Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
File:                     30415e525ae2a6911d8229a69de6df7b5716b468.cer (raw, json)
Hash identifier:          SHMBgKmS8GmSP56ag5iR7puM3IetZmcu7z+khftSu+4=
Subject key identifier:   AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3E882
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:10 +0000
Certificate not after:    Mon 06 May 2024 18:10:59 +0000
Subordinate resources:    AS: 265762
                          IP: 128.201.160.0/22
                          IP: 2803:fbc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14936194 (0xe3e882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:10 2017 GMT
            Not After : May  6 18:10:59 2024 GMT
        Subject: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:be:20:3c:d9:c5:41:93:b5:95:19:98:fb:
                    0b:9b:0b:2b:78:7f:d2:e6:0f:6d:62:af:ae:36:4c:
                    0e:9e:2e:db:53:2e:0d:7f:d3:ba:3e:6d:3e:fd:b4:
                    8c:6c:1e:9a:96:c0:ee:76:d6:42:73:97:c6:70:f2:
                    e9:ff:08:fd:e9:a3:cb:07:58:d3:9d:50:34:d7:41:
                    da:6c:1a:7a:db:1e:c3:2a:55:a5:27:de:bb:75:87:
                    82:04:b0:e7:bf:40:d5:ab:f5:52:84:6c:d0:76:d4:
                    e1:a0:ce:15:87:60:1a:78:23:38:e5:59:fe:71:e1:
                    19:10:9e:77:7a:92:38:50:35:25:e2:41:8a:7b:67:
                    15:76:6c:a9:ae:ca:44:15:1e:42:6a:38:de:2d:1b:
                    f6:2c:28:b4:3d:74:f4:da:35:6d:a8:fe:31:ee:12:
                    26:18:2a:1a:9a:24:f6:0a:4d:ee:4e:79:a4:fe:63:
                    0c:4e:b4:ca:2a:e2:8e:2d:08:33:3e:95:90:9c:5a:
                    cd:d9:fd:ec:43:bd:5a:22:29:bb:0a:74:e4:2d:96:
                    0a:1b:dc:75:52:73:f6:49:38:a1:e1:c1:28:18:2f:
                    63:8e:9e:32:74:b0:9f:8a:2f:2a:c8:b2:83:f6:53:
                    ab:13:29:93:03:00:7f:48:b8:72:a5:62:91:35:dc:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.160.0/22
                IPv6:
                  2803:fbc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265762

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:45:d9:cb:8a:7d:8c:49:d9:38:ba:2d:7b:e5:c7:6f:7c:
         ab:24:8b:80:02:ee:05:00:ea:fd:d5:b1:64:2a:4f:d8:d7:eb:
         e9:17:1f:b5:59:9f:11:91:81:1c:47:1b:94:eb:1c:82:89:ae:
         f3:e6:b0:0c:b2:4a:2c:0b:07:2a:3d:8f:1c:ec:ae:a7:f1:85:
         b3:30:9f:ec:58:3a:62:a7:00:38:b7:f0:4a:86:1f:65:8e:ad:
         3a:88:b4:fd:45:d2:1e:b0:52:3e:fc:e8:f2:94:42:bc:3b:21:
         ab:62:9a:51:fd:33:d5:ad:19:fa:52:95:78:24:6b:a8:db:c6:
         af:eb:dd:2f:45:2f:72:d3:fb:e7:ca:1a:04:8c:2f:40:45:a9:
         9a:d1:bd:c3:02:91:f0:21:ae:72:1a:6d:84:0c:b9:19:37:44:
         c9:78:2f:30:aa:2b:fe:c3:19:09:e8:94:75:04:fb:9d:63:d1:
         4b:ef:23:1d:c8:6f:91:48:99:37:28:56:bb:e7:ed:a8:18:a3:
         61:5b:95:37:6b:f8:39:2a:25:0b:4c:f7:32:aa:b7:8d:ad:d8:
         03:61:0b:c4:bd:ce:26:48:6a:12:ad:56:97:82:a9:0e:9b:a7:
         dc:64:21:53:66:cb:1a:90:e1:45:a9:4b:d6:52:2d:60:df:8a:
         0a:d0:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----