Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18c4c5ff1bf88327e033846d831a9d027fdae755.cer
File:                     18c4c5ff1bf88327e033846d831a9d027fdae755.cer (raw, json)
Hash identifier:          fEcCJe3Vycw7E2p9QsUuXp3PJbz4Qk/UaMHY4gOxe8I=
Subject key identifier:   3B:6E:2A:5C:A1:CB:46:F4:04:85:E1:5C:F9:A0:F9:7D:7D:6F:F6:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA60B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/18c4c5ff1bf88327e033846d831a9d027fdae755.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Oct 2018 19:56:31 +0000
Certificate not after:    Tue 23 Jan 2024 21:56:51 +0000
Subordinate resources:    AS: 265686
                          IP: 45.6.4.0/22
                          IP: 2803:91c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14311606 (0xda60b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 23 19:56:31 2018 GMT
            Not After : Jan 23 21:56:51 2024 GMT
        Subject: CN=18c4c5ff1bf88327e033846d831a9d027fdae755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:6d:44:9d:89:1d:68:2c:c6:12:28:2a:a4:
                    c4:50:ca:07:07:f0:14:b0:8c:af:85:f3:0c:c3:03:
                    2a:0f:21:e5:da:2d:26:ad:e7:62:bb:b3:81:76:c2:
                    59:79:29:eb:1a:b0:5e:14:24:5e:47:ab:5a:a7:6f:
                    64:78:9c:47:ae:65:90:b9:8c:48:e8:8e:35:d7:47:
                    78:ad:5f:1c:c9:f7:53:e8:5f:d7:a9:1a:44:7a:83:
                    ac:f7:30:50:7d:44:15:c7:7d:7e:f4:21:c9:24:26:
                    f6:fc:e0:ef:52:ab:c8:87:fe:6a:b9:6e:ea:3e:f9:
                    6b:1f:a6:59:78:62:df:0d:f6:a5:5f:4f:db:22:c1:
                    6a:c9:17:d6:ea:98:82:38:e5:3d:39:5e:63:bf:78:
                    c0:e3:65:03:c0:f0:bb:88:ae:58:80:6d:10:84:5b:
                    69:70:a7:c2:de:6d:ea:50:35:d5:d3:65:97:34:2c:
                    d1:63:9f:42:90:ac:af:f5:73:96:90:1b:71:e0:02:
                    0b:6a:28:e5:82:ba:d9:f5:28:2b:43:0a:da:b8:9e:
                    81:0e:d2:77:9d:b1:4d:d3:f3:1a:14:2b:7c:f4:f2:
                    c4:fd:5b:0e:85:7f:64:37:31:1a:15:6a:39:75:3a:
                    5b:a3:15:79:5b:1c:de:e0:05:bb:df:1a:f9:8e:2c:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6E:2A:5C:A1:CB:46:F4:04:85:E1:5C:F9:A0:F9:7D:7D:6F:F6:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/18c4c5ff1bf88327e033846d831a9d027fdae755.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.4.0/22
                IPv6:
                  2803:91c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265686

    Signature Algorithm: sha256WithRSAEncryption
         b7:53:d1:54:50:f0:6f:98:24:e0:8d:6f:fb:31:c9:da:f1:7e:
         aa:75:17:95:41:5d:74:44:41:d7:c0:15:4e:ae:a6:22:b4:2d:
         c0:01:d3:f1:42:2f:2b:84:fc:19:6c:24:88:f3:8a:ca:2b:3b:
         20:84:b6:db:1e:ff:39:c3:97:b5:f7:be:cc:6b:2f:86:31:93:
         80:07:36:e6:0d:77:09:36:08:51:b8:48:4f:26:b0:b9:11:bd:
         a0:bd:6d:d8:87:7c:61:f6:21:ce:89:b3:f4:11:bb:cf:33:e0:
         e8:b4:81:61:bb:de:f1:ac:47:7c:a1:cc:89:a3:08:65:aa:75:
         e8:b5:16:0d:ba:b9:ff:62:06:03:d5:e5:33:a5:ca:ee:51:ec:
         ba:3c:40:07:b6:9b:b1:f1:65:38:30:3a:19:28:28:7f:c7:78:
         5d:91:84:cb:fd:87:ef:71:86:50:ce:4f:f9:a7:c0:a5:9a:e2:
         15:6d:d9:dc:53:c8:30:c4:a9:ab:c3:a6:cd:70:4d:ff:e8:6b:
         e7:67:bd:24:f3:7d:00:22:e6:94:70:ca:e7:c6:04:45:6d:81:
         6e:5f:25:36:29:f3:e5:5a:b8:eb:d2:94:45:e3:23:d4:80:52:
         d9:ca:29:71:17:a7:e9:b3:59:4a:da:a7:46:9a:e5:cc:72:7f:
         1d:94:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----