Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer
File:                     4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer (raw, json)
Hash identifier:          hsq368TtjKJS5HIydFnSLP6X93xWNdb+qEbuZgTVbM4=
Subject key identifier:   8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C16310
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Apr 2018 15:13:17 +0000
Certificate not after:    Wed 29 Nov 2023 22:50:52 +0000
Subordinate resources:    AS: 266734
                          IP: 45.230.216.0/22
                          IP: 2803:4320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12673808 (0xc16310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 15:13:17 2018 GMT
            Not After : Nov 29 22:50:52 2023 GMT
        Subject: CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:e3:80:e5:fc:ec:aa:46:7f:eb:b1:f0:0e:
                    5f:e9:7e:62:52:36:3f:e4:0e:2c:45:d3:17:06:3d:
                    ca:07:94:b4:e5:21:4f:3c:3f:66:9e:7d:b2:92:98:
                    90:ed:f4:e6:50:14:65:ea:72:97:f8:2e:77:29:a0:
                    d6:53:44:ce:7b:02:f2:13:42:6b:00:2a:24:c8:0c:
                    fd:19:3e:8a:b4:26:d7:9a:3f:69:69:04:27:4b:17:
                    4a:db:87:3e:b2:66:f8:d9:4f:3f:6f:b0:96:9b:d0:
                    e2:d9:30:52:a1:2e:b3:3d:9b:6d:ec:9c:43:e2:0f:
                    c2:d9:b9:06:87:dd:39:e8:a6:d6:c8:5a:17:52:85:
                    b2:bb:39:28:ca:f6:d6:db:bd:cb:6d:f3:c8:9f:f5:
                    9e:50:bd:27:35:5f:d7:51:e6:aa:4d:36:29:8e:b2:
                    34:16:84:4e:0a:a2:7c:5a:8b:ca:4a:0e:28:19:19:
                    2f:58:71:aa:ac:32:67:fa:5c:c4:80:fa:93:a4:41:
                    c5:84:93:e9:46:3f:aa:d1:31:36:87:7b:f8:51:5f:
                    35:d9:5e:c6:c4:a7:16:d6:87:69:34:dc:46:8c:8d:
                    f8:ac:ac:19:91:5d:78:57:5d:2c:a8:0a:cf:31:d7:
                    70:38:eb:1a:13:9e:3a:2d:ba:87:f3:15:2e:b4:bb:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.216.0/22
                IPv6:
                  2803:4320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266734

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:77:03:cf:89:15:89:1a:68:6c:1b:a0:c9:a2:cb:63:b7:
         50:3e:bd:69:51:46:7a:d5:fe:be:4d:a5:c8:1e:a8:b1:f9:7a:
         43:ba:45:c7:20:23:e6:25:4b:dd:d8:45:80:79:16:18:ca:40:
         e9:26:16:be:a4:b7:70:2c:86:d4:81:7f:c2:18:34:e3:d8:b4:
         c0:fa:c0:eb:7c:a0:ab:9a:34:e9:34:fd:27:8e:fa:04:54:7c:
         29:ad:48:b5:0f:bd:c7:f7:a7:b4:64:7f:4d:5e:d3:ce:b7:5c:
         fc:45:c5:2c:2d:44:dc:c4:f9:1a:91:e0:0f:6c:3c:1b:75:5f:
         5d:27:f7:ff:81:7c:fd:b2:f5:c6:b1:89:22:47:32:80:ae:67:
         b2:ab:df:79:4e:a4:fc:c2:b0:dd:4d:4a:46:45:ef:80:cc:c2:
         0a:fd:f9:5f:19:98:64:db:12:ce:25:92:46:f2:94:bc:2b:f8:
         be:37:99:7b:d6:2d:80:a8:9c:36:95:ce:8d:bd:1f:a6:f0:87:
         07:2a:f2:78:30:16:1f:01:23:48:6e:1d:cd:63:1f:46:41:31:
         fc:c4:50:84:da:f7:f2:59:9c:d3:af:1e:61:7f:96:14:6b:c2:
         8c:7f:eb:5b:e2:88:a3:24:f5:d8:ca:27:62:49:cd:f9:08:c2:
         a2:96:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----