Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer
File:                     45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer (raw, json)
Hash identifier:          7/7xk9UCAbgSzRE8LWuXZbWSnYMXJAevtAW1GcbM1mA=
Subject key identifier:   A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010551E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Apr 2018 18:13:15 +0000
Certificate not after:    Thu 26 Dec 2024 16:14:32 +0000
Subordinate resources:    IP: 45.231.148.0/22
                          IP: 2803:cb20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17125859 (0x10551e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 18:13:15 2018 GMT
            Not After : Dec 26 16:14:32 2024 GMT
        Subject: CN=45c39d9d136d50b95ff0545ebeb34be8bcb8e562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:df:d4:7e:0d:79:34:ca:7f:02:c8:39:97:
                    c0:55:27:44:13:ed:6c:e6:ab:4a:b2:72:3b:f6:23:
                    c6:2a:de:ce:96:12:e8:f0:a7:d6:b2:49:98:69:f0:
                    bb:2d:b6:49:dd:dd:5e:e5:30:93:48:08:f1:7a:63:
                    5c:82:1e:e2:cd:12:2d:94:a3:54:5a:3a:f9:58:ce:
                    e4:85:30:4d:7f:13:df:c2:f1:c1:67:92:b0:31:40:
                    70:47:15:f2:44:5e:b1:a4:f9:fa:8e:6e:bf:c7:3c:
                    bb:53:78:0d:1e:6c:1e:79:9c:ff:e3:c1:17:3f:b8:
                    c1:13:f6:1c:ac:57:8f:22:8f:c3:47:f7:73:f9:88:
                    ed:48:9e:2f:b9:ce:49:fd:25:4b:4c:f5:a0:60:36:
                    d9:7e:77:80:5f:81:2d:da:63:1d:50:17:b3:00:5b:
                    73:e7:ec:0d:e0:0e:43:22:27:f2:d7:e8:54:9a:ee:
                    f8:e3:00:d8:0b:6c:14:69:82:cd:00:ea:55:17:1f:
                    b1:05:79:d2:1f:6e:28:3b:52:ad:75:09:a9:ae:fe:
                    4a:54:9f:1e:b0:79:d9:69:49:a9:9a:2c:e3:d3:0c:
                    d4:c3:99:f7:65:e0:0b:71:66:9a:64:5d:53:9d:45:
                    5e:e3:e2:eb:fb:ca:b8:30:c4:b8:05:fb:09:aa:2f:
                    aa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22
                IPv6:
                  2803:cb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:a9:c5:15:fc:5a:90:b3:90:98:4b:cb:c2:68:df:7e:6f:
         c8:e8:1b:63:c8:d8:96:70:f1:6d:0e:fd:6c:1e:38:e8:31:27:
         c2:5a:5f:5e:1d:19:6b:a1:66:14:2a:f6:e2:da:ee:f7:47:fa:
         ab:27:f9:50:73:e7:44:4a:17:91:5c:29:e7:6c:fd:87:fa:fe:
         20:8c:13:1c:86:20:dc:23:e5:b3:4d:4e:27:65:ff:f3:5e:e1:
         54:12:10:93:fe:c8:86:b7:ec:8a:69:37:08:e4:d0:99:6b:63:
         38:95:dc:f9:aa:fc:16:69:d3:47:d2:20:de:c6:61:d6:45:da:
         a0:74:b5:4f:00:e3:51:1b:19:b6:af:7e:42:bd:65:d4:f6:a2:
         e6:40:25:fc:04:77:e1:7e:fe:93:1f:1b:f2:bf:fe:dd:8b:c1:
         14:2d:15:5e:ba:d9:75:86:64:ec:a7:e6:13:23:53:73:b3:1e:
         69:9c:60:19:58:9d:39:40:9f:38:0c:01:c8:6c:27:9b:f0:59:
         69:c7:6d:64:14:a7:e2:aa:a9:a1:a9:d0:64:35:98:a0:8c:e5:
         5e:72:0b:e0:17:1f:95:7a:2c:66:9c:de:cb:61:83:b1:9f:76:
         45:49:75:f3:ca:30:da:a3:32:3a:b5:35:99:38:2d:6b:04:cb:
         ff:96:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----