Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer
File:                     2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer (raw, json)
Hash identifier:          3OeIhA75CJ+CJCuK+uMkhyc02sKO/uhZPB8SMqnIl38=
Subject key identifier:   93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E11629
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 06 Jan 2018 04:52:03 +0000
Certificate not after:    Thu 18 Jul 2024 23:38:06 +0000
Subordinate resources:    AS: 265824
                          IP: 45.70.116.0/22
                          IP: 2803:d420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14751273 (0xe11629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  6 04:52:03 2018 GMT
            Not After : Jul 18 23:38:06 2024 GMT
        Subject: CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:77:4d:92:62:b2:f1:77:12:6d:5c:4d:60:
                    de:9f:b9:0a:74:7d:45:61:6c:f1:d5:51:14:f6:4d:
                    06:a5:1a:fa:9e:75:bb:d5:8c:68:d7:4e:55:a5:12:
                    01:72:3c:15:b9:47:c3:f1:26:ef:8e:b1:ab:2c:aa:
                    9c:a2:6b:07:b0:5a:83:7f:0b:bc:7c:cf:cb:d5:42:
                    8b:4e:9a:63:83:29:7a:e3:09:6f:53:88:e9:22:85:
                    62:1c:0c:fb:e0:48:65:21:ec:d3:c1:93:32:5b:62:
                    87:bd:c2:f1:4e:34:14:1f:ef:d2:03:a8:93:69:d6:
                    b3:65:e0:d6:80:a2:98:7c:79:b1:55:39:b0:d4:20:
                    69:79:6d:57:e1:32:9e:c2:5a:53:c0:01:82:dd:40:
                    7b:4a:b8:7a:64:bf:d9:88:71:2f:9d:6f:d4:b2:09:
                    dc:a3:f1:fc:cf:46:4d:8f:bc:a4:43:61:86:c1:d7:
                    2c:bf:4d:2f:c3:9b:f4:62:d1:62:1a:f7:6c:2c:c0:
                    7c:f8:8f:05:fa:01:1f:da:12:7d:a6:13:67:d6:32:
                    76:5a:b8:1b:df:eb:71:90:17:e6:ae:25:66:98:e6:
                    70:98:6a:49:ee:f5:9e:00:23:4f:b9:6c:4f:63:41:
                    f8:e1:83:26:13:20:9e:9c:5d:79:d0:4a:63:18:85:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22
                IPv6:
                  2803:d420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265824

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:ec:e2:81:eb:9e:08:fc:93:4d:8e:de:7e:1c:cf:19:e1:
         7c:2a:93:96:94:33:ea:ac:df:80:db:98:74:7e:93:70:fd:8d:
         5f:89:05:45:2f:27:37:3b:d4:eb:7a:6d:39:bf:ef:af:66:f9:
         52:43:9f:2d:30:73:32:4f:87:44:7e:54:df:bb:b5:bc:01:a2:
         89:68:18:fe:33:bf:93:3e:7b:0b:c2:9e:e6:57:80:ff:f5:5b:
         92:20:67:00:51:4a:fa:37:e8:57:3d:43:63:5e:a8:99:ca:34:
         49:ce:b6:dd:a3:6c:e1:f5:c6:b2:a5:29:26:36:53:d4:9b:b5:
         d7:f7:66:7e:92:df:ee:3a:52:9b:26:6f:96:9e:5f:c6:f8:58:
         8d:3c:8f:ab:97:e2:10:93:73:77:fb:55:19:fc:9d:26:30:36:
         88:85:c9:40:15:7e:dd:96:ad:4b:79:8e:81:c7:a2:fd:e0:c7:
         de:b1:28:85:e7:2a:f5:37:2f:a0:89:20:cd:6e:1e:95:d3:c3:
         eb:a6:80:09:0c:f6:56:7b:fb:6e:58:63:c5:35:04:00:09:65:
         2d:d7:1d:ce:74:bf:87:e0:5c:43:41:ae:e5:ca:61:ea:f5:74:
         13:84:fc:bd:0d:32:f5:1d:b2:c3:b9:59:57:fa:c6:61:81:27:
         d1:93:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----