Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8645a0b0079c3b9d770e0aec383c5034d164eae4.cer
File:                     8645a0b0079c3b9d770e0aec383c5034d164eae4.cer (raw, json)
Hash identifier:          M8chcevQeXnRtypBtkTWEilnEGILNNhVQANzqdkxydE=
Subject key identifier:   2A:14:60:F7:0E:31:4C:34:17:37:3F:7F:40:88:C0:94:FE:05:69:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE2F9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/8645a0b0079c3b9d770e0aec383c5034d164eae4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 18 Jul 2019 21:08:42 +0000
Certificate not after:    Tue 26 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 27887
                          IP: 179.43.192.0/18
                          IP: 186.1.64.0/18
                          IP: 186.33.64.0/18
                          IP: 190.122.96.0/19
                          IP: 200.26.168.0/21
                          IP: 2803:1400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16658335 (0xfe2f9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 21:08:42 2019 GMT
            Not After : Nov 26 04:00:00 2024 GMT
        Subject: CN=8645a0b0079c3b9d770e0aec383c5034d164eae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:a3:1e:f4:cb:99:ca:65:94:ad:98:e1:3f:
                    09:82:35:eb:47:8f:92:8f:78:a9:69:6c:20:f6:e3:
                    ed:af:36:5f:00:02:50:c5:b2:05:43:a7:e3:d1:13:
                    9c:c4:46:3c:4a:31:59:04:6d:49:92:23:ad:d2:b4:
                    b3:49:37:bc:25:70:8b:40:bd:5d:12:11:3d:c0:79:
                    37:74:dc:51:35:54:f4:28:bf:c0:ea:5a:5a:e6:e6:
                    41:9b:3f:02:f7:46:87:5a:bc:c1:bd:2d:73:bd:aa:
                    39:bc:bf:7e:ce:0f:4e:c9:4e:cc:3b:e9:00:e9:f7:
                    58:86:8e:ec:f2:01:32:2d:f5:5a:37:b0:f9:5b:ac:
                    92:01:0c:8d:4f:46:1a:77:9a:bd:be:b8:36:dd:fe:
                    51:fa:e3:70:2c:c5:92:51:7b:d3:75:37:b6:88:48:
                    e0:6e:f9:bd:08:a3:b8:5c:63:50:17:59:63:1c:97:
                    5c:e8:f3:8e:5e:98:33:72:d0:5f:7c:31:38:81:b7:
                    ee:a6:8a:16:56:0d:cb:27:ea:e2:c0:c2:5b:a6:d0:
                    22:25:92:19:17:ee:36:bf:93:6d:38:3b:51:92:68:
                    3f:bd:0e:ac:90:fc:04:b6:11:70:6e:bf:fb:c8:d1:
                    e9:c4:2a:dc:7a:68:4a:a5:73:cd:fb:a4:24:b6:f4:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:14:60:F7:0E:31:4C:34:17:37:3F:7F:40:88:C0:94:FE:05:69:1C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/8645a0b0079c3b9d770e0aec383c5034d164eae4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.192.0/18
                  186.1.64.0/18
                  186.33.64.0/18
                  190.122.96.0/19
                  200.26.168.0/21
                IPv6:
                  2803:1400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27887

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:7d:7f:39:af:84:19:85:2c:8c:6c:a8:cb:b2:91:34:6f:
         0e:89:22:c6:d6:c6:7b:5a:c8:77:70:36:54:64:e2:d4:c9:fe:
         7f:cc:a1:c4:c3:32:d3:ec:92:b1:bd:3f:67:48:6a:2d:db:c9:
         ec:68:e4:90:55:d1:2e:37:a6:3b:39:cc:ae:58:0a:7b:00:0a:
         d5:2b:c8:ee:cf:de:aa:5d:ea:c0:15:84:19:b7:cc:28:fe:d1:
         0b:c2:65:d1:6e:9a:b7:06:3c:18:1a:85:ff:bf:0e:63:d0:e3:
         55:60:7b:f7:76:a3:b0:5c:94:ec:78:6a:a1:0e:75:68:94:bc:
         19:70:ba:b0:1d:74:51:6a:d8:e0:df:b7:29:45:d9:cb:cb:a8:
         3a:69:f4:75:5a:c5:0a:02:f4:bf:3a:98:af:ad:29:a7:5b:ac:
         76:2b:0c:55:ea:cc:5b:50:40:4f:93:99:4b:7c:17:89:31:b2:
         f0:78:58:98:ac:9f:95:fb:68:9e:b1:0b:56:51:88:e7:6b:fb:
         ac:01:55:b7:2d:8c:b1:97:1b:4b:9a:82:ea:9d:09:eb:4c:ee:
         3a:48:47:f3:b9:39:e5:f0:6b:f5:7c:5a:22:d6:6b:95:49:98:
         00:ac:26:49:80:50:be:55:6c:b0:f6:f6:9e:65:23:f2:1c:bc:
         f5:b4:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----