Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3bcd6035acd574195e49d3f93bffd1f9ad4550ad.cer
File:                     3bcd6035acd574195e49d3f93bffd1f9ad4550ad.cer (raw, json)
Hash identifier:          abChNs+czHjlYJyP5DdHraOFQdi5OUEyz7VmYspEJcw=
Subject key identifier:   11:67:DF:AB:2F:47:FF:8F:09:7D:95:B5:6B:1E:5B:CB:3E:6E:B6:3D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA8CD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa72458b-164b-44de-8e45-f9036899151d/3bcd6035acd574195e49d3f93bffd1f9ad4550ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa72458b-164b-44de-8e45-f9036899151d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jun 2019 12:37:32 +0000
Certificate not after:    Fri 26 Jan 2024 19:58:40 +0000
Subordinate resources:    AS: 267807
                          IP: 45.173.68.0/22
                          IP: 2803:a060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14322901 (0xda8cd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 18 12:37:32 2019 GMT
            Not After : Jan 26 19:58:40 2024 GMT
        Subject: CN=3bcd6035acd574195e49d3f93bffd1f9ad4550ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:6c:9f:18:5b:82:db:d8:4b:21:ec:56:ff:
                    f1:88:24:85:ed:c9:74:34:57:d4:b3:c2:62:77:0f:
                    db:11:8d:2c:3c:b6:76:7e:19:0c:2c:a9:f4:91:2f:
                    4e:08:09:f3:d5:99:dc:e5:08:a4:7d:34:cf:3b:7e:
                    78:85:5b:82:13:2b:bb:e9:04:e3:f8:f6:5e:51:2b:
                    6b:8d:e7:65:40:e3:b3:61:e0:8e:bc:89:5a:63:53:
                    e7:2a:6a:37:8b:14:c2:bb:69:ba:1a:f1:eb:b5:77:
                    c8:64:c7:96:f1:7c:00:0d:39:47:72:40:ba:6f:1a:
                    d2:c2:7b:ce:1e:61:b2:01:e5:e4:c4:be:dc:d3:24:
                    28:f8:47:f7:5e:18:b8:a5:c4:04:3b:2b:c5:36:f2:
                    20:22:9a:64:4c:a2:ed:78:71:a3:ec:01:b4:88:8b:
                    bd:b3:9b:9a:85:bf:5e:13:57:2d:87:31:c2:eb:c1:
                    4b:3d:6e:64:11:1a:70:ae:ea:66:a1:41:cd:fa:c4:
                    f4:b2:12:b5:6f:eb:84:e3:54:88:8d:14:88:73:82:
                    58:58:ab:15:97:45:28:dc:ae:57:6c:b3:66:3a:df:
                    08:b5:d9:63:17:84:0a:d6:2e:46:51:08:7e:be:02:
                    db:65:a7:45:5f:84:19:e8:fc:99:d8:4d:68:fe:7f:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:DF:AB:2F:47:FF:8F:09:7D:95:B5:6B:1E:5B:CB:3E:6E:B6:3D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa72458b-164b-44de-8e45-f9036899151d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa72458b-164b-44de-8e45-f9036899151d/3bcd6035acd574195e49d3f93bffd1f9ad4550ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.68.0/22
                IPv6:
                  2803:a060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267807

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:51:31:51:48:9b:e7:ba:5a:57:80:e2:35:ae:8b:8c:42:
         ca:ac:93:04:83:98:d8:70:aa:0e:a5:be:2d:af:3d:15:90:df:
         19:ae:9d:6b:52:60:18:4c:cc:93:44:db:92:06:08:d6:6e:37:
         a4:ad:81:bd:fc:ed:e4:e6:27:54:b3:f2:bc:55:57:37:0f:6e:
         7e:7f:20:90:d8:52:05:59:b1:e3:ad:43:3b:b1:7b:5d:92:26:
         08:a3:10:4b:b8:db:c0:58:df:ee:81:e4:5d:a2:27:5f:86:3b:
         e1:9e:40:fa:f1:18:a1:73:e9:a1:52:ec:be:7b:ec:54:06:2e:
         d5:90:6e:31:65:99:09:75:83:76:1a:9f:bf:a3:44:9f:e6:03:
         2e:5d:5f:19:96:4c:78:7c:c8:e9:db:ed:88:ce:34:a1:29:72:
         30:46:c8:a5:86:f8:6e:c2:08:07:52:3d:9a:8d:d8:5a:d7:c1:
         e8:67:a7:7d:2e:79:b2:84:4a:18:23:5f:c7:8a:7e:24:ea:89:
         ea:66:3c:d0:4d:8a:68:6f:e0:62:81:25:4c:af:1b:f0:1b:a6:
         e6:0d:09:5e:bb:4d:f2:a9:55:9e:01:b8:0d:7f:77:48:ae:b1:
         27:1d:04:1a:ef:87:16:e3:42:5d:8a:63:28:72:20:62:16:aa:
         27:9e:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----