Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cb600ffe26a656b54e50fffe6c5f16afd851756.cer
File:                     3cb600ffe26a656b54e50fffe6c5f16afd851756.cer (raw, json)
Hash identifier:          UGG5eow5tHYnNnQQamKqBS3kBEmg+KU+Wt8X3ZvOyRA=
Subject key identifier:   0D:80:3E:6E:EA:5D:F3:5E:4A:66:77:BD:9B:6E:1F:17:2F:8E:F1:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDAC69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/3cb600ffe26a656b54e50fffe6c5f16afd851756.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Nov 2018 20:17:21 +0000
Certificate not after:    Mon 04 Mar 2024 21:41:24 +0000
Subordinate resources:    AS: 61498
                          IP: 138.117.136.0/22
                          IP: 2803:e840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14527593 (0xddac69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 27 20:17:21 2018 GMT
            Not After : Mar  4 21:41:24 2024 GMT
        Subject: CN=3cb600ffe26a656b54e50fffe6c5f16afd851756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:2a:d2:c1:8f:02:05:ec:d3:09:50:9c:51:
                    c7:86:52:01:06:30:de:c8:b2:ce:0d:3a:50:13:69:
                    b9:df:a8:44:8f:d3:35:4e:45:bb:fe:fe:88:93:4a:
                    23:f6:51:02:d7:34:d2:d1:8e:35:75:99:1c:4f:4a:
                    c0:97:bd:b8:2f:ed:8c:d8:da:8f:77:a9:44:2a:a9:
                    bc:9d:e0:e4:a8:69:15:dc:e4:09:04:1c:ab:ac:62:
                    2d:92:25:03:65:dd:c3:9e:d9:9c:c0:db:df:9d:73:
                    3b:45:d1:97:d0:21:88:50:4e:d3:69:ef:ba:57:74:
                    da:19:23:b9:62:aa:c0:f5:d8:55:59:f6:88:4f:70:
                    0d:61:a2:83:32:68:6f:e9:e0:45:e9:7b:2c:75:f0:
                    59:f3:cb:c2:74:27:1f:14:06:48:03:47:f9:47:a4:
                    ee:ec:11:09:24:f9:38:cf:5a:5f:4a:55:47:1d:8c:
                    80:29:f5:6b:52:cd:ab:f2:8f:46:f6:c5:fe:0e:3b:
                    ba:b8:78:3e:eb:96:b3:4a:3a:19:86:5f:44:34:c6:
                    e6:e1:a0:56:55:33:af:85:00:79:e4:75:c2:32:6b:
                    cc:cb:19:a5:1e:95:57:b2:c6:21:61:ac:51:82:fc:
                    9e:73:57:e9:74:b0:1b:ac:97:64:ef:f3:1a:72:d2:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:80:3E:6E:EA:5D:F3:5E:4A:66:77:BD:9B:6E:1F:17:2F:8E:F1:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/3cb600ffe26a656b54e50fffe6c5f16afd851756.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.136.0/22
                IPv6:
                  2803:e840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61498

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:33:22:da:07:99:07:65:97:c9:a2:af:c1:41:84:a2:34:
         ee:39:45:d4:23:39:32:ef:c7:b9:13:9e:dd:22:e7:06:ba:9d:
         05:cb:ba:90:10:88:29:f9:94:11:ff:d8:35:67:db:5a:52:71:
         3c:ca:1a:4e:84:47:1d:34:29:f3:3f:56:52:73:48:a0:e2:fa:
         05:80:b8:7d:92:07:34:e0:7d:c4:34:37:13:5c:23:31:42:3d:
         34:b7:92:3e:f1:62:c0:ca:c8:6f:bb:54:1d:33:e4:f0:40:55:
         1c:34:92:8b:db:57:af:89:98:f4:a1:91:0d:ff:6f:67:06:80:
         d3:79:8a:d4:4d:a0:f7:ec:e8:cf:27:fb:86:cc:98:2f:5a:63:
         d1:45:e7:b1:8c:de:a9:26:8a:61:2a:2f:4c:5e:71:37:f2:0f:
         d3:6b:44:25:d6:b7:dc:0f:aa:ec:0a:8a:ac:83:30:f3:3f:47:
         ab:91:88:d4:00:28:51:ad:48:fb:b2:9f:cc:99:6d:37:8c:22:
         5e:a6:de:cd:e6:6d:44:4d:a9:63:ec:96:ad:78:e4:30:3d:01:
         09:f5:b9:31:cc:c0:9b:3d:2c:d1:1d:84:fb:7d:6a:f8:d5:64:
         67:3b:1c:98:39:7a:9a:34:71:d6:c9:e6:89:8c:1c:b9:0d:a0:
         23:e8:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----