Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
File:                     4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer (raw, json)
Hash identifier:          UmVycbOWokEi1+TYLf47x1kvbM1jDv54Xg52Q5rxdc4=
Subject key identifier:   23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE0314
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 09 Dec 2018 03:24:18 +0000
Certificate not after:    Thu 18 Jul 2024 20:32:13 +0000
Subordinate resources:    AS: 267679
                          IP: 45.162.60.0/22
                          IP: 2803:6ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15598356 (0xee0314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  9 03:24:18 2018 GMT
            Not After : Jul 18 20:32:13 2024 GMT
        Subject: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:53:5d:c2:b8:d9:62:7e:a5:58:bd:42:60:
                    09:53:b9:ab:8a:b7:36:19:7c:f5:66:f0:8d:18:8a:
                    27:cc:3d:ff:60:c6:b2:b0:e9:c1:8d:7f:39:f1:5b:
                    8c:a6:a3:ae:32:07:6d:70:c0:a0:44:57:0d:03:16:
                    de:b3:11:9f:33:f9:e1:71:e5:a1:c2:e9:02:a7:3d:
                    4a:96:0a:80:17:3e:0e:00:4c:eb:95:24:6c:6b:e3:
                    fe:6d:b8:28:7b:eb:f1:c5:c0:c5:b4:ab:4e:97:c5:
                    66:f1:27:ad:8c:2a:50:74:b5:37:63:3f:a3:24:60:
                    90:eb:33:74:c3:04:5f:09:c0:d3:36:6f:6f:46:fa:
                    76:52:90:4a:cc:db:ba:92:20:6f:eb:9f:94:5f:d2:
                    e4:fa:73:9f:d9:5b:8c:4b:96:9e:1a:1e:b7:fe:6a:
                    29:d2:3d:55:0a:ee:76:d7:c2:e0:9b:16:2b:15:2c:
                    93:9f:a3:8f:55:78:da:ac:29:db:04:bb:34:e2:12:
                    c2:7e:5b:3b:01:04:14:05:f4:5a:25:c5:92:4b:82:
                    31:c3:d3:f0:4d:c6:3b:c0:82:bc:d5:90:96:df:e2:
                    35:63:2a:25:8c:13:08:1e:ea:f3:42:82:a0:87:94:
                    c2:d6:e3:c5:fc:66:fd:9c:44:26:a4:0f:a1:35:d4:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/22
                IPv6:
                  2803:6ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267679

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:88:dd:60:a0:09:b7:fa:d3:9c:f1:58:bf:32:2c:a5:5d:
         01:79:b5:27:99:80:03:e9:3e:d5:5a:19:af:4b:4f:ca:b5:f2:
         2e:ad:ec:04:76:19:a9:ae:24:c3:b5:ce:af:13:a9:25:b6:c2:
         6a:d5:e4:54:f8:ac:bd:54:63:32:b4:16:49:30:f7:fb:4d:bd:
         ec:1d:3f:68:35:b8:39:58:a7:20:0c:3c:3b:77:1f:39:c7:dc:
         cf:1a:b2:cc:f3:72:db:7a:97:54:e2:2d:42:ad:2a:d7:9b:8e:
         cf:d1:29:1d:90:27:a7:28:9a:7a:41:9e:ac:5d:1a:0a:f8:d9:
         c0:ca:19:22:4b:1f:f3:89:7c:e5:5c:13:d7:fb:2e:5e:48:60:
         75:66:de:e1:39:5b:a1:ae:67:44:b1:ae:99:07:86:33:21:8c:
         76:97:5e:7e:df:bb:2c:f3:78:cb:c5:5c:37:92:a2:90:df:51:
         8c:c8:00:c2:f1:31:22:bc:b2:ec:fb:f9:ad:e3:13:3a:e7:d9:
         ef:a2:bb:4a:87:ba:3f:9d:e7:83:9f:24:41:ba:84:fb:59:a4:
         2f:c2:4e:fc:e9:d6:8e:00:93:af:39:f8:d9:1f:78:3e:29:bf:
         89:99:c3:1e:8f:53:39:82:73:57:58:ef:48:c8:32:82:ef:30:
         e0:a1:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----