Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
File:                     4245076a2cc4607485f913342504c58cdd14441f.cer (raw, json)
Hash identifier:          DWMhUMbyoCmpQlY/WblpWFrJHetFQ4IgoYto8anDFyg=
Subject key identifier:   AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7DBDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 May 2018 12:19:06 +0000
Certificate not after:    Sat 23 Dec 2023 14:14:32 +0000
Subordinate resources:    AS: 61503
                          IP: 138.36.252.0/22
                          IP: 2803:2f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14146525 (0xd7dbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 12:19:06 2018 GMT
            Not After : Dec 23 14:14:32 2023 GMT
        Subject: CN=4245076a2cc4607485f913342504c58cdd14441f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:a7:bb:5b:0f:e9:5a:1b:2a:16:8e:ad:03:
                    50:e8:8f:c6:e9:4f:47:0e:29:4c:b0:db:5c:b1:9e:
                    c7:d3:95:ac:89:27:64:bd:45:fb:83:06:3e:6f:04:
                    9a:f7:a1:cc:b6:b0:d7:6c:2d:0a:45:55:9e:01:13:
                    78:3a:17:5e:cd:2b:b6:db:60:4e:fa:91:02:ff:e7:
                    3a:cd:99:19:ff:39:09:d9:52:4f:5f:9c:ec:bb:85:
                    19:a8:21:27:64:f7:40:f4:11:fb:7b:85:2a:b5:25:
                    74:42:8a:fb:19:d4:a5:f8:29:2f:14:1a:10:ac:69:
                    a7:00:1a:57:bf:80:3a:59:01:a3:de:0e:df:e7:80:
                    13:fd:4b:4e:35:94:01:06:76:46:f7:17:93:e8:2e:
                    9b:c1:ae:f6:15:ae:06:82:24:c3:98:0b:be:b9:4d:
                    d3:49:87:cc:c0:d3:a0:c4:2b:44:35:9b:e9:ee:8e:
                    85:31:4b:89:f8:b7:d9:03:42:68:29:4f:a8:39:f9:
                    b5:2a:58:22:47:fe:3e:f6:6c:22:7a:62:8f:fb:16:
                    26:95:bd:cc:0f:7e:58:90:2f:fc:3c:ac:31:f2:13:
                    5c:8c:f3:57:3e:72:d8:91:af:2b:d2:83:9e:a8:f1:
                    91:c5:f0:78:00:38:f8:11:2b:cc:d9:c0:2b:7a:46:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22
                IPv6:
                  2803:2f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61503

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:13:e1:e8:b7:da:a1:15:2b:1f:da:41:eb:4a:1c:7b:48:
         5c:c8:e9:b1:f6:6f:26:7d:61:7e:76:03:1e:e0:06:08:02:12:
         b4:9d:74:fb:d2:37:8b:d3:9a:46:1b:ff:4e:87:9f:d0:08:86:
         ea:3c:fe:87:8e:1c:e1:49:12:53:d8:d5:69:17:83:5d:f9:d9:
         31:b1:31:4b:59:85:db:88:dd:bb:47:72:17:42:2c:d3:f9:82:
         d0:65:46:51:f6:3a:3a:78:7a:f3:39:e4:d7:7d:b1:29:66:10:
         24:e0:69:1f:91:26:c6:c8:66:28:fb:97:e0:6f:6d:e0:36:cd:
         4a:39:2a:63:07:27:4f:d9:dd:04:c2:43:c5:d5:9b:9a:14:49:
         fd:74:82:fd:93:7f:1f:4f:74:61:0f:06:70:9e:3f:63:38:0a:
         a4:58:29:89:e7:32:cb:a2:d0:88:e1:be:0e:31:41:74:f5:f1:
         d3:25:0b:aa:d1:c4:f6:b5:0f:4e:0a:e7:b7:c3:53:81:ea:ed:
         0d:12:22:ab:33:65:89:3f:f0:31:86:2d:e9:9f:5b:39:f9:de:
         07:05:46:82:7a:cc:48:30:49:43:2b:e0:66:5b:d2:cd:05:5c:
         ec:c4:e8:1d:64:7d:9d:b5:f6:4d:f5:c0:7d:c6:72:39:98:f3:
         45:d3:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----