Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1998f88abc544e5ad7050b1cad9f108a3af37680.cer
File:                     1998f88abc544e5ad7050b1cad9f108a3af37680.cer (raw, json)
Hash identifier:          aDfR7OKa+EjAWRFVLcwDKxTEB42VjYhmyz2uBAB95xo=
Subject key identifier:   71:68:69:D1:58:4E:C4:4C:10:3A:A5:BA:8E:B0:F3:FA:6E:6E:7F:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F45856
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/1998f88abc544e5ad7050b1cad9f108a3af37680.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 09 Nov 2018 21:36:09 +0000
Certificate not after:    Sun 08 Sep 2024 20:06:15 +0000
Subordinate resources:    IP: 45.167.0.0/22
                          IP: 2803:59a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16013398 (0xf45856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 21:36:09 2018 GMT
            Not After : Sep  8 20:06:15 2024 GMT
        Subject: CN=1998f88abc544e5ad7050b1cad9f108a3af37680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:43:b1:78:ff:be:1e:58:f0:10:0d:2f:4a:
                    62:1a:68:2a:0f:ea:27:a1:26:23:0e:9f:ab:ba:98:
                    5d:a4:00:23:8e:a1:8b:53:57:f2:c1:dc:1b:01:82:
                    77:f4:ba:8e:3a:0f:cd:d4:b4:ca:1d:14:8c:6c:9e:
                    56:2b:4c:6c:f4:0b:de:7b:08:85:f7:5b:7b:c4:5d:
                    9e:ea:9b:f7:47:91:e7:95:0b:e7:70:9d:8e:75:16:
                    eb:ef:f7:bf:81:d0:42:21:60:6d:c5:86:a5:a5:2d:
                    98:20:52:14:8a:36:68:e5:64:63:2b:ea:bb:d9:d2:
                    d4:44:df:ce:d8:3f:23:57:91:b8:d5:55:f3:cd:37:
                    20:05:ba:ff:ca:fb:b9:0d:d5:dc:ce:ba:ca:93:24:
                    3a:89:5b:56:63:fc:4a:d9:47:a1:8d:d1:b5:84:09:
                    12:09:7d:af:f7:b4:f9:65:97:07:6f:a1:e1:21:90:
                    b8:f1:5f:17:a2:52:93:05:6e:c4:95:81:fe:db:34:
                    fa:87:6e:6c:0d:70:3b:1b:6d:8f:6c:d4:ee:4c:b6:
                    c9:1c:39:ca:36:6b:57:99:72:87:79:db:8c:0d:a6:
                    9d:54:24:8a:d2:a5:8f:22:78:6e:7b:cd:db:2b:a0:
                    06:41:19:b3:39:4e:b3:77:ef:56:d1:ae:83:b7:a9:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:68:69:D1:58:4E:C4:4C:10:3A:A5:BA:8E:B0:F3:FA:6E:6E:7F:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/1998f88abc544e5ad7050b1cad9f108a3af37680.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.0.0/22
                IPv6:
                  2803:59a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:6d:66:7c:08:fd:cc:f4:a6:87:ab:49:63:b4:68:12:9b:
         f4:43:d9:0e:d5:fb:54:13:17:56:be:24:82:2d:62:33:cc:7d:
         ad:47:c7:ca:0e:f5:b4:84:07:08:46:43:d0:c6:7c:98:28:f1:
         47:5d:85:df:00:00:04:bb:c8:94:2c:c4:20:9c:d8:40:6f:c5:
         47:41:bf:38:43:8f:fa:a5:f0:e8:59:bf:d8:4c:29:22:98:7c:
         a9:eb:de:a0:9b:45:82:4d:f3:d1:42:bc:ab:60:b6:7d:87:6d:
         98:04:23:4a:2b:59:f1:12:4b:7d:d9:74:cb:6e:2c:2b:d9:82:
         03:51:c0:76:cf:2c:8d:0e:60:d8:5f:6e:b9:47:e6:5d:52:41:
         af:ed:25:44:b2:bd:be:1e:82:0a:4a:c6:40:09:98:98:0c:b0:
         39:1d:30:2b:a6:01:81:43:67:c2:62:fd:f1:92:f2:53:ac:77:
         ad:b7:3b:1c:72:cb:40:fb:e8:6e:cf:38:fb:1c:c0:c9:85:74:
         16:98:e3:31:06:d9:92:53:ab:66:8b:d7:7f:31:b3:ac:9b:a9:
         71:43:06:74:a3:80:d5:65:81:09:9b:f2:bc:0a:8d:c7:cd:3e:
         da:88:9b:83:10:2d:6e:1b:82:95:2f:0b:0f:4f:b1:05:ea:ad:
         f3:c9:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----