Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c3098bc830b15f562a713da1e021ca658c175b0.cer
File:                     0c3098bc830b15f562a713da1e021ca658c175b0.cer (raw, json)
Hash identifier:          pjTqik1HYuHR5LevvAOfhpvXVkXln+cPQ0PRiG2URhI=
Subject key identifier:   A2:74:A5:2C:D7:E0:9C:9D:DB:8A:15:84:CB:BF:E5:EC:7E:73:B8:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9CAE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/0c3098bc830b15f562a713da1e021ca658c175b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 06 Jan 2019 23:26:05 +0000
Certificate not after:    Fri 14 Jun 2024 21:28:46 +0000
Subordinate resources:    AS: 266881
                          IP: 45.160.212.0/22
                          IP: 2803:7aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15321832 (0xe9cae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  6 23:26:05 2019 GMT
            Not After : Jun 14 21:28:46 2024 GMT
        Subject: CN=0c3098bc830b15f562a713da1e021ca658c175b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:0a:b0:2d:5c:1e:bd:70:89:10:6f:e1:4d:
                    8c:d4:ad:5f:38:49:c2:0c:dd:6d:69:d0:0e:97:df:
                    17:8b:41:db:af:e5:22:ea:47:5c:d0:26:8b:9b:f5:
                    9c:55:ab:8a:a3:04:05:8c:1e:a3:37:54:fe:72:33:
                    92:2c:42:7f:37:2b:2c:d0:85:e8:69:9a:99:2f:37:
                    1a:33:bb:45:68:6a:b1:81:e8:c6:7b:45:42:e5:86:
                    63:a4:f4:1e:16:52:5d:c4:a9:62:e5:e9:d0:ce:ef:
                    ff:92:ac:87:65:3b:30:f2:4d:fb:a0:ea:22:e3:b7:
                    8f:63:4c:03:2b:97:5e:dc:c2:d4:39:0a:cf:ff:aa:
                    81:77:f7:47:0f:70:1b:23:42:e0:15:a1:39:24:d3:
                    cd:af:fb:7b:02:d2:b1:42:6b:d6:98:7e:7c:e1:6a:
                    fb:83:2f:1f:f7:3a:37:47:0f:84:65:76:b6:b8:ab:
                    0a:5c:48:79:b2:8a:f6:0e:e3:3b:fc:1d:cf:f8:00:
                    72:f0:bc:02:02:37:1e:23:aa:68:da:e1:aa:0c:89:
                    97:1b:bf:9b:ae:5d:62:85:19:cb:cd:e0:d4:71:47:
                    7c:42:63:3f:3d:ed:e4:a0:53:73:d1:78:c2:0f:41:
                    d2:d9:4d:9b:77:6f:b4:b2:ab:40:d7:72:fa:ea:4a:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:A5:2C:D7:E0:9C:9D:DB:8A:15:84:CB:BF:E5:EC:7E:73:B8:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/0c3098bc830b15f562a713da1e021ca658c175b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.212.0/22
                IPv6:
                  2803:7aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266881

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:f6:88:ee:73:11:fd:1f:4b:37:0b:ed:82:da:cc:ad:b5:
         f8:62:01:68:0c:d4:d5:2a:fc:58:08:55:12:4a:66:73:27:e3:
         61:65:d8:db:f8:bb:73:a6:a5:d0:fe:5b:14:5d:a9:4c:f9:59:
         94:18:32:75:e8:f2:45:c7:6f:fd:c4:78:43:a6:f6:a9:db:e1:
         a3:3d:e5:07:52:98:4f:8b:16:e0:fd:a2:08:a6:d6:31:5d:57:
         90:6d:a2:59:e5:ce:e1:83:5b:cc:99:a5:9f:87:f7:f9:af:16:
         34:99:f3:61:a0:85:1e:80:69:cb:cf:d8:8f:ef:2b:a7:0f:47:
         5f:83:d5:ad:6e:39:e2:d7:d0:df:56:5a:e0:bb:b9:5e:b7:ec:
         f3:b3:9c:2b:c6:ad:78:9e:bb:29:72:d0:e4:3c:09:84:9b:30:
         40:4d:e2:6e:70:b8:11:67:6e:00:c3:c4:db:05:ff:90:00:6a:
         1e:ec:bc:96:a8:5a:a3:54:dd:9b:ed:96:ca:7a:06:03:ce:b6:
         eb:4f:f8:d7:93:47:38:01:73:2a:4c:52:85:7c:8d:c2:fe:5a:
         8f:60:95:31:e5:4f:07:6a:ee:dd:91:61:3b:32:5d:c8:9b:49:
         40:28:52:e6:34:dc:01:76:79:d0:d3:87:11:3d:46:a3:89:15:
         8e:12:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----