Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer
File:                     3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer (raw, json)
Hash identifier:          7M+LdJOEzICPvTUaQkqCVLzLSoA8eFqEv+Fpb8r/nok=
Subject key identifier:   5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9E354
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2017 17:14:17 +0000
Certificate not after:    Fri 18 Oct 2024 19:36:20 +0000
Subordinate resources:    AS: 266679
                          IP: 45.228.52.0/22
                          IP: 2803:f920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16376660 (0xf9e354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 20 17:14:17 2017 GMT
            Not After : Oct 18 19:36:20 2024 GMT
        Subject: CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:d8:94:54:6c:0f:44:f1:3c:2e:2c:8d:ad:
                    0a:24:38:dd:25:90:8a:65:20:8d:0b:53:4b:df:c7:
                    6d:e1:6c:38:8a:48:c0:69:5e:40:9e:40:e6:00:a8:
                    3d:fd:5f:b4:33:ff:74:bb:4d:54:5d:32:aa:73:66:
                    08:23:07:d4:cf:fe:d9:33:9d:b6:63:00:7e:f2:a3:
                    81:33:76:48:a3:55:39:de:4b:03:42:2c:fa:87:93:
                    05:cf:b6:e8:4a:42:f5:ba:11:85:7d:8f:47:ce:b3:
                    ed:c7:fb:26:6e:e7:68:1e:fb:25:e8:15:bf:be:29:
                    96:39:41:62:2c:08:ec:d9:e5:a8:42:ab:06:16:ed:
                    77:e3:c4:44:fa:e1:6a:22:0b:d1:d5:98:c1:4a:fd:
                    0c:4e:74:03:4e:60:a2:3d:0c:5e:8a:f9:3b:b6:4f:
                    0f:57:c7:1d:2d:64:1a:df:66:a3:5b:60:86:57:26:
                    85:b3:7b:35:7d:e6:88:cc:56:91:1c:a3:b6:62:9e:
                    cb:9a:e3:da:c5:f6:2e:e0:64:3a:9f:ea:3b:ee:c7:
                    73:61:19:de:3c:67:25:94:d9:63:3a:8a:4b:f1:5c:
                    34:39:2c:d2:bd:5b:d5:c7:f5:b3:2a:e9:74:0d:b5:
                    97:b1:c2:ba:73:9d:90:2a:5f:b7:0e:5c:86:20:e4:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.52.0/22
                IPv6:
                  2803:f920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266679

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:71:e7:ae:1b:df:a4:da:08:8c:19:b2:eb:2b:63:df:ae:
         69:53:4f:2d:43:e1:f2:9d:67:e0:28:57:ad:3e:64:ec:13:c6:
         d3:71:8b:5b:51:e2:9b:8f:26:a4:de:c9:8e:65:f0:14:80:49:
         9d:38:33:ef:9c:e1:c6:29:14:47:1a:65:96:48:73:b4:9f:5d:
         06:ef:a4:ef:03:3e:d1:01:c8:a0:2b:e1:50:74:9b:ef:33:5e:
         f8:57:58:9f:c4:5f:48:86:ea:53:51:85:ad:5f:4a:b1:1c:2c:
         50:b4:c3:af:cb:cc:57:57:f8:5c:31:e7:8b:5f:39:5a:5f:66:
         ec:34:52:dc:35:e7:b1:56:02:8a:11:ce:b8:70:81:7b:05:34:
         2f:85:c3:ce:b9:e4:da:9e:c9:1a:25:40:20:2b:53:77:2f:85:
         20:49:f8:f5:d5:39:b2:a3:32:0f:ee:16:d2:65:69:c7:96:13:
         36:05:6e:a1:89:e3:3f:1b:a9:59:76:0f:d8:6a:9b:d2:99:43:
         c4:24:00:fc:15:38:c2:af:8b:32:21:21:e5:09:38:69:2b:ba:
         d6:13:78:8a:95:95:23:f4:fc:77:e1:66:c9:de:e5:78:c4:f0:
         9c:e7:c9:77:26:b3:b6:70:77:48:7a:f6:63:77:2e:f5:78:91:
         e8:f8:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----