15:e4:c2:00:0d:bd:fb:0e:c4:c7:b7:5c:
                    2e:53:c8:84:09:62:84:99:0e:10:e9:22:d6:84:cf:
                    b0:5c:a3:d2:96:36:2f:c7:23:31:61:17:26:d9:f4:
                    bc:41:6b:aa:b1:b0:ed:8b:a2:44:3d:fe:4d:41:1c:
                    06:36:d7:eb:53:e1:34:eb:13:98:35:2a:d8:b8:d3:
                    d9:5c:5b:39:08:18:46:31:36:24:41:bf:91:c2:c9:
                    3d:fd:c7:27:ba:ff:89:bf:b6:f7:92:54:b3:67:3b:
                    6d:a9:22:44:a7:a8:17:ee:35:78:96:21:9b:8a:8a:
                    23:52:09:48:3f:04:c6:81:5a:c3:00:8d:04:e2:09:
                    0c:f2:75:51:11:49:7f:83:ee:d5:88:13:eb:55:4d:
                    6b:54:03:49:54:74:64:d4:2d:87:0b:ef:07:7f:f8:
                    b0:29:63:0a:be:6c:f5:25:40:be:5a:24:fc:f7:4f:
                    69:a6:ee:af:6f:bf:fa:87:d6:81:78:81:29:33:02:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.0.0/19
                  181.118.224.0/19
                  190.3.128.0/19
                  190.57.192.0/19
                  200.85.96.0/19
                IPv6:
                  2800:6d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19889

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:e8:7e:e6:8b:d4:6a:b6:9e:30:d6:36:cd:69:07:63:ff:
         63:18:44:a2:8f:a6:b6:d6:b6:c2:aa:9f:ca:2d:c8:58:07:58:
         bc:37:ab:66:1c:ba:a0:19:a3:ef:7b:cb:da:bd:50:d3:83:26:
         20:b0:20:96:f6:68:d4:bd:e6:b1:c9:f0:28:3c:15:c9:6e:7c:
         af:cc:e5:70:17:4f:6d:8d:3a:ad:75:5a:c1:9c:0c:3c:46:44:
         24:fd:d3:8f:76:d2:9f:03:df:bd:f0:bf:0a:d9:a8:cd:37:a2:
         e3:5d:06:a7:3a:20:4f:44:f4:af:a9:8a:58:76:1d:07:01:8e:
         3d:54:50:19:6d:d8:7b:44:23:c2:0d:76:04:8d:cb:bb:f6:43:
         41:f0:43:71:5e:1b:72:b2:69:f6:b4:26:fc:f3:26:9f:3c:cf:
         81:db:80:00:ed:d1:19:b4:bb:92:1d:12:08:5f:6e:94:ed:f2:
         4f:64:e5:15:09:c5:5f:70:4f:a3:0e:3c:d9:88:93:75:08:dc:
         98:88:31:e9:12:60:d7:de:ca:03:3d:18:d4:60:b7:53:ba:6a:
         b6:d0:05:4d:c8:77:82:52:95:59:db:2b:39:65:b5:9f:21:bb:
         11:2a:82:5c:b5:ff:2d:d0:5e:70:64:32:6c:e7:c3:4b:3e:df:
         23:7d:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----