Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer
File:                     8e04677b51c6fee610279bb07461734e534b699e.cer (raw, json)
Hash identifier:          ShIRImtS8TKrfdKr+6rp2BfjSliOAlfPJasXgt5pXHc=
Subject key identifier:   5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102562C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Feb 2019 17:53:59 +0000
Certificate not after:    Fri 27 Dec 2024 17:18:20 +0000
Subordinate resources:    AS: 267782
                          IP: 45.171.132.0/22
                          IP: 2803:b7a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16930348 (0x102562c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 17:53:59 2019 GMT
            Not After : Dec 27 17:18:20 2024 GMT
        Subject: CN=8e04677b51c6fee610279bb07461734e534b699e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:08:40:e1:cb:07:64:1b:89:f8:b7:01:26:
                    65:42:1c:41:cf:6e:1f:ae:80:57:54:6b:87:5d:14:
                    1a:30:64:56:24:f9:0c:9a:ba:56:d1:f0:46:16:64:
                    07:c6:85:ec:67:84:1b:0c:8d:23:20:49:65:21:00:
                    5c:f8:1d:d0:c0:85:9f:7b:9b:e4:78:bc:de:a2:e5:
                    22:94:22:4b:a8:93:38:3f:c4:00:e0:9a:43:a1:5d:
                    84:4c:ec:d1:9e:51:d0:bd:70:38:e9:7e:e7:f6:56:
                    c7:7f:9d:3c:34:b0:a5:36:42:69:67:b1:91:d4:d0:
                    fd:69:17:ec:66:98:de:4a:e4:48:cc:3b:19:7d:49:
                    72:32:70:77:28:fa:f5:c8:86:40:27:52:2e:68:df:
                    f3:fa:e4:5f:7a:71:fd:3e:c9:9e:bc:88:35:85:54:
                    af:48:ab:34:a9:b8:2f:ef:64:e1:d2:d6:1d:a2:c5:
                    fc:a9:71:1f:98:83:84:a3:72:e2:cd:77:4b:1f:eb:
                    90:1b:ac:90:cc:27:90:b4:3a:49:b5:99:5b:af:82:
                    66:e4:fb:4b:52:c9:09:31:29:ee:04:a2:5f:98:bd:
                    90:66:d2:d1:9a:28:d4:42:89:a7:ba:4c:b5:61:ae:
                    c0:6d:50:d8:9c:2b:97:25:2d:18:31:53:85:72:11:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.132.0/22
                IPv6:
                  2803:b7a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267782

    Signature Algorithm: sha256WithRSAEncryption
         bb:45:a7:ec:10:b6:ca:a6:46:2e:9f:57:8b:9b:d0:03:c6:4a:
         94:70:f3:9c:90:31:45:e2:23:ae:6f:32:e9:05:c1:ef:41:e7:
         a4:24:53:cc:3a:3b:38:46:f9:b8:1b:62:3c:4a:f9:1a:23:af:
         b5:59:3c:78:d4:74:eb:24:4c:e6:40:83:22:27:6c:65:2c:dd:
         83:13:70:ff:4f:7f:5a:ce:e5:ca:3c:0a:60:a7:53:00:d4:f3:
         cc:89:c6:8e:1d:ad:1f:ac:01:c2:17:57:e1:f8:ce:99:a9:9b:
         79:c1:db:de:fd:1c:59:a3:51:1b:28:58:e3:3a:0f:25:50:88:
         18:02:5a:73:37:b7:17:05:bc:e1:c6:f2:32:86:c5:b1:c0:03:
         3e:14:96:8f:41:7a:6c:c9:7f:db:97:85:df:db:7d:64:0c:c8:
         88:8b:fe:a7:b9:11:9c:7d:e7:00:ec:97:f0:0c:9e:95:f1:13:
         06:f6:63:b9:d4:60:fa:bd:3f:93:b5:ce:e8:a1:d9:88:93:b5:
         06:79:1d:5d:31:37:b3:80:7b:51:c6:bc:e5:4d:00:d7:9b:05:
         78:89:6b:10:49:1b:19:ca:d4:7f:68:70:a7:5d:25:2a:a6:a5:
         a5:72:0f:26:56:56:1c:58:51:f8:11:29:05:14:9e:4a:09:00:
         56:b4:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----