Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.cer
File:                     01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.cer (raw, json)
Hash identifier:          PcEOtW/rj+F1qcbO5YFRtavi3LFPjihOf588YSntJ7U=
Subject key identifier:   90:79:F9:B1:64:5C:04:00:B4:CE:78:CA:A8:8A:34:15:33:86:B1:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7F14E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Sep 2018 18:49:22 +0000
Certificate not after:    Sun 24 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 265661
                          IP: 45.4.252.0/22
                          IP: 2803:f6c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14152014 (0xd7f14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 18:49:22 2018 GMT
            Not After : Dec 24 05:00:00 2023 GMT
        Subject: CN=01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:c3:2d:64:23:89:74:e4:3f:98:f9:11:70:
                    5f:a5:96:33:3b:2f:f4:3d:75:56:0c:fc:ba:23:85:
                    c3:1b:34:72:e7:ff:a6:1a:6b:aa:fe:96:3b:2f:bf:
                    d1:d3:43:25:dc:d4:06:1b:a6:a9:2b:2a:2a:00:40:
                    85:23:d5:a6:b8:8a:ef:35:51:f1:e4:34:7e:ab:85:
                    7b:7b:ab:6f:09:b3:e3:48:3e:96:e8:e3:1d:96:07:
                    24:19:fa:b7:26:6a:dc:dd:e3:53:6b:49:12:51:02:
                    66:ba:49:76:35:38:77:29:6a:5a:c7:4b:f6:5b:79:
                    b2:14:0a:bc:ba:fc:f4:90:d9:c5:91:16:f4:da:90:
                    eb:68:d2:8f:da:75:f0:ac:7d:c1:a4:e3:64:9b:c5:
                    b2:f0:41:6b:7f:19:c7:ac:1a:2c:8d:9c:7f:8c:1a:
                    0b:72:ff:53:24:b1:9d:7b:7a:b8:03:b0:e6:fc:71:
                    0c:69:de:23:97:91:5a:1e:3b:af:42:fb:ef:54:66:
                    f1:db:50:6d:0a:7c:9c:e7:d9:f8:7a:68:09:b9:78:
                    2c:a7:1a:ae:f0:b9:05:de:6e:e2:d0:4f:3c:be:4d:
                    a5:69:48:71:d8:45:be:a1:e7:7d:70:b6:8c:1f:54:
                    9b:d1:ba:e5:10:eb:d5:af:e4:5f:f3:b3:2e:37:b9:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:79:F9:B1:64:5C:04:00:B4:CE:78:CA:A8:8A:34:15:33:86:B1:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.252.0/22
                IPv6:
                  2803:f6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265661

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:55:e7:73:41:23:82:ad:a5:84:fe:bc:26:a2:60:1d:d1:
         e1:12:89:b2:00:9e:38:7f:bd:ef:fe:dd:51:d8:ae:3a:51:ee:
         2b:4e:a0:33:e9:69:79:3f:ff:8f:9f:17:ff:75:b5:08:44:9b:
         d6:8f:9a:45:d0:ca:89:71:f9:2e:39:e6:26:cb:e2:00:0a:43:
         17:09:c6:a1:82:42:8e:bb:49:a3:27:50:c1:86:31:4b:1a:30:
         b4:63:d4:60:60:24:ac:0b:79:10:c7:41:41:59:28:09:6c:ce:
         4c:3f:7b:33:a0:8b:94:b4:89:8a:bd:13:56:2d:d6:78:44:a5:
         c6:75:a7:f9:53:98:fe:f9:97:1a:16:30:fb:80:8e:f7:92:c9:
         31:20:51:70:e1:fd:a0:38:8f:1c:a0:17:ef:74:59:1a:82:d1:
         ae:a6:eb:02:9f:4f:82:34:71:74:c9:75:e7:5d:fc:d7:37:0a:
         6b:cb:18:fe:7b:cf:51:ba:59:56:32:62:3d:cd:25:23:43:e3:
         0e:27:eb:72:b4:1a:31:19:2d:79:88:9c:32:6c:d6:96:17:1b:
         bd:62:96:39:41:e9:3a:e9:89:ea:47:a3:73:8d:ed:42:87:dd:
         d1:f7:00:5f:57:ee:dc:0e:17:18:3e:2c:e4:b5:ba:bb:04:1e:
         2a:98:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----