Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a4da126ef085b6c9c8aa434f0190a543ac4abd0.cer
File:                     5a4da126ef085b6c9c8aa434f0190a543ac4abd0.cer (raw, json)
Hash identifier:          ZMBpuVFMU0dmnb8nnygN41tyT/Yp3SqiOuAYwJghZAA=
Subject key identifier:   DA:07:7C:EF:2C:FC:45:25:F6:0C:39:AB:7E:50:50:E0:93:A8:B2:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6F820
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6ca43ef0-5807-4795-bc3b-5df89799a3cd/5a4da126ef085b6c9c8aa434f0190a543ac4abd0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6ca43ef0-5807-4795-bc3b-5df89799a3cd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Aug 2018 18:44:39 +0000
Certificate not after:    Sat 28 Sep 2024 20:52:54 +0000
Subordinate resources:    AS: 266654
                          IP: 45.225.134.0/24
                          IP: 2801:1e:b000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16185376 (0xf6f820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 18:44:39 2018 GMT
            Not After : Sep 28 20:52:54 2024 GMT
        Subject: CN=5a4da126ef085b6c9c8aa434f0190a543ac4abd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:71:ab:5e:1d:3c:db:fc:6f:7a:d2:b9:7e:
                    f7:fa:bd:b2:88:01:de:46:82:6a:5d:3e:00:15:fc:
                    63:6a:ed:8a:b6:87:e8:1d:10:87:36:fe:df:7e:a6:
                    a2:8f:39:2f:31:96:fc:97:a4:d4:ca:6c:54:36:ff:
                    f5:d9:12:c7:48:76:4e:e2:bb:65:dd:81:15:31:55:
                    c6:0b:ea:60:28:5b:b4:75:df:48:e3:bc:45:ca:56:
                    30:a9:61:4c:8e:78:29:af:b5:bc:31:84:b2:b2:1d:
                    c4:1f:2b:73:e0:63:45:84:e3:19:b5:46:dd:bc:bd:
                    dc:52:81:78:e9:63:d8:97:b6:2d:9b:8b:8c:56:8b:
                    66:9a:67:83:c3:31:99:1f:3d:b1:e5:98:fe:3c:82:
                    b4:ac:66:c2:fc:b8:83:8d:d3:6f:47:4d:78:c1:d9:
                    a4:ed:56:cf:32:6f:34:4d:b4:09:40:fd:56:38:39:
                    f8:dc:a7:58:20:f4:7d:67:de:a3:45:8e:77:cd:24:
                    9a:72:04:15:fe:9a:52:6c:60:9e:ee:17:1a:a2:3e:
                    bd:2d:a1:82:e0:8c:99:51:5f:43:78:a5:9b:a5:00:
                    f1:e7:f7:6e:76:20:9f:48:6f:89:db:12:2c:be:1e:
                    02:9e:8f:37:76:ad:b9:37:2b:42:f6:90:e9:2a:7a:
                    e4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:07:7C:EF:2C:FC:45:25:F6:0C:39:AB:7E:50:50:E0:93:A8:B2:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca43ef0-5807-4795-bc3b-5df89799a3cd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca43ef0-5807-4795-bc3b-5df89799a3cd/5a4da126ef085b6c9c8aa434f0190a543ac4abd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.134.0/24
                IPv6:
                  2801:1e:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266654

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:d7:aa:c9:fd:de:ee:9e:90:a6:a1:ab:08:b9:9a:11:81:
         97:73:7c:ad:63:ee:98:9a:a8:f5:44:54:6b:d4:56:fa:bf:2a:
         d3:9e:d7:73:0c:a9:e8:3b:77:5f:ad:10:47:6c:5a:cc:b3:c2:
         12:e9:e5:a4:f5:6f:f7:26:d4:ec:70:fe:a9:d4:ca:c1:aa:e0:
         ae:dc:35:7c:d7:0b:a1:6a:04:cf:b2:0b:df:08:e6:95:81:35:
         71:b2:54:71:cc:43:89:4b:8f:aa:1d:3f:6c:77:ac:72:aa:7a:
         a3:dc:a9:e3:a0:d1:3d:1b:c2:e7:0d:07:d3:a5:03:de:f3:a8:
         71:84:fe:ff:db:c4:dd:5e:82:3c:f0:da:57:83:39:4b:09:a4:
         7b:38:f1:19:ed:15:6e:55:18:cd:6e:e8:dd:22:80:2e:51:0c:
         4e:0d:f0:a0:7a:fe:3e:a3:ea:fb:ac:a4:76:a3:6e:ba:15:eb:
         1f:ee:3a:68:49:6b:3f:25:80:59:fa:af:4d:cc:1c:8f:30:b7:
         70:7e:85:3e:c7:f3:cf:7b:75:ba:c0:61:b4:4c:10:bc:36:7a:
         3f:48:88:69:ec:40:14:6f:41:85:03:29:fe:a1:c9:3a:f6:ae:
         f9:55:f4:57:57:75:9e:26:18:85:62:74:7d:65:22:48:ab:57:
         e0:59:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----