Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer
File:                     0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer (raw, json)
Hash identifier:          6nmWZFLhrTWxyxdsuEt6gzKH85YEZ+/6tC6EbP5g9kw=
Subject key identifier:   6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF81DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Dec 2018 19:54:23 +0000
Certificate not after:    Sun 24 Mar 2024 22:42:33 +0000
Subordinate resources:    AS: 52475
                          IP: 179.63.240.0/22
                          IP: 2803:bb00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14647775 (0xdf81df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 27 19:54:23 2018 GMT
            Not After : Mar 24 22:42:33 2024 GMT
        Subject: CN=0f6b8f2a30f1c9159e728a614b3a6695bf89016b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:0d:5e:c8:f4:69:f3:33:eb:39:66:84:01:
                    fa:e5:43:0c:cd:cb:63:c3:e9:fa:dc:67:93:bc:6b:
                    e1:f3:77:cd:74:5b:41:b5:45:f7:25:66:22:7c:a1:
                    3c:d3:b1:6f:8e:f1:3e:8a:03:47:78:93:42:92:5e:
                    79:c4:7c:85:39:a5:34:ff:2c:4a:be:5f:ec:68:83:
                    13:07:e9:5c:52:fe:e4:49:1c:aa:ca:a6:d5:d2:d8:
                    d9:91:01:ae:4c:ac:1c:2c:03:1d:7e:ba:fe:13:ce:
                    20:24:53:44:ef:0d:f7:c2:45:10:63:05:1b:3d:01:
                    50:c3:e8:6f:61:56:b1:70:52:f0:1a:83:97:ca:b8:
                    68:49:b4:98:c8:e2:cd:f6:e3:38:55:82:43:a7:7e:
                    e4:17:2b:32:d7:50:87:28:4f:b8:1b:07:0e:b9:33:
                    19:69:dd:4a:03:71:c4:1d:64:15:70:d0:e0:73:df:
                    0f:49:4f:d8:16:00:d9:b4:fd:6c:a4:77:17:15:ad:
                    04:20:4e:07:43:18:cb:2f:be:2e:56:b5:e7:96:7b:
                    77:6e:3e:ff:d0:09:0f:2c:f4:58:c7:3f:06:b1:63:
                    8a:56:b0:37:24:49:01:b9:ff:01:ed:55:30:7c:0e:
                    b5:28:01:38:60:6a:30:c1:84:c6:1b:8b:0a:d1:fd:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.240.0/22
                IPv6:
                  2803:bb00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52475

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:8a:8e:19:9d:37:ad:b6:1a:d6:1e:84:07:59:4b:5d:c4:
         d4:b4:42:20:b4:eb:51:5c:ea:91:51:bf:e9:91:a1:2d:f6:97:
         9a:34:97:21:2a:f4:ca:5e:ec:59:70:a2:89:5e:31:84:ac:55:
         b3:ea:e3:3a:6f:f9:1d:24:d8:23:f5:32:c8:70:78:06:24:84:
         40:a1:bc:c4:23:43:a3:e1:66:fc:70:52:84:9e:14:90:45:b6:
         5e:c9:fc:ad:5d:76:3e:05:8e:d5:b1:46:e6:61:62:d1:ba:55:
         05:80:26:2d:c1:04:e5:91:a0:c2:eb:1e:9b:54:e2:2a:01:21:
         39:34:c6:fa:b9:f5:d5:5f:42:f9:a7:50:99:c4:cc:cd:ac:75:
         8a:b8:f2:7a:c2:17:16:e1:95:d6:5a:ee:89:c9:af:c4:49:bf:
         dc:21:b7:88:95:12:37:7b:79:ba:5b:9e:f3:91:c3:96:34:ea:
         e8:3b:9a:9b:11:4e:86:c1:96:ba:14:09:ff:29:99:2b:9c:d9:
         4b:38:b6:a6:cc:8d:0f:96:d3:79:27:86:ae:12:43:48:59:40:
         c9:58:71:79:21:91:0b:19:a9:1d:43:ce:52:12:f0:75:ab:3e:
         6f:f5:8b:0c:0c:a7:9e:5a:72:96:cf:fd:83:43:de:88:e1:c5:
         06:2d:c9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----