Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca421d8201c0d5cac7b87fe4268639c6bbb56c0.cer
File:                     6ca421d8201c0d5cac7b87fe4268639c6bbb56c0.cer (raw, json)
Hash identifier:          H/kY5dHYyB+2CcwuKkERrQS5EfOxjdPXML6cjBYvt6c=
Subject key identifier:   63:22:50:14:7E:0B:14:EF:80:73:95:3E:7A:30:BB:B1:41:B3:0E:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD3379
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/6ca421d8201c0d5cac7b87fe4268639c6bbb56c0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Oct 2018 02:05:10 +0000
Certificate not after:    Tue 27 Feb 2024 23:01:58 +0000
Subordinate resources:    AS: 266789
                          IP: 45.234.156.0/22
                          IP: 2801:1d:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14496633 (0xdd3379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 23 02:05:10 2018 GMT
            Not After : Feb 27 23:01:58 2024 GMT
        Subject: CN=6ca421d8201c0d5cac7b87fe4268639c6bbb56c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:ab:bc:c9:42:1f:0d:a0:ee:34:39:2c:ef:
                    04:c2:55:46:2b:bb:9f:fb:a6:03:6b:a1:4a:9e:35:
                    31:f6:82:18:86:32:43:19:da:bb:bb:26:d4:c4:9b:
                    5b:ee:8c:cf:c0:04:2b:e9:ed:3e:ca:fd:6a:9a:3b:
                    5f:33:40:55:5c:60:ac:07:6a:4e:91:34:8f:12:ec:
                    29:09:c6:0c:3d:22:ac:2e:50:a7:8e:32:ce:34:bc:
                    37:2d:b7:20:ec:da:86:b6:0c:72:a1:78:95:63:6c:
                    02:f3:18:ff:69:5b:ee:a2:66:11:3e:c0:ff:bd:b6:
                    09:dc:ee:5f:7d:70:6a:d2:ea:ff:57:97:5c:11:6a:
                    78:b5:af:bf:73:f1:f3:dd:30:b6:40:eb:49:88:31:
                    02:74:ef:47:cb:44:4d:47:4d:3f:fb:de:03:1f:6c:
                    f7:30:04:23:0e:ed:13:29:31:44:a8:ba:63:fd:ed:
                    eb:2f:11:a9:9f:86:14:3a:7d:80:f8:b8:85:2b:5c:
                    4e:ef:f4:bc:a2:c1:8e:bb:dc:5a:05:d5:83:a0:70:
                    98:cb:8a:59:6c:ab:80:29:45:c1:af:5a:ba:ef:4f:
                    6b:46:8a:13:4b:8a:a0:bb:63:45:c0:67:51:f2:c1:
                    42:cc:dd:06:39:5e:ae:fb:bd:02:a2:b7:ce:82:23:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:22:50:14:7E:0B:14:EF:80:73:95:3E:7A:30:BB:B1:41:B3:0E:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a678740-8ac1-47c7-b58c-a4cb39744822/6ca421d8201c0d5cac7b87fe4268639c6bbb56c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.156.0/22
                IPv6:
                  2801:1d:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266789

    Signature Algorithm: sha256WithRSAEncryption
         03:61:a2:34:78:c8:23:50:fd:6a:c5:92:67:bd:fb:b8:ce:d4:
         14:53:b9:74:e5:ae:52:7c:2e:ca:25:df:fa:0a:ce:21:b1:b3:
         3e:e6:3f:1a:28:23:5f:ea:46:2a:33:b5:21:4e:67:31:22:51:
         d0:d2:83:0d:63:b8:ab:a9:7b:4a:03:4a:b3:4d:07:0a:01:73:
         29:26:d8:66:73:bd:d0:8b:1f:ab:b3:1d:28:d8:e5:cd:b8:c1:
         d3:68:41:b3:45:d7:62:ef:cb:18:a5:8a:e1:c8:ed:a9:b0:a1:
         e5:86:84:5c:b2:cf:20:e8:0d:16:b2:9e:ce:b6:31:1b:e7:54:
         39:55:76:04:fb:4b:15:e6:3e:62:11:b9:71:97:7b:dd:f8:46:
         de:d6:ec:cb:2f:e6:7a:e4:3e:d8:88:f7:18:ab:19:92:da:df:
         52:4b:e2:1f:b8:68:01:bd:3c:bc:bb:90:33:01:71:0c:72:1b:
         89:6f:df:75:c8:66:59:79:db:4f:3a:0c:16:40:bc:15:51:24:
         5b:68:1a:b3:cf:b4:af:21:0f:32:13:53:e6:80:19:ea:92:a2:
         2b:9d:05:56:2e:53:ea:fb:c8:a4:1a:40:a1:f8:c6:2a:d3:d3:
         da:18:e6:c6:d9:86:df:b1:07:e1:ba:7e:8b:c5:67:b7:6c:c8:
         6a:29:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----