Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
File:                     b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer (raw, json)
Hash identifier:          LroJyk1xQ6AqGVBKuA76WGARZVHTCGUmzE/Vx2no6kA=
Subject key identifier:   EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01019715
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 01 Sep 2019 23:01:27 +0000
Certificate not after:    Wed 18 Dec 2024 21:57:07 +0000
Subordinate resources:    AS: 267775
                          IP: 45.171.48.0/23
                          IP: 2803:67a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16881429 (0x1019715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 23:01:27 2019 GMT
            Not After : Dec 18 21:57:07 2024 GMT
        Subject: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:eb:6c:e6:b5:d3:49:55:fb:51:bd:d2:4c:
                    e9:f1:4b:f3:9a:8e:5b:09:29:7a:f7:a8:05:9b:61:
                    2f:7f:2a:ab:a4:86:66:99:54:b9:48:2c:f4:95:60:
                    7c:05:07:4d:67:92:6e:7a:ee:93:4e:fa:45:98:8b:
                    92:0a:4b:b8:9a:a9:ba:f6:27:35:32:f7:49:80:7e:
                    97:5d:f9:8a:c2:67:bb:ca:97:39:4f:c3:53:ec:c2:
                    b8:ed:67:c6:d6:fb:d6:2c:cf:1a:ae:08:ee:e1:c0:
                    10:78:6c:04:e4:99:c1:9d:7b:53:fb:8d:25:5b:a5:
                    15:2c:5b:71:3a:00:83:95:9b:de:23:cb:01:8c:fb:
                    03:be:63:48:0a:33:de:01:ab:bb:09:2b:e2:15:05:
                    e6:0f:ce:b7:58:5d:21:26:4e:94:3b:22:bd:29:8a:
                    9a:c8:be:81:90:28:4d:3d:f3:16:83:ca:e0:66:49:
                    59:1e:cb:27:da:70:57:52:42:8b:bf:6d:41:87:e7:
                    78:a9:61:f5:84:29:99:a6:a8:6b:19:cc:10:1e:b9:
                    c5:6e:9c:f6:20:e9:b1:c3:49:65:e6:7f:ec:e7:6f:
                    ad:b3:09:91:0e:06:15:fa:f0:ce:d4:70:a8:ed:de:
                    ad:01:fb:08:ed:31:a3:a6:eb:38:3d:62:ab:93:9c:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.48.0/23
                IPv6:
                  2803:67a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267775

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:4f:a8:f9:17:a0:cb:0f:49:2b:ac:35:fc:58:a3:64:09:
         cc:ae:b2:8b:17:45:bb:aa:81:55:7b:d9:27:45:63:27:ca:59:
         9c:a5:d7:d3:3f:5f:6c:ee:ec:27:65:16:8c:34:28:a1:6a:25:
         ea:03:21:08:a7:ee:a9:37:5d:22:24:6d:22:e7:37:1a:0e:08:
         c0:4d:6c:7a:c2:a2:14:85:8a:f1:d4:44:48:9f:99:df:6f:0b:
         11:00:c3:8b:52:57:16:f5:fb:70:7c:a6:b4:39:62:15:7d:ff:
         88:46:d9:31:d9:69:16:8e:29:fe:e9:a5:e8:6e:c8:4b:c1:16:
         bf:b6:43:a2:07:9e:b3:02:53:6f:f3:20:ab:9e:06:b3:0c:24:
         9f:1b:22:41:21:30:7e:bf:5b:f4:b8:d0:b6:38:08:25:69:f5:
         5c:f0:13:85:f8:1e:4f:ba:0d:72:c0:53:c4:0d:09:04:92:66:
         5a:99:e6:22:0e:bf:e5:30:d5:62:52:1c:56:ce:82:4a:fb:76:
         f7:c3:52:0a:5a:38:d2:7c:b3:8a:5d:87:01:34:c3:3a:46:5e:
         2f:98:31:f4:23:51:a8:29:71:16:34:5e:8f:3e:1b:28:63:e6:
         e9:75:5c:76:cf:ec:c2:23:20:d3:3c:46:0b:1f:9d:37:83:98:
         81:cb:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----