Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/229214e4977b44c102f28d27dc38d7cc1296d50f.cer
File:                     229214e4977b44c102f28d27dc38d7cc1296d50f.cer (raw, json)
Hash identifier:          EukE4J31vxHmOJTiol9bOxXf6gaTGJshZJkzpb+UtYs=
Subject key identifier:   D7:67:31:CF:5B:94:3C:8A:2B:91:F7:71:52:57:7A:57:C9:FA:31:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7D885
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/229214e4977b44c102f28d27dc38d7cc1296d50f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Sat 23 Dec 2023 14:30:27 +0000
Subordinate resources:    AS: 266749
                          IP: 45.4.164.0/22
                          IP: 2803:76c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14145669 (0xd7d885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Dec 23 14:30:27 2023 GMT
        Subject: CN=229214e4977b44c102f28d27dc38d7cc1296d50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:32:f3:fe:de:21:7e:2e:3a:bb:55:0f:e3:
                    ee:c1:88:b7:ee:97:5b:ce:38:b4:09:5e:f2:45:b8:
                    dd:60:0f:67:02:3a:4d:35:4c:df:ac:f6:70:29:7e:
                    d5:ac:3f:40:11:e9:d2:40:4c:21:59:cc:59:0f:b9:
                    85:57:9e:ca:a3:d1:7d:29:f1:45:8f:12:a9:90:e3:
                    a0:97:0f:da:1d:f0:a1:4f:30:1f:99:90:7a:77:dc:
                    85:26:ac:08:29:60:8d:4c:6e:cb:7e:ad:61:94:5f:
                    e3:a6:14:b1:b7:ea:96:50:dc:03:a6:3b:8b:62:22:
                    2b:12:2d:c9:d0:a8:6f:4a:e8:ae:3a:da:dd:5c:90:
                    67:b7:20:5a:82:02:4b:fa:48:a4:32:04:06:8f:24:
                    cc:7c:0a:eb:0e:e4:b8:0e:5a:3c:45:40:51:11:ef:
                    1e:d7:a2:27:69:9b:cf:76:8d:11:74:a7:57:70:80:
                    52:4d:8a:03:19:33:9e:fb:f7:c4:03:5d:14:9f:f0:
                    4c:40:bd:f9:2d:cd:d5:d6:91:9b:e9:16:44:59:cc:
                    98:ac:bb:cc:ea:2c:66:04:8b:b2:be:c7:66:c7:a8:
                    75:42:29:ab:3b:7a:bf:12:0f:ab:ae:da:ee:e5:59:
                    b6:6d:dd:20:05:af:55:61:c1:f6:7e:cf:f6:04:0d:
                    8f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:31:CF:5B:94:3C:8A:2B:91:F7:71:52:57:7A:57:C9:FA:31:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/229214e4977b44c102f28d27dc38d7cc1296d50f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.164.0/22
                IPv6:
                  2803:76c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266749

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:8b:f4:2e:01:e4:a4:5f:f6:d6:87:1c:b7:f1:91:21:3a:
         4c:25:db:7c:7c:8c:8b:99:81:72:18:69:b1:2f:0e:63:45:79:
         39:3e:8b:00:47:d6:e1:92:3e:6b:41:ec:98:67:e8:b8:94:b8:
         f6:0e:86:95:98:d9:84:7f:0e:97:81:4c:93:b4:83:5c:b8:6a:
         ac:2d:3e:93:9d:24:df:cc:5a:3b:95:aa:08:9c:57:04:43:16:
         4a:89:ec:ff:63:db:93:be:29:db:c3:17:ab:47:f1:ae:9b:a2:
         3a:44:ef:eb:87:f9:e7:42:05:57:ca:7f:d8:7c:2d:0a:96:73:
         48:71:11:ab:6c:ff:bd:ae:33:a1:a7:11:4c:53:d0:d6:40:b6:
         0a:1e:4a:f9:1a:56:23:4b:70:a6:b3:b5:8c:49:09:45:b4:fb:
         b7:0d:5c:e7:5f:d1:e4:0e:53:c4:2c:fa:bc:7b:d3:c4:6d:b9:
         fa:7d:1d:ee:38:31:75:3a:b3:e5:7c:33:ac:b8:5b:8c:61:d6:
         68:c4:7b:5e:42:8d:6c:aa:c7:d6:b6:f1:36:76:10:57:92:ba:
         5b:fb:0a:65:94:ab:d6:40:0b:e4:40:1b:11:57:9d:c9:e2:f4:
         9b:ef:71:db:0b:4e:31:7e:88:95:5f:f5:98:ab:ca:5b:c8:6c:
         ec:30:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----