Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f2565a824dbb76a03750769f8d2e74453e03358.cer
File:                     3f2565a824dbb76a03750769f8d2e74453e03358.cer (raw, json)
Hash identifier:          3CZw01E2owHsXgDuWbwgp4ThmL7pk3Iv9ZZa17Gvw9g=
Subject key identifier:   CA:93:03:10:3A:C6:92:99:D6:AF:10:E6:7E:FA:32:CD:8A:89:D8:1F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6A367
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/3f2565a824dbb76a03750769f8d2e74453e03358.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2019 04:06:06 +0000
Certificate not after:    Wed 06 Dec 2023 20:46:45 +0000
Subordinate resources:    AS: 267769
                          IP: 45.170.240.0/22
                          IP: 2803:7ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14066535 (0xd6a367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  8 04:06:06 2019 GMT
            Not After : Dec  6 20:46:45 2023 GMT
        Subject: CN=3f2565a824dbb76a03750769f8d2e74453e03358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:95:47:28:56:d9:bf:1c:a9:97:3c:96:a1:
                    75:77:15:ff:26:60:10:a9:df:ba:26:1f:c6:03:74:
                    d3:b8:c0:c1:27:50:07:eb:b0:09:31:5d:4c:27:2a:
                    28:9f:70:56:40:57:76:3c:2d:01:82:d0:37:2e:97:
                    17:c1:a3:6f:2b:4d:67:33:aa:4a:fa:46:ef:84:d7:
                    14:3a:2b:1d:5c:97:6c:db:e3:dd:ef:47:17:97:ad:
                    9a:fb:d1:74:a0:11:ed:2e:4b:9d:3a:39:7a:84:44:
                    5d:30:56:0d:e4:ef:18:da:21:bd:07:67:ea:89:58:
                    b4:ce:24:52:22:ce:db:0d:34:ff:53:65:96:fc:64:
                    99:6c:ec:fb:a4:e6:b9:e4:2e:2b:5d:7a:9a:76:95:
                    c2:c5:70:7a:9d:0c:d3:8f:70:fa:46:e7:f7:58:28:
                    c3:15:b7:73:7c:ff:f6:0e:cb:f6:51:01:03:54:63:
                    bf:93:c7:ac:45:9a:19:fc:74:e3:c1:cd:ab:95:67:
                    95:d9:c2:9c:65:a9:91:58:78:0c:a5:8f:0b:b8:c4:
                    08:01:5d:90:e8:8b:ca:0d:92:4b:d8:41:e2:ea:fa:
                    60:c8:54:f3:65:56:f8:ff:aa:fe:2b:46:b8:49:17:
                    f7:b7:a9:ca:24:4e:79:17:5d:50:67:1e:72:65:d7:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:93:03:10:3A:C6:92:99:D6:AF:10:E6:7E:FA:32:CD:8A:89:D8:1F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/3f2565a824dbb76a03750769f8d2e74453e03358.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.240.0/22
                IPv6:
                  2803:7ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267769

    Signature Algorithm: sha256WithRSAEncryption
         87:05:89:45:cf:f4:e6:1a:03:f5:6c:f4:04:d6:ab:d7:d3:9d:
         4e:b0:1b:89:f9:ab:8b:ca:95:47:65:96:72:fe:7f:d4:aa:78:
         d6:e2:84:27:82:34:cb:6a:27:a0:0d:2b:1b:e8:74:e2:8a:0d:
         1d:70:85:d5:8f:b5:39:3b:c1:9d:7d:78:07:2a:69:3a:c3:35:
         a9:06:38:b3:c5:29:13:c2:e0:c1:fa:f0:00:49:db:ac:78:8f:
         fc:33:6f:89:f9:7a:53:a9:2c:93:aa:8a:a4:6a:25:68:20:85:
         ce:3f:42:87:99:76:08:94:7c:90:d6:32:f4:7c:01:64:1b:a6:
         3a:10:95:72:8a:69:51:6a:c2:72:42:4d:c9:fb:20:d4:6f:b5:
         80:47:6c:c7:ec:64:55:da:05:4e:45:67:7d:f7:e1:55:4b:0b:
         94:fd:9c:3d:1c:99:0c:ab:8b:25:67:ad:82:c2:f1:d1:c1:f3:
         52:3d:44:b3:9a:32:ec:28:66:46:c3:63:e1:8b:05:98:64:79:
         21:cb:68:eb:d6:09:bb:be:73:ca:34:1d:e7:11:92:ff:f0:4a:
         00:af:27:52:96:67:88:a4:7c:5a:5f:4b:cb:0c:ed:8b:55:5a:
         1c:ec:50:29:66:f6:01:bc:ad:5f:c8:d0:e2:8a:c4:90:eb:a0:
         d8:01:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----