Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e559225476bc467cb73e1777186dbca1caa93294.cer
File:                     e559225476bc467cb73e1777186dbca1caa93294.cer (raw, json)
Hash identifier:          yDhVh9soyZjGEaziwbnUo+sQF++b7kOO4ZTSSJTXBGY=
Subject key identifier:   02:83:F1:D6:F5:67:C1:2B:26:7F:1F:D2:6C:4D:F6:D4:8E:B3:AB:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01003570
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/e559225476bc467cb73e1777186dbca1caa93294.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Feb 2020 03:18:54 +0000
Certificate not after:    Sat 07 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 269934
                          IP: 45.190.13.0/24
                          IP: 190.83.2.0/23
                          IP: 2803:4ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16790896 (0x1003570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 03:18:54 2020 GMT
            Not After : Dec  7 05:00:00 2024 GMT
        Subject: CN=e559225476bc467cb73e1777186dbca1caa93294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:87:88:f7:e1:69:6a:3a:3e:6d:a9:31:5f:
                    79:96:c6:ca:85:fa:ae:34:48:cb:5e:8b:16:51:fd:
                    7a:c4:13:b5:9e:b4:6d:15:68:9a:cd:d1:49:4f:55:
                    b1:4f:ac:88:75:bd:f8:b8:8e:0e:a1:af:e1:33:b2:
                    7c:b9:ed:61:88:62:34:0e:c2:f0:b9:91:3f:2b:ff:
                    09:c0:b9:1d:bc:32:7c:d9:43:71:09:69:be:0c:43:
                    4b:38:28:14:b1:a2:6b:96:30:fc:99:60:91:9e:e9:
                    36:8d:f5:a9:1c:ee:b9:7a:0d:28:64:7c:48:81:58:
                    4f:89:ba:8e:08:88:63:4e:71:0d:64:f2:47:f8:46:
                    6b:b6:1c:cf:0b:15:19:43:c2:70:09:9a:b2:d4:d8:
                    5a:6b:cf:21:b1:11:f5:46:0b:0d:e8:90:3c:4a:1a:
                    33:6b:ce:73:2c:58:78:80:d4:96:59:66:f4:eb:fd:
                    c1:e9:48:46:f7:1f:27:5c:c5:e3:0a:f2:d8:57:d9:
                    9e:9d:e7:45:1a:f0:3a:a4:ab:ed:89:50:d5:f1:5e:
                    65:93:ca:da:b7:3a:1a:dd:68:e6:65:36:33:7e:05:
                    be:44:bd:3b:ce:0e:e4:ee:f2:db:8f:7c:f8:10:4d:
                    c0:9c:44:a9:6c:de:32:50:84:7b:10:80:43:2e:43:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:83:F1:D6:F5:67:C1:2B:26:7F:1F:D2:6C:4D:F6:D4:8E:B3:AB:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/e559225476bc467cb73e1777186dbca1caa93294.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.13.0/24
                  190.83.2.0/23
                IPv6:
                  2803:4ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269934

    Signature Algorithm: sha256WithRSAEncryption
         33:57:81:41:de:7e:83:fe:10:fb:a9:dd:d6:6c:60:16:39:88:
         5c:bb:03:94:29:92:eb:89:cf:31:ec:47:fd:af:60:1a:de:7f:
         0d:10:a4:27:f5:c2:a3:b2:89:e3:b7:6c:79:71:9a:2a:bc:0d:
         12:b0:36:d2:55:43:21:d4:56:e4:d8:6b:99:48:37:6a:0d:38:
         f5:a8:9d:95:99:bc:19:6f:04:3a:a8:e2:e2:39:75:0b:de:d2:
         54:88:47:9e:7f:f6:b1:50:fc:a1:f9:8c:0f:fb:34:ae:41:cb:
         52:1a:61:86:3a:d8:07:d2:85:8e:32:12:e1:79:fd:c7:27:9a:
         41:c1:95:82:e3:bc:2a:79:c3:4c:68:53:bf:5b:88:9c:c4:73:
         ad:e2:30:e6:5c:21:cb:17:e4:2b:ff:82:49:d1:b5:71:0e:ce:
         1c:b9:d7:68:35:94:fa:ab:17:c9:4f:7b:40:8e:47:d3:b4:a4:
         7c:7c:90:49:68:83:ca:80:ec:64:5e:48:9a:57:7c:0e:12:19:
         d2:ce:21:2f:09:c5:88:d9:98:cf:d8:d9:22:51:44:a0:ce:91:
         2c:62:cb:7e:28:e9:e6:48:d7:ec:d1:af:f0:ff:63:27:7c:f3:
         c5:11:1e:10:50:56:84:2e:63:46:83:a1:35:63:a7:89:ce:ac:
         be:fd:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----