Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18c2a58dc82a5c82d83cd62f612e3aa933bbc288.cer
File:                     18c2a58dc82a5c82d83cd62f612e3aa933bbc288.cer (raw, json)
Hash identifier:          j2DfbS4J+ROCvKqVLaffzJsrAclC0zGtBrdGBEukZyo=
Subject key identifier:   48:73:BE:93:B1:75:3E:B7:3E:6F:AD:3C:02:44:0E:22:77:8C:FB:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01025FC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/18c2a58dc82a5c82d83cd62f612e3aa933bbc288.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 05 May 2019 14:53:35 +0000
Certificate not after:    Tue 13 May 2025 19:53:53 +0000
Subordinate resources:    AS: 266851
                          IP: 45.170.100.0/23
                          IP: 45.238.179.0/24
                          IP: 2803:42a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16932800 (0x1025fc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 14:53:35 2019 GMT
            Not After : May 13 19:53:53 2025 GMT
        Subject: CN=18c2a58dc82a5c82d83cd62f612e3aa933bbc288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:fb:0c:a3:b7:61:0e:b5:12:a2:dd:33:e0:
                    c9:1f:ce:a4:89:9a:0a:a2:26:51:82:77:c7:03:e2:
                    d9:97:a1:af:ed:94:84:bd:45:bf:e0:53:ea:ce:76:
                    26:b8:7b:01:ca:27:e3:db:01:fb:03:ec:0d:7b:2d:
                    19:78:02:34:70:c3:f6:ec:ab:3a:9d:f0:cb:b4:fd:
                    20:3a:7b:6b:06:c5:27:0a:25:97:db:35:f8:e0:e5:
                    c2:f7:35:20:0e:37:4d:e5:f9:1f:33:e9:2e:90:78:
                    6e:3c:9b:e5:e6:0c:bf:d2:f4:a9:f2:f3:0c:5f:be:
                    7c:b4:a8:1a:82:92:76:9d:fd:db:c5:6c:2f:f7:f6:
                    31:77:80:ed:15:21:35:ed:15:79:16:61:12:bd:21:
                    ba:44:24:d6:85:95:ff:bd:e4:88:75:21:91:96:b1:
                    fa:fa:bb:be:9f:ce:bd:86:14:41:b7:87:9c:8b:00:
                    59:8c:6a:c7:6b:3a:c6:d5:e7:b5:34:80:b8:88:4c:
                    5b:03:76:17:1a:44:70:21:88:3b:9c:1a:34:b6:5a:
                    bf:00:95:f2:3d:3b:81:8b:fc:32:0d:b5:db:bf:ca:
                    9f:9a:22:6c:74:5e:0c:5d:07:84:8d:0e:73:a9:48:
                    d7:54:a0:7a:df:c2:49:49:eb:f5:fc:cf:0d:e7:8d:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:BE:93:B1:75:3E:B7:3E:6F:AD:3C:02:44:0E:22:77:8C:FB:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/18c2a58dc82a5c82d83cd62f612e3aa933bbc288.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.100.0/23
                  45.238.179.0/24
                IPv6:
                  2803:42a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266851

    Signature Algorithm: sha256WithRSAEncryption
         91:49:7c:97:f2:40:bd:23:6b:ba:3e:0b:46:7a:45:50:88:f4:
         c9:48:e9:6b:5d:6d:a4:b9:a1:77:19:2d:4a:cd:ba:a7:15:e1:
         28:21:d3:73:5a:18:53:5f:55:02:e5:67:91:78:66:61:cd:05:
         ef:fc:92:47:cb:cd:5e:36:85:8a:8f:bb:f6:fa:29:e8:10:2b:
         ca:91:ac:9a:9b:9d:a9:0c:bd:66:79:53:7c:c4:1e:f1:c0:53:
         20:66:48:1e:34:62:26:c4:c8:40:84:72:4f:87:fc:6a:ed:4c:
         20:aa:4a:1f:fa:94:d0:06:a3:8d:5c:8e:96:76:9b:5e:ad:88:
         c3:53:2b:e2:53:71:7d:82:c1:7b:55:25:fd:6f:19:57:07:f8:
         79:66:ff:44:72:f3:97:8b:cf:7c:80:48:d8:d1:07:06:b5:9f:
         0e:df:28:dd:a2:92:b9:51:90:6a:0a:53:2a:70:7e:b6:de:4a:
         c4:67:8c:15:98:09:2f:cc:f4:77:d7:54:81:66:9e:8b:7e:20:
         15:c4:b9:f5:1e:45:e4:b4:f8:75:8a:f6:6d:45:16:bc:4a:37:
         d0:22:55:4f:d8:97:72:b1:8a:89:a8:b4:90:6f:c4:01:70:be:
         1e:2b:82:0a:cc:ab:e0:e8:79:a7:92:34:3a:6b:29:d8:dc:b4:
         3a:eb:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----