Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a09add37433cdf8660c503b56a4d3204465670a.cer
File:                     0a09add37433cdf8660c503b56a4d3204465670a.cer (raw, json)
Hash identifier:          SLoePaS8BDzW2qeDiIf2sYp5/bPO0/pzgJO6vAV6ttU=
Subject key identifier:   B3:5E:6E:90:CA:36:FF:B8:9D:D2:34:71:ED:F0:C7:77:1D:21:D2:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E219AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/0a09add37433cdf8660c503b56a4d3204465670a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Sep 2018 18:27:00 +0000
Certificate not after:    Sun 21 Apr 2024 17:16:05 +0000
Subordinate resources:    AS: 262192
                          IP: 181.174.192.0/20
                          IP: 190.13.208.0/21
                          IP: 2803:a480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14817709 (0xe219ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 18:27:00 2018 GMT
            Not After : Apr 21 17:16:05 2024 GMT
        Subject: CN=0a09add37433cdf8660c503b56a4d3204465670a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:57:5a:7c:4d:89:82:fc:6a:47:b1:2e:d0:b3:
                    2b:2a:d9:90:d0:dc:c5:77:ed:1b:a6:f5:03:c4:cc:
                    6a:20:46:a3:3d:a2:28:cb:aa:9c:24:a7:af:14:17:
                    ee:38:7c:cb:44:97:0c:26:e5:41:4b:a9:e5:36:a4:
                    0c:2f:dc:e2:e9:03:71:f5:c3:90:14:46:1a:e0:b8:
                    87:76:da:0d:0a:45:de:a0:07:17:e7:0f:28:51:ba:
                    b6:f6:50:06:4a:91:90:8c:53:7f:96:53:fd:c3:11:
                    29:1d:0f:01:33:6b:09:42:d3:c6:26:f0:a5:cb:96:
                    b9:d4:3f:e5:20:a8:cb:3e:5a:c6:df:81:34:66:a5:
                    43:a2:1b:a6:79:cf:84:c5:55:2c:09:8f:cd:b8:b7:
                    85:d5:c8:ed:8d:8b:78:67:a1:a4:16:05:c6:1f:d0:
                    5f:ad:48:43:8c:17:e7:c4:c3:d2:0e:21:e6:84:a0:
                    86:61:8b:fd:50:0b:7e:db:a6:fa:97:94:9c:16:7c:
                    b6:d4:58:32:89:df:ff:81:88:1a:63:8b:0a:41:a2:
                    ba:80:7b:95:e9:79:61:61:ac:1a:a6:0d:d6:4a:11:
                    da:07:08:dd:55:e2:12:7c:5d:8a:1c:a7:46:75:74:
                    6d:13:9f:f5:f7:c7:9c:1c:87:9f:23:5e:ab:b8:ec:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:6E:90:CA:36:FF:B8:9D:D2:34:71:ED:F0:C7:77:1D:21:D2:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/0a09add37433cdf8660c503b56a4d3204465670a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.192.0/20
                  190.13.208.0/21
                IPv6:
                  2803:a480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262192

    Signature Algorithm: sha256WithRSAEncryption
         2c:2b:d5:ce:eb:2a:ff:84:78:a7:45:6d:0e:b8:ed:6b:e3:3d:
         07:76:31:ef:4e:64:1a:6b:62:ac:ba:26:e9:ae:75:96:65:07:
         19:d9:da:f7:47:5f:a3:09:22:83:dc:34:4e:e9:fc:a7:c8:21:
         af:98:12:79:16:f6:ae:2d:dc:c8:5e:6f:81:ec:36:33:51:c4:
         38:1c:79:eb:f5:40:9a:20:b4:5b:51:fd:c1:9b:4b:08:e4:0f:
         4a:d9:6e:2a:35:55:ca:bf:f4:08:fb:69:94:14:42:4f:10:21:
         37:ab:32:f9:4a:7b:94:3f:77:13:a7:21:1e:fe:2f:04:9f:cc:
         58:67:99:ca:fb:61:e4:6a:88:f7:d5:df:26:7a:34:62:32:2e:
         d3:99:c7:27:3b:1f:f1:0b:06:be:b5:58:06:ec:50:42:89:e9:
         24:96:87:24:e8:aa:39:90:aa:3a:86:a6:9f:72:69:c7:6d:00:
         14:cc:d6:41:87:65:a0:d2:43:71:7d:c3:cb:f8:ef:75:13:bc:
         86:82:96:ed:12:f5:c8:45:37:ec:b6:01:bd:63:7a:d2:f0:be:
         11:97:dd:f9:b6:52:f5:bf:ee:75:65:e0:e2:a7:72:ab:57:cb:
         f6:c4:41:a4:6b:40:05:8c:b7:88:92:ff:cd:42:55:88:2d:e4:
         6d:49:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----