Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1877bd36cc5ccc64afec2ed652685f0453ae84.cer
File:                     0d1877bd36cc5ccc64afec2ed652685f0453ae84.cer (raw, json)
Hash identifier:          a1TFjXb1LYroG1JwJqvf2tPqbchDsoPOe9yVZl6hYFc=
Subject key identifier:   E3:B9:A9:81:C1:3F:1A:C1:D3:30:19:F3:49:06:4A:2D:30:8D:CF:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F75FC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/0d1877bd36cc5ccc64afec2ed652685f0453ae84.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 28 Dec 2017 13:18:34 +0000
Certificate not after:    Sun 29 Sep 2024 18:16:53 +0000
Subordinate resources:    AS: 264822
                          IP: 170.80.136.0/22
                          IP: 2803:bcc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16211909 (0xf75fc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 28 13:18:34 2017 GMT
            Not After : Sep 29 18:16:53 2024 GMT
        Subject: CN=0d1877bd36cc5ccc64afec2ed652685f0453ae84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:92:46:54:cb:49:22:49:0e:7a:dc:83:09:
                    30:de:61:54:f5:95:b2:34:c6:2a:56:7a:01:9e:da:
                    24:10:19:db:6a:ba:89:ec:88:cb:a2:af:a6:37:09:
                    5a:85:1a:0e:34:17:5c:b5:45:09:98:ee:e2:e0:1c:
                    22:ce:f4:51:c1:7e:16:6b:b2:77:6a:fe:30:ae:af:
                    57:a5:3a:85:8a:dd:c4:af:82:be:3c:ef:4a:c6:f1:
                    65:05:04:40:15:4c:76:e6:1e:da:c0:fe:24:06:8a:
                    e7:46:61:56:0e:92:2b:9f:fc:a1:75:1a:e4:d1:b0:
                    11:48:f0:85:1a:60:75:9f:32:ce:57:45:10:28:53:
                    ae:e8:01:8c:27:02:1e:ec:85:75:10:8b:a0:1f:bc:
                    29:a0:e7:40:51:29:cb:12:53:ed:a6:ee:b6:2f:e7:
                    c4:fd:e6:8c:15:66:6c:b0:60:7d:9f:dd:51:7f:a8:
                    bf:92:fc:46:70:05:e5:4b:f1:f7:28:57:f6:ad:ed:
                    8d:3a:3f:11:95:9f:36:f3:66:7d:e4:d4:2b:cf:38:
                    63:7a:40:75:98:41:17:58:29:b8:ff:c6:6e:08:2e:
                    bf:6b:c4:30:2c:70:b8:a1:e9:c8:e5:47:45:71:9e:
                    83:10:a6:ac:a9:a2:c1:0a:da:32:9a:c0:6b:df:3a:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B9:A9:81:C1:3F:1A:C1:D3:30:19:F3:49:06:4A:2D:30:8D:CF:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/0d1877bd36cc5ccc64afec2ed652685f0453ae84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.136.0/22
                IPv6:
                  2803:bcc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264822

    Signature Algorithm: sha256WithRSAEncryption
         65:f6:26:88:eb:64:cf:db:2b:b9:b0:ce:84:c4:9a:80:34:d5:
         b6:f1:3a:a8:58:a4:b3:de:14:80:f2:14:1c:ff:c2:88:6d:20:
         3c:dd:b3:ef:25:f3:11:99:bb:f0:c0:a3:4e:76:c5:30:1e:f7:
         ee:e5:e5:ff:d4:1a:55:2a:83:70:7c:98:d5:66:64:45:6d:4c:
         cd:76:4f:0f:b7:95:96:45:e0:3d:e9:f8:38:f0:45:5d:6e:eb:
         ca:d8:60:ab:b5:d2:3f:11:56:fb:13:01:fd:a7:cf:07:51:a9:
         dc:24:ec:1f:79:9f:76:75:a2:b9:a8:72:ac:63:b7:33:84:f7:
         1f:9e:4f:b0:07:69:42:7d:e0:c3:f4:0b:dc:44:7b:48:ba:c7:
         bd:d6:cb:a9:42:06:94:c1:09:69:7d:72:64:5c:b1:54:61:ee:
         b5:b9:ca:1e:d7:25:06:d5:b0:40:84:61:6d:38:3f:de:a4:6f:
         61:c5:40:3f:00:c3:fe:b8:68:63:b4:af:5c:9e:7d:18:73:1d:
         94:f8:d7:8f:8d:56:1c:dc:e7:84:ac:6b:48:b0:ab:db:fd:d6:
         18:c4:8d:c8:89:f7:38:81:36:c0:68:75:1f:40:11:91:4d:67:
         34:d2:5b:1b:7f:73:7f:c0:2a:7f:43:d2:f0:8d:f5:30:c4:c6:
         6a:21:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----