Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer
File:                     ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer (raw, json)
Hash identifier:          7bBq/1yUsZHtreeemtHKCu+8qwVPHTG/EJNz43jlm2M=
Subject key identifier:   2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFAF76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 May 2019 22:01:52 +0000
Certificate not after:    Sat 30 Nov 2024 14:12:47 +0000
Subordinate resources:    AS: 267764
                          IP: 45.169.104.0/22
                          IP: 2803:1ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16756598 (0xffaf76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 22:01:52 2019 GMT
            Not After : Nov 30 14:12:47 2024 GMT
        Subject: CN=ac54f49fd3334b47a73d6d08bdfa334f4d159e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:ad:d9:e7:b4:e7:a5:4d:8c:50:c8:78:c0:
                    bd:c3:8f:9e:b0:20:7d:b6:d5:61:cc:e3:24:a7:40:
                    77:c0:51:27:f4:eb:44:7e:3d:50:8e:01:c6:1e:4f:
                    6d:90:5f:de:86:c5:c5:75:89:6f:f0:49:fb:ca:fc:
                    d0:21:eb:fd:c4:e0:64:e0:c5:cb:8c:52:62:cc:12:
                    73:52:8e:17:3d:6a:29:6d:e2:99:9a:d1:57:40:13:
                    63:f6:b2:f8:d2:db:65:4f:a8:c8:71:35:fe:83:61:
                    6c:45:16:e4:37:31:75:f6:ba:24:45:6d:f4:ac:db:
                    7c:b2:e8:30:8b:aa:20:49:9b:64:7e:f6:1f:2b:a2:
                    9e:f4:dc:7b:54:e6:2e:08:e6:97:08:bd:29:12:76:
                    fc:90:a4:ab:34:54:23:a1:83:a0:f0:b7:6d:09:aa:
                    8e:02:dc:9d:bd:bf:46:7a:4b:62:a8:06:f0:f6:ef:
                    cc:fd:04:b6:dd:1f:37:e0:71:77:5e:f1:a2:60:c4:
                    99:d5:a5:e0:aa:7c:85:e7:00:16:dd:de:27:06:ea:
                    ea:8d:b9:47:e6:48:d6:c1:68:8c:d4:73:a0:03:80:
                    45:56:81:c8:18:ed:d7:c9:1a:cb:8d:38:7a:90:d5:
                    bf:c2:71:4b:68:62:34:30:65:bb:0e:ec:50:7d:bc:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.104.0/22
                IPv6:
                  2803:1ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267764

    Signature Algorithm: sha256WithRSAEncryption
         24:da:f3:4b:51:0a:50:9a:9b:5c:cd:28:3d:89:80:2e:8e:3f:
         c5:da:52:72:61:ff:be:08:55:e5:49:f5:2b:1e:6a:73:bb:4c:
         27:73:d9:01:38:71:71:d5:f6:e7:ce:cf:32:40:a3:93:85:de:
         39:d4:da:22:e9:97:81:6e:42:20:88:7e:9c:a0:78:d8:86:ae:
         41:23:98:d8:c8:1d:61:30:04:ee:20:b1:b2:38:da:be:ce:41:
         c4:4c:51:6e:82:bc:d6:5d:6d:52:04:25:fe:e7:17:5b:fe:ea:
         ab:e1:a6:c5:d0:ed:ac:00:65:da:59:96:2e:79:f2:3e:0f:f7:
         f7:64:6b:2f:f8:03:d7:3f:dd:a1:41:c4:e2:ba:43:80:69:78:
         2f:8e:4c:86:0a:9a:57:1b:57:70:8c:28:61:5f:bd:94:ec:c8:
         89:ef:2a:7e:f0:e5:df:0a:e4:47:5d:5b:f7:62:4c:52:f9:88:
         a6:ae:f9:fc:89:a7:2d:4a:29:c5:ba:ba:36:3d:d1:69:de:3e:
         01:ba:c1:a5:4e:2f:d8:8a:4d:bc:bb:70:8a:3b:cf:e4:1c:11:
         52:fd:2c:84:fb:63:5a:d9:b2:16:19:b1:66:e7:5f:93:9f:bd:
         16:d4:58:48:87:fd:68:1d:83:c7:0b:d0:2a:28:72:04:ba:5c:
         e6:09:d0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----