Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
File:                     4d7ccceacdc123bdc2570502f568e65109ac06d3.cer (raw, json)
Hash identifier:          iZQbzOh5F38xaQfDVvTADAL5+mTRwbSdxDnd4MwXxZ4=
Subject key identifier:   4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E22A36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Aug 2018 17:27:00 +0000
Certificate not after:    Sun 21 Apr 2024 23:03:23 +0000
Subordinate resources:    AS: 266834
                          IP: 45.238.56.0/22
                          IP: 2803:4ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14821942 (0xe22a36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 17:27:00 2018 GMT
            Not After : Apr 21 23:03:23 2024 GMT
        Subject: CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:04:db:4e:08:58:c0:c0:b4:ad:13:08:34:
                    df:3b:dc:81:5e:ee:b0:66:1a:ec:4e:c3:a7:31:59:
                    92:1d:47:eb:dc:61:b1:0b:73:30:69:07:32:ea:91:
                    c5:91:fb:25:4d:f9:17:d2:37:8c:08:d0:d4:f2:52:
                    06:7f:7a:91:07:0e:9d:3e:73:3c:b2:c1:d9:02:52:
                    78:dc:61:5a:2f:45:d5:8b:fa:0b:22:2c:d2:15:76:
                    6a:a6:1c:dd:53:c2:15:52:b5:e8:f4:1b:fc:f0:b5:
                    9f:dc:26:34:14:a5:e5:81:43:c4:cc:a5:a9:f5:16:
                    76:2d:82:49:12:b7:49:00:5e:7f:8c:59:a1:64:43:
                    9b:91:d8:9d:77:b1:59:69:c0:70:5e:8d:d5:35:c7:
                    8d:3e:7f:bf:78:0e:ef:3e:4b:89:79:ca:78:87:9f:
                    a8:05:c9:44:c9:e6:b0:34:3e:5b:ac:0f:21:d8:32:
                    15:af:a6:12:c1:a3:ef:23:6b:80:d2:d3:64:09:27:
                    d9:f5:8a:9e:f7:d1:ae:d4:27:c4:2e:af:ec:d5:eb:
                    bf:69:07:e1:ba:2e:1e:5e:54:7e:76:cd:ad:a3:f6:
                    34:84:e8:3f:4b:5d:54:c7:8c:67:f1:b3:13:9a:ed:
                    ba:5c:dd:e6:81:6f:ae:bf:0e:af:2d:5b:1b:80:2c:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22
                IPv6:
                  2803:4ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266834

    Signature Algorithm: sha256WithRSAEncryption
         b3:1c:c4:81:6d:bc:63:6e:6f:52:9d:fe:2e:77:83:30:9e:78:
         9f:cc:68:88:f4:f5:78:31:e5:07:20:b5:85:d3:23:63:f5:26:
         cc:d9:2a:71:5e:32:10:28:42:8d:d8:90:36:0c:21:00:db:77:
         ad:fd:2d:ba:79:38:54:80:8b:ac:b6:49:05:d0:8f:5a:04:f9:
         17:29:23:d6:04:1e:8b:cd:cd:c6:3c:53:79:10:34:8d:d5:20:
         a1:0b:47:bf:80:36:fe:5a:d1:c7:6c:94:e4:9e:db:cc:f0:77:
         ee:73:e7:be:72:b5:21:a8:64:46:44:dd:47:b9:c0:c2:80:92:
         03:bc:0b:70:43:b8:04:e8:fc:73:f6:04:90:77:b0:2a:5d:cb:
         a4:b9:c5:db:29:0f:15:fe:76:6e:33:e2:a7:3c:77:b5:ee:fa:
         5e:2c:6b:a7:42:42:78:6d:5c:3e:91:1e:0e:b4:15:f9:f3:de:
         32:ed:84:2c:22:35:43:dd:75:7c:d3:52:13:4e:6c:45:15:a5:
         13:c1:5a:f6:d0:2d:7e:fb:33:06:c5:c2:5e:5c:75:50:18:1a:
         23:8b:c1:d2:82:6a:88:9a:9a:19:89:80:53:e0:ab:68:80:da:
         94:2c:fb:4d:93:80:92:d5:d3:7c:57:e2:8c:f4:4a:be:63:82:
         91:b3:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----