Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
File:                     3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer (raw, json)
Hash identifier:          26KFZXpqTqEcrrpT8a2MnikvSsvEuUvSbyq+dGtSCC0=
Subject key identifier:   DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D54BAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:28 +0000
Certificate not after:    Tue 21 Nov 2023 16:41:06 +0000
Subordinate resources:    AS: 28005
                          IP: 138.118.124.0/22
                          IP: 190.102.56.0/21
                          IP: 2803:b840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13978542 (0xd54bae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:28 2017 GMT
            Not After : Nov 21 16:41:06 2023 GMT
        Subject: CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:a5:bb:b3:7f:3d:86:b9:c9:08:3a:b6:0c:
                    6a:cf:f3:a7:15:02:27:31:0a:7d:f2:af:fd:7b:c1:
                    f8:4c:33:9b:53:d1:7d:84:4e:fb:4c:a5:ec:aa:63:
                    ca:24:81:a0:bd:e2:00:3c:4e:6a:08:fb:e5:c2:60:
                    f4:e4:89:fa:65:7f:c0:73:e4:c4:b9:fb:1a:38:a3:
                    31:2a:15:3c:8b:dc:33:ce:41:26:eb:34:09:fe:c6:
                    eb:19:b3:9c:ae:a9:76:7f:ab:cc:b8:42:3b:17:56:
                    04:bf:38:09:93:32:69:f6:87:5f:46:f8:3f:80:b6:
                    4a:97:dc:d5:45:cc:cc:00:f8:2a:19:e5:50:b5:23:
                    af:91:f4:17:7f:75:19:6f:1e:c5:96:4d:59:f1:49:
                    b5:60:2e:1f:8d:5e:4b:42:e8:76:1e:5e:f4:12:29:
                    35:5c:e5:6c:c4:00:a2:33:da:3a:55:34:3e:f9:67:
                    b8:57:79:7d:c0:a4:39:be:d7:cd:de:5f:68:5a:20:
                    d8:1e:70:50:38:93:fc:9c:c8:44:ab:01:e4:69:a5:
                    3a:69:48:21:a6:c3:ac:f6:97:18:f7:79:15:7d:e6:
                    a5:86:6f:5f:fa:f3:fd:07:b6:f2:37:fd:3a:d9:61:
                    00:2d:eb:dc:64:b0:b0:33:59:c7:58:52:a2:53:61:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.124.0/22
                  190.102.56.0/21
                IPv6:
                  2803:b840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28005

    Signature Algorithm: sha256WithRSAEncryption
         53:11:7c:6a:07:6f:1f:ca:91:e1:0e:32:a8:f2:14:45:34:e2:
         8b:a6:5e:7a:0e:2b:7b:40:c8:3a:06:65:77:9f:b8:07:b0:b4:
         4d:ef:31:b9:ce:27:6d:5e:05:4f:3a:72:07:63:95:b0:c3:03:
         06:7f:ba:77:d2:e2:c1:f0:94:c8:00:c7:0c:70:e5:d1:96:f6:
         9b:6e:3e:e8:8f:4d:47:66:74:fb:eb:15:d0:28:a2:fe:6f:5a:
         ff:fa:40:96:66:87:53:5e:57:b5:98:42:58:36:23:a3:31:49:
         ca:fc:a2:e6:33:f7:e8:d3:44:5a:49:9d:dd:ae:73:b5:dc:8c:
         6f:3a:3a:f9:41:c3:4e:ff:db:95:df:71:fe:cd:8a:7c:39:2a:
         13:a0:fe:cf:1e:60:c9:ea:56:4b:35:ac:e0:73:dd:cc:82:f4:
         d6:26:ac:4b:27:76:7b:53:df:27:4a:e6:fb:0e:fb:1d:d8:1e:
         4d:db:92:94:e7:9c:90:80:45:47:4f:02:1f:69:13:25:ef:50:
         8f:9d:08:7b:4c:0b:fd:a2:1d:e4:4a:ea:83:d5:2d:95:2d:f4:
         ab:7a:3c:5c:36:3e:e7:f2:ea:43:38:68:0b:b3:7d:40:e9:8d:
         a0:b2:99:85:ca:67:7d:11:70:1b:c9:bb:6b:93:f5:35:06:49:
         8c:8e:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----