Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer
File:                     de0d914e3acec8ecbafe212675f0227f286f21e8.cer (raw, json)
Hash identifier:          J9QbkBdKNIrhItWQfN4J71bwhXQGf3cQgpt0JsjgoUM=
Subject key identifier:   E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01030AC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 May 2019 21:05:51 +0000
Certificate not after:    Mon 06 Jan 2025 20:23:10 +0000
Subordinate resources:    AS: 267787
                          IP: 45.171.160.0/22
                          IP: 2803:4fa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16976579 (0x1030ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  1 21:05:51 2019 GMT
            Not After : Jan  6 20:23:10 2025 GMT
        Subject: CN=de0d914e3acec8ecbafe212675f0227f286f21e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:83:49:c6:f2:99:fe:4e:59:ad:6c:78:34:
                    80:1a:38:9c:d9:69:a2:5b:8f:42:d8:a0:af:03:79:
                    50:92:84:30:77:58:1f:2e:b7:d5:1f:b0:b5:92:af:
                    90:ec:f6:37:8b:25:a7:f8:ef:b6:a7:4c:13:a3:63:
                    db:d9:aa:47:f4:64:05:67:d1:db:3f:1d:ea:94:16:
                    e6:90:24:c1:a3:08:66:2c:d4:17:9d:a5:33:fd:01:
                    2c:2a:ef:50:e9:6c:c0:4f:a7:ca:ae:68:1f:8a:f8:
                    64:12:9c:3d:7a:98:80:88:45:0e:29:f6:48:dc:f5:
                    63:ad:f6:83:4d:ea:55:da:0d:c5:36:0f:3c:78:a0:
                    c0:80:e6:70:0d:8c:80:6a:f1:66:0c:c3:92:a3:2f:
                    e8:b8:89:b6:a6:07:d6:cd:11:84:1e:61:75:47:ea:
                    d5:7f:7f:17:77:b1:93:49:1f:ab:2f:cb:f3:60:ef:
                    3e:85:90:1e:82:99:88:7d:bc:66:70:ae:4b:74:ac:
                    b8:41:e7:b1:61:26:e8:2d:7a:92:38:67:bf:c5:ea:
                    9c:24:c6:01:d1:fe:91:36:a5:9f:b8:dd:97:7a:9f:
                    40:3a:76:0d:06:7a:4e:f4:40:f7:23:02:c0:39:7d:
                    4d:74:5f:87:21:f5:2b:63:a7:d6:79:b4:74:79:10:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.160.0/22
                IPv6:
                  2803:4fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267787

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:39:49:76:5e:47:1a:1b:ba:ff:4c:9d:36:68:7c:f3:90:
         5e:32:0a:f4:6e:af:13:bd:a1:d8:b5:e7:47:88:7e:d9:29:5a:
         4e:c2:80:ef:31:69:dd:d0:f1:86:0c:ce:fe:2e:b8:01:ff:6f:
         8d:96:5a:e0:3d:9b:79:35:08:0e:38:25:4d:ec:0c:f4:27:75:
         1a:c1:8a:20:2b:63:80:c2:45:2b:c3:04:54:3a:57:d6:14:e6:
         d5:21:46:b8:96:0a:c1:e0:bd:cf:44:09:bf:d1:c7:68:9a:31:
         f6:f1:02:e1:6a:37:b0:71:c2:f7:3d:a8:3e:ec:b7:14:15:3e:
         8e:8c:df:2f:fa:17:9b:da:b9:d9:59:e3:94:73:5a:97:e2:66:
         4a:63:82:f4:92:eb:e5:07:d8:b8:29:b6:7c:3d:cc:e4:86:30:
         d8:96:bb:c9:9c:d6:e1:d3:44:18:31:25:be:08:87:9e:d0:49:
         e0:47:c6:f6:ec:61:3e:b3:b7:c6:b6:bb:30:54:cd:06:11:68:
         f2:ba:c1:0d:f5:05:d0:16:26:5d:a4:72:40:77:03:56:f7:a9:
         ad:2a:e4:08:79:86:05:1c:1d:bf:bd:c0:8e:03:b8:30:91:a8:
         d3:49:bc:ff:57:79:ec:c4:96:7f:f2:e4:00:b0:2c:b4:21:45:
         c6:41:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----