Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048de645b373fe5a6a9e19ce0fa720fb3755f233.cer
File:                     048de645b373fe5a6a9e19ce0fa720fb3755f233.cer (raw, json)
Hash identifier:          oUnPGOTzN3L4HSZsbBDCvYawsTwiEdKhwSgvtK/V8QY=
Subject key identifier:   CE:25:A8:DC:73:3C:54:7D:33:E2:B4:22:DB:B6:8B:78:26:A5:B9:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2C804
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/048de645b373fe5a6a9e19ce0fa720fb3755f233.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Jun 2018 19:58:23 +0000
Certificate not after:    Sun 28 Apr 2024 15:41:49 +0000
Subordinate resources:    AS: 266869
                          IP: 192.68.185.0/24
                          IP: 2801:14:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14862340 (0xe2c804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 29 19:58:23 2018 GMT
            Not After : Apr 28 15:41:49 2024 GMT
        Subject: CN=048de645b373fe5a6a9e19ce0fa720fb3755f233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:59:a9:bc:f5:6e:dc:6f:a2:57:c1:28:07:
                    5d:98:19:95:2a:45:fd:a5:8b:49:6c:50:b8:f1:b1:
                    0f:75:e2:a8:a8:45:a6:d4:97:b8:cf:1a:16:ce:79:
                    27:5d:09:44:7d:11:ec:d4:69:ac:b1:80:a0:43:e4:
                    20:8e:b6:a7:18:bb:39:31:ef:28:b5:39:69:21:9c:
                    1f:5e:8c:e7:75:e2:fc:ef:63:32:bb:f8:59:63:3e:
                    be:76:a2:3f:b2:91:d4:29:f6:07:d6:73:84:d7:97:
                    eb:e9:f4:e3:5f:9b:0b:bd:f7:09:81:08:30:95:d9:
                    83:ca:fd:9f:61:d9:86:e5:f0:8f:d4:2a:48:d4:f4:
                    5b:be:d5:4a:47:9e:e0:f0:c4:a5:7a:6e:a1:a5:dc:
                    db:34:77:e4:d9:3f:ef:01:c4:3e:d6:69:ed:f3:57:
                    3b:28:27:9f:05:2f:be:87:3e:2e:ed:a2:cc:d2:c0:
                    db:ee:8c:b3:60:01:ba:32:35:f7:fa:09:ac:f5:0a:
                    eb:6d:c8:5c:79:c1:1f:cd:fb:14:53:7c:9b:47:8a:
                    8f:82:00:4b:99:8c:cb:09:cb:fd:ba:b1:ab:d7:92:
                    ca:6b:3d:6c:63:cb:21:3c:a1:37:1e:e6:fa:ab:a4:
                    22:74:79:44:b3:df:f2:52:0f:76:02:2c:10:d9:fd:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:A8:DC:73:3C:54:7D:33:E2:B4:22:DB:B6:8B:78:26:A5:B9:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/048de645b373fe5a6a9e19ce0fa720fb3755f233.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.185.0/24
                IPv6:
                  2801:14:f000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266869

    Signature Algorithm: sha256WithRSAEncryption
         6c:45:71:9a:e4:f2:18:c2:7d:50:12:05:10:1a:e7:10:98:68:
         84:de:21:e1:4c:13:a7:9f:98:5a:e5:81:fa:cc:30:66:ed:ee:
         e0:b7:c4:ea:02:39:a0:90:6e:f7:6e:22:a3:40:8e:cb:bb:b1:
         b0:f2:8b:0c:0f:db:d7:03:82:7f:f6:00:d7:e8:39:4b:0b:3e:
         70:46:f4:a4:c9:25:6b:6f:fd:52:7b:35:76:69:a4:4c:27:3b:
         cd:c8:9e:1a:f7:dc:76:3b:fb:1e:31:3b:a2:9a:4d:e3:f3:61:
         6a:c1:c6:a2:bf:a7:05:f2:dc:18:95:27:65:5f:96:e5:52:ef:
         7a:00:5c:40:69:88:0b:fe:d1:76:11:d6:d2:d8:bc:15:ae:d6:
         d2:84:71:ab:a7:29:3c:f6:b7:9b:08:f2:5a:3c:46:d0:28:c7:
         e9:83:30:8a:58:e2:e0:c3:5e:f6:f6:02:bb:16:ab:e8:53:17:
         06:1e:fd:36:67:70:b7:13:c6:ae:32:9a:cd:73:e5:8d:e6:d6:
         53:a1:b3:85:73:28:21:9a:21:ff:9b:73:6d:0b:6e:2a:68:c2:
         36:f7:9a:9c:c5:5a:9e:39:69:32:08:e7:d8:0a:ba:11:82:a4:
         14:58:34:5a:fd:aa:c8:29:f7:3a:83:d0:72:72:fa:e6:d7:9d:
         99:b1:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----