Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa9dda81081c9143eb886dec2ada8317a4d52e07.cer
File:                     fa9dda81081c9143eb886dec2ada8317a4d52e07.cer (raw, json)
Hash identifier:          gWbKY9SQVHlqkWEUJibIgpU+/w/dj8hQ35TqCLIq7Bo=
Subject key identifier:   E1:21:00:71:E7:35:21:2D:3D:D0:39:4D:FB:BB:53:0C:B3:FC:BF:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01001908
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/fa9dda81081c9143eb886dec2ada8317a4d52e07.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2019 14:09:28 +0000
Certificate not after:    Wed 04 Dec 2024 18:31:13 +0000
Subordinate resources:    AS: 267767
                          IP: 45.169.112.0/22
                          IP: 2803:dba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16783624 (0x1001908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 14:09:28 2019 GMT
            Not After : Dec  4 18:31:13 2024 GMT
        Subject: CN=fa9dda81081c9143eb886dec2ada8317a4d52e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a7:89:15:8f:30:73:59:ac:9c:50:b3:7e:e3:
                    ec:d6:6f:0b:4f:2d:5b:8b:5d:e2:76:03:56:a4:28:
                    1b:88:a2:3e:c4:49:3f:e6:d6:79:53:79:bd:ef:d0:
                    53:4d:e4:ec:f0:a2:80:41:15:87:a0:bd:25:66:a9:
                    17:8f:cf:7c:8e:97:78:83:d3:f4:e0:4d:ec:7a:de:
                    39:76:a4:e1:1e:21:c9:6d:1f:ed:83:e4:f5:0d:9c:
                    41:4f:ae:a3:f0:15:08:17:c2:3c:71:f9:63:57:f9:
                    6e:fa:09:b7:54:a7:66:32:2f:ad:bb:6a:db:80:b1:
                    f2:38:ab:fc:e7:68:3c:8e:9b:35:b5:af:3d:d1:fb:
                    31:8a:40:d6:aa:90:45:df:32:ec:d8:7e:9c:22:11:
                    25:27:12:10:01:8a:5f:ea:8a:c0:b0:fd:4f:6e:da:
                    0a:b0:51:ad:e5:d7:5e:81:ac:fb:86:68:bd:11:ca:
                    e6:36:e0:39:ec:a5:cf:f8:a0:7d:40:5b:7b:22:60:
                    12:8c:3f:72:58:c5:47:b6:53:5b:3b:62:8f:86:e2:
                    85:53:1c:74:ec:ec:16:24:9b:7d:81:3f:bc:67:ff:
                    44:36:2c:82:6e:45:88:63:41:86:f9:82:8e:3c:8a:
                    e0:78:1d:8f:65:2e:d8:fc:0a:7c:73:87:f0:8f:ee:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:21:00:71:E7:35:21:2D:3D:D0:39:4D:FB:BB:53:0C:B3:FC:BF:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ca21d2e3-bc05-4c17-b9d7-c140d6552515/fa9dda81081c9143eb886dec2ada8317a4d52e07.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.112.0/22
                IPv6:
                  2803:dba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267767

    Signature Algorithm: sha256WithRSAEncryption
         b9:d6:eb:db:1a:23:29:5a:94:77:63:54:e4:86:40:6c:29:b3:
         08:61:4e:73:8f:af:1a:b5:0c:a6:7e:f9:94:bb:f3:4e:4e:46:
         02:c2:e0:b8:97:b7:1c:dd:a3:ac:c7:db:16:46:12:2f:98:2b:
         a8:bf:96:ae:9e:2f:61:02:d0:57:a2:92:79:9b:12:3a:31:d7:
         b7:ce:02:9c:50:20:b3:f6:5d:a9:7c:6b:61:95:13:d9:fc:8f:
         d9:46:83:e7:d4:b3:25:f0:0f:18:11:d3:bc:af:50:1b:63:17:
         90:1d:6c:e3:b2:ec:71:e5:a2:1c:d1:81:9d:df:b6:3c:98:4d:
         c8:59:9b:f2:5e:47:23:c1:36:31:bb:65:e1:e5:7f:70:dc:79:
         7e:cd:d1:49:b4:f8:74:39:ce:a8:f1:d0:4b:42:2e:ab:c5:bb:
         80:75:d3:41:fa:67:f5:09:1f:73:64:e3:d2:9d:44:27:6b:83:
         be:53:e2:eb:91:3c:1f:76:36:11:af:fa:d7:e4:d8:b8:76:f5:
         97:a4:19:2b:44:f8:50:a0:5a:9f:0c:63:28:d9:6e:0e:cd:04:
         a7:51:37:b1:65:54:d0:7c:be:9f:41:ba:6a:3c:8d:8e:46:f7:
         28:92:4c:a9:b4:92:96:e6:be:87:2c:1d:bf:29:b8:a2:3f:de:
         b1:04:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----