Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a22b288c1e4ed251559cdd04140e06dfc07d0f.cer
File:                     35a22b288c1e4ed251559cdd04140e06dfc07d0f.cer (raw, json)
Hash identifier:          tNZP6YczhVxGOjhk+T2LlwC2pJPiAvy0092FbQFeEIo=
Subject key identifier:   BE:F9:D4:94:52:95:E6:89:56:33:74:C1:CD:31:F1:07:66:19:30:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7A8DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2019 00:14:26 +0000
Certificate not after:    Wed 20 Dec 2023 17:14:49 +0000
Subordinate resources:    AS: 267776
                          IP: 45.171.220.0/22
                          IP: 2803:e7a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14133471 (0xd7a8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 00:14:26 2019 GMT
            Not After : Dec 20 17:14:49 2023 GMT
        Subject: CN=35a22b288c1e4ed251559cdd04140e06dfc07d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:3f:29:ce:03:dc:c0:6e:f2:6e:9f:df:10:
                    09:61:5e:66:34:85:01:5c:52:96:62:f5:aa:a1:6d:
                    0a:ac:50:4d:41:68:d4:d4:2d:d3:9f:d4:a5:13:0a:
                    11:75:e3:0c:65:f9:a8:85:b0:6c:04:2a:19:1c:7c:
                    9a:73:68:0e:02:01:78:60:f2:3e:f2:1c:c2:40:aa:
                    2c:bc:8c:9c:8d:38:db:e0:74:56:ac:43:6d:25:93:
                    97:8a:f1:e6:3a:2c:c6:11:16:a5:ee:c8:0f:d0:e8:
                    8e:03:7d:d1:ed:cc:c6:bc:47:31:1a:22:14:8b:79:
                    40:8d:14:74:9d:1e:b9:55:7b:75:20:47:d9:7f:4b:
                    ea:d6:88:66:5d:98:55:8d:a5:d4:28:17:22:5a:04:
                    f5:b3:02:34:85:de:bd:42:18:f2:ae:3f:0b:96:af:
                    4b:5e:c2:62:a2:75:c3:42:a7:bd:c0:4f:7c:2b:44:
                    f4:47:9f:11:b8:3a:48:64:6b:49:be:14:79:27:71:
                    a5:bd:b3:db:77:18:ed:20:ae:ce:ad:94:75:d0:9e:
                    3b:de:96:63:9c:d0:29:5b:7a:2e:b2:b6:de:ff:d7:
                    86:56:bf:e8:bc:5c:27:64:c9:12:1b:b5:d6:bd:ae:
                    c1:43:a7:5c:5d:eb:59:bd:d7:f5:46:80:14:95:e2:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F9:D4:94:52:95:E6:89:56:33:74:C1:CD:31:F1:07:66:19:30:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.220.0/22
                IPv6:
                  2803:e7a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267776

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:c6:fd:d8:d3:57:bb:49:c7:18:45:51:c5:0c:3a:f6:ba:
         b5:28:64:1a:37:6a:11:4f:25:56:d0:ec:b8:0c:82:b4:d2:4e:
         c8:71:fc:8e:73:1a:ec:ce:e4:3b:1c:df:0c:a1:4f:60:a2:b9:
         81:46:05:82:b3:32:11:8a:49:e8:f6:e9:b9:48:75:6e:e9:fc:
         3d:f1:47:e5:72:1e:e5:ff:47:67:9d:bc:08:47:27:c6:9b:fa:
         b9:62:d2:ac:7f:19:db:de:30:36:11:ce:18:a0:fc:d7:72:7c:
         3e:16:08:3a:df:ba:3d:fc:da:f9:fb:21:ff:2d:1d:b7:d2:f9:
         21:8e:05:83:3b:15:76:3d:b8:40:80:cc:79:f3:42:58:fb:57:
         33:50:c3:01:a9:df:29:e7:6e:e6:b9:27:34:b3:34:3d:ec:e9:
         70:42:f8:6d:93:02:89:55:81:7f:2f:d0:99:c5:ba:8e:c6:da:
         79:e5:f4:a6:90:0b:37:50:13:7f:1e:94:60:6d:39:67:3e:c5:
         89:da:88:ba:25:d7:7d:db:88:0b:40:50:1b:23:f4:bb:46:7a:
         69:de:32:84:1f:ac:cb:23:12:e3:e0:66:c7:ce:42:46:13:4a:
         ad:f0:52:58:64:0c:68:f5:c4:d8:9c:68:4b:35:37:62:70:23:
         94:90:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----