Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f385b55aff201749c5d3f77595f6566c0d0a75f.cer
File:                     0f385b55aff201749c5d3f77595f6566c0d0a75f.cer (raw, json)
Hash identifier:          qZHT2OsKsI3YQa77cXcFnKAYa+fnLTCBuRY86DrSgiw=
Subject key identifier:   0A:6B:07:AA:2F:61:B2:FD:C4:28:2B:92:14:40:62:22:49:66:13:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DAE821
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/0f385b55aff201749c5d3f77595f6566c0d0a75f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2019 19:36:34 +0000
Certificate not after:    Mon 29 Jan 2024 17:41:00 +0000
Subordinate resources:    AS: 267817
                          IP: 45.174.24.0/22
                          IP: 2803:7060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14346273 (0xdae821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  1 19:36:34 2019 GMT
            Not After : Jan 29 17:41:00 2024 GMT
        Subject: CN=0f385b55aff201749c5d3f77595f6566c0d0a75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:dc:49:03:27:09:d8:bb:ca:82:60:17:26:
                    b2:c1:9c:dd:d8:f8:bf:60:55:f9:2d:06:de:d1:75:
                    77:36:d0:a7:c1:e9:13:e7:95:53:9c:1d:2b:f1:89:
                    c3:c1:c2:79:4c:8d:90:13:07:d0:aa:0b:95:57:c2:
                    a3:37:93:e6:9d:41:01:34:72:8b:71:ce:90:69:89:
                    4d:02:eb:cc:df:8e:0b:fc:88:f1:6d:f3:62:a8:15:
                    d2:fd:9f:bc:24:92:93:e1:b7:e9:70:53:06:92:1a:
                    f8:3b:4f:63:b1:9b:d8:20:35:c1:63:5b:96:07:d5:
                    a2:77:4b:bf:b6:d0:c3:cf:b6:20:d7:14:35:d0:0d:
                    2e:2e:e3:4b:fe:63:23:9c:b6:d9:b6:e9:59:f3:07:
                    5c:e5:73:1e:b8:b5:aa:50:1c:9a:ee:ae:85:b7:3b:
                    3c:7e:2b:16:65:1d:49:82:ef:f0:fe:83:52:01:0a:
                    69:a7:ac:29:fe:ac:c1:01:26:94:c2:4f:a8:1b:f6:
                    31:0c:9e:74:49:02:0b:46:8f:9e:94:d7:66:08:1b:
                    63:da:85:33:04:3f:7c:a5:79:aa:ed:40:79:f5:11:
                    99:55:6d:b5:50:58:96:35:70:db:83:13:b9:23:c1:
                    6e:e7:e2:8d:34:aa:45:4b:3a:10:26:23:4b:55:71:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6B:07:AA:2F:61:B2:FD:C4:28:2B:92:14:40:62:22:49:66:13:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/0f385b55aff201749c5d3f77595f6566c0d0a75f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.24.0/22
                IPv6:
                  2803:7060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267817

    Signature Algorithm: sha256WithRSAEncryption
         a2:6d:16:a9:72:23:1d:63:bf:80:66:51:25:6e:fb:68:4d:4f:
         28:a5:d9:94:61:21:cd:93:40:89:3a:2b:19:14:5f:ae:03:ef:
         34:ab:2e:02:48:b9:35:8e:81:84:1b:60:ae:82:2d:22:0a:6b:
         cb:15:03:a0:5e:3d:7a:32:d8:97:6e:a2:44:c7:a4:51:dc:68:
         5f:97:61:6a:f6:c1:45:8d:a3:63:ac:7b:8f:ef:44:93:2d:36:
         3f:26:85:87:82:94:1c:79:b3:6f:fa:66:87:23:bc:1e:8f:25:
         70:23:68:fa:42:36:29:60:8b:0f:c5:6c:01:d5:52:f9:b3:97:
         55:6b:de:0d:ea:42:87:e0:50:79:05:b0:2a:ee:b1:bd:a8:72:
         07:d4:22:4b:64:1f:00:a4:93:2b:d2:7b:cd:21:36:ca:c0:73:
         ef:f3:60:af:65:b2:60:7f:01:23:ad:48:3f:d3:87:5a:28:49:
         19:df:04:c2:d7:e6:36:30:19:86:d9:53:c7:49:22:7d:1f:f9:
         5e:1a:b9:95:96:e2:b6:64:4c:71:4e:8f:11:96:9e:ae:ad:bd:
         b8:9c:dd:09:8a:c1:08:c5:8b:f4:42:f3:32:71:a5:85:57:bd:
         6a:e2:86:04:b6:0e:74:ce:69:c8:01:45:a6:d7:69:47:e6:1f:
         b9:8f:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----