Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer
File:                     e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer (raw, json)
Hash identifier:          e+/NIjGTTCLl+Xh+IKNwubJiMhG9AwgVpbudf8Pg0qY=
Subject key identifier:   E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01033AB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/e5542707278f94f915cf6c50f07f27b7ca4d3a19.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 Jul 2019 15:06:26 +0000
Certificate not after:    Wed 08 Jan 2025 18:21:17 +0000
Subordinate resources:    AS: 267791
                          IP: 45.172.176.0/23
                          IP: 2803:afa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16988850 (0x1033ab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 31 15:06:26 2019 GMT
            Not After : Jan  8 18:21:17 2025 GMT
        Subject: CN=e5542707278f94f915cf6c50f07f27b7ca4d3a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d0:36:89:07:4f:0e:ed:0b:f3:f8:20:28:ca:
                    70:c2:d5:9a:62:8d:fc:d5:78:2b:69:73:7a:d9:71:
                    06:6e:d8:38:b2:ad:ef:f1:5f:22:e3:e6:59:b0:6a:
                    5e:4b:b2:1f:9b:f1:d7:d8:65:54:89:ac:e4:89:f0:
                    84:35:2b:f9:b1:bf:09:16:6a:02:1b:20:c7:01:cb:
                    04:42:e4:52:d0:49:5d:3e:8d:0a:3d:9e:09:4e:45:
                    0c:75:d9:dd:57:71:f6:14:52:54:36:ee:9d:e8:17:
                    d2:07:37:30:4e:1e:f0:fc:e9:bd:38:35:11:06:15:
                    f6:76:ac:30:f8:96:dc:0a:9c:89:20:90:82:07:e7:
                    0a:72:ff:f8:25:18:92:c4:00:40:a3:7a:63:db:c9:
                    53:91:89:e4:9b:08:53:ae:7c:cd:01:09:2d:e9:55:
                    74:c2:61:8f:2b:4b:c3:d6:c8:07:a4:47:42:54:b2:
                    84:10:22:ca:35:41:36:ef:3a:9a:08:9a:59:dd:96:
                    3b:0f:f7:a5:ff:04:19:0c:23:d4:f5:a3:26:c5:b6:
                    75:1f:9c:75:8f:26:ed:4b:db:92:ce:4e:a4:b7:83:
                    61:dd:a8:c6:cd:54:c6:e8:5c:9c:bf:ca:cc:b6:b8:
                    c1:2f:0d:c3:86:4d:fd:c7:f1:70:49:65:37:36:ba:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/e5542707278f94f915cf6c50f07f27b7ca4d3a19.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.176.0/23
                IPv6:
                  2803:afa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267791

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:59:7e:ec:25:68:e8:c3:5f:81:1d:6b:fe:44:99:a6:87:
         84:b3:45:3d:59:ad:04:60:bd:6f:37:9d:a3:2a:4b:67:f2:28:
         5b:da:c0:28:35:1f:a5:bd:84:bc:a1:c1:3e:00:2d:d9:8d:f9:
         6e:55:44:92:e7:91:f9:45:f8:b0:c6:26:56:ae:d5:ff:8c:1e:
         2b:6e:c2:59:d8:e3:fe:0f:fa:de:12:62:4c:5a:91:e7:92:06:
         9b:72:fa:df:5d:d5:90:6f:20:9a:33:80:54:fd:98:9a:f9:b2:
         03:f6:99:56:4b:0d:48:c3:6f:06:b1:ba:da:b8:90:93:64:20:
         5a:99:60:d0:6e:49:54:61:f3:65:2f:28:fa:e3:d2:1c:14:4f:
         db:f2:3c:91:b3:a1:45:68:b8:5f:bd:17:90:dd:9b:81:8e:03:
         9a:20:0d:22:ee:95:e8:7e:d9:b3:df:9e:6d:fe:57:eb:75:60:
         02:e0:72:77:40:27:1b:eb:c3:1a:98:15:5d:b1:22:a8:31:b8:
         4d:c4:5e:30:6e:e2:12:01:62:2d:c5:43:b8:57:f1:ce:07:93:
         95:ac:0a:fc:03:db:0c:69:c9:3f:27:d1:16:e5:46:f3:74:18:
         f8:0a:86:0f:5b:83:82:6e:1a:a9:ab:99:f5:e7:69:49:38:16:
         57:e4:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----