Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
File:                     0306af81c270a60bd7a6b440bc97d420322ebcb5.cer (raw, json)
Hash identifier:          3n0qXTH1T5cARcsOY80ZV4cS+q0ozqNohKcqWBLYxVc=
Subject key identifier:   4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF58A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Fri 22 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 263774
                          IP: 138.117.76.0/22
                          IP: 170.83.124.0/22
                          IP: 2803:440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14637219 (0xdf58a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Mar 22 06:00:00 2024 GMT
        Subject: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:2e:11:f0:f1:1a:0d:ed:19:5c:ff:a2:97:
                    af:ab:9f:73:76:6a:09:bc:65:61:64:9a:55:ba:55:
                    dd:bc:32:c7:6a:c0:d3:18:9f:8b:84:c5:0a:ab:9c:
                    44:b2:c5:4e:a4:5b:a4:55:b0:e3:7c:18:04:f7:4d:
                    0f:4f:f5:38:49:cc:f3:b9:58:45:9a:2a:f4:1f:98:
                    6f:1f:1a:34:e4:d0:47:03:1a:c8:14:64:99:75:15:
                    0c:b7:c7:3d:3b:6b:95:50:b2:b1:98:bf:65:94:93:
                    1a:56:57:b6:a3:c7:3f:49:91:ca:7c:ed:9d:85:70:
                    63:eb:78:16:e6:59:6e:c6:3e:f9:91:b2:03:9b:e9:
                    9e:07:3f:df:50:df:0c:bc:cc:6f:74:c0:ec:39:34:
                    dd:98:e5:86:05:58:87:10:35:b1:d7:d8:f4:29:63:
                    be:4d:a7:a1:1d:ec:1b:b4:8b:e3:8c:1c:27:9f:d5:
                    f2:20:5b:d1:62:02:32:67:d2:d1:bf:61:3a:50:30:
                    40:e7:70:d1:7a:ba:df:ef:a7:54:32:7a:8e:f1:34:
                    43:bb:a6:a9:e8:f8:2c:a9:40:9f:92:b8:dd:db:db:
                    e1:c6:0e:ee:62:a0:d2:68:07:3d:fe:ab:9e:58:72:
                    02:17:15:36:22:79:6d:39:31:19:ef:1b:d2:f1:5b:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.76.0/22
                  170.83.124.0/22
                IPv6:
                  2803:440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263774

    Signature Algorithm: sha256WithRSAEncryption
         6e:35:1e:b6:ae:4c:f6:78:4a:6b:28:72:e2:ed:e9:82:38:7d:
         13:28:c4:c8:85:dc:58:03:7b:07:9f:45:01:88:80:8f:e8:d4:
         a5:45:a0:b8:65:dc:08:2e:bc:48:b5:fe:1f:be:cd:07:b9:d7:
         6f:8e:24:93:9e:c8:3f:63:e0:de:29:fe:fb:11:f3:6b:54:83:
         16:59:c9:a0:d0:84:5e:14:65:88:7d:5c:80:a9:8c:f4:b3:81:
         32:63:2e:92:aa:42:5c:e0:bb:cf:11:6a:71:ca:d8:42:af:a7:
         1a:28:e9:62:1a:94:ea:46:b2:07:c1:15:81:93:c4:dd:8c:0f:
         2f:73:90:2e:7f:96:3a:05:3b:2b:f5:bc:b3:70:d6:bf:b1:c6:
         1e:13:b4:53:f6:1a:5f:9b:03:a9:04:89:8b:ae:98:ae:88:a1:
         f5:3a:41:63:01:99:55:2d:77:cd:26:3f:f9:fe:ae:2d:e8:9a:
         71:25:c5:ad:99:b2:e9:3b:a4:0b:e1:b3:89:a9:83:7e:a1:da:
         d1:d0:0a:45:d2:c5:df:6e:1a:bf:11:9f:21:12:4f:14:8d:88:
         f2:37:94:00:57:78:bb:50:1f:9e:26:6c:f0:f8:4f:89:64:c1:
         23:ed:07:6f:61:b2:3d:f6:f9:86:f1:44:9e:14:84:07:a6:1e:
         47:08:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----