Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d3f80b63b686d3c66e49b3709e90a1afea95528.cer
File:                     7d3f80b63b686d3c66e49b3709e90a1afea95528.cer (raw, json)
Hash identifier:          SqzYSKrRGebEMr7m9bS5jhPVy0Jw0XzwurLyi+EHs5c=
Subject key identifier:   D4:E9:C6:F6:AA:15:21:7D:41:EA:B5:90:AA:F7:AC:CF:5D:C8:37:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC9C8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ea79e29d-28e0-4af7-befa-86447b13f78d/7d3f80b63b686d3c66e49b3709e90a1afea95528.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ea79e29d-28e0-4af7-befa-86447b13f78d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 11 Jan 2019 17:18:30 +0000
Certificate not after:    Mon 11 Nov 2024 20:47:58 +0000
Subordinate resources:    AS: 262210
                          IP: 131.255.192.0/22
                          IP: 181.176.0.0/16
                          IP: 2800:cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16555151 (0xfc9c8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 11 17:18:30 2019 GMT
            Not After : Nov 11 20:47:58 2024 GMT
        Subject: CN=7d3f80b63b686d3c66e49b3709e90a1afea95528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:0a:48:af:40:ef:87:2d:a2:d1:df:d8:aa:
                    23:a2:79:b0:7d:b9:90:9f:17:27:54:7a:d5:81:ab:
                    31:8c:0e:54:0e:09:fd:f9:fd:0e:5d:4a:df:b1:f5:
                    ec:f0:44:7f:d2:3f:7a:50:ed:86:18:1c:55:3a:79:
                    43:06:52:d8:bb:73:57:65:e6:db:7c:5f:7b:0f:ec:
                    6e:1e:17:08:7f:6b:33:b3:92:07:e1:e9:16:f6:52:
                    c4:5b:18:95:a1:7b:8d:a2:2e:20:7e:1f:49:e9:ff:
                    bf:d7:a0:ce:01:8d:c1:d8:0f:a9:d7:44:f5:be:24:
                    04:8f:0b:eb:0e:af:76:bd:5d:4a:11:7e:a7:c4:0b:
                    77:69:fe:15:2f:9a:09:6c:d7:25:ea:3e:3b:a3:4f:
                    3c:00:4a:0f:74:43:96:b9:ac:ed:b5:eb:26:45:29:
                    59:9d:55:fd:aa:62:7b:ae:fd:db:2c:65:f8:83:3d:
                    bc:99:bf:9a:78:24:80:10:16:e3:d8:27:11:14:51:
                    47:06:82:bb:40:46:e9:a7:25:6f:44:95:de:c9:1f:
                    5a:58:29:88:2f:c0:82:45:78:61:c3:a2:30:38:30:
                    0e:8d:ac:24:d9:bd:23:a5:7b:e6:2a:fe:32:30:a9:
                    cc:f8:c2:d4:de:3f:91:2b:56:8c:36:3b:3a:0c:33:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E9:C6:F6:AA:15:21:7D:41:EA:B5:90:AA:F7:AC:CF:5D:C8:37:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ea79e29d-28e0-4af7-befa-86447b13f78d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ea79e29d-28e0-4af7-befa-86447b13f78d/7d3f80b63b686d3c66e49b3709e90a1afea95528.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.192.0/22
                  181.176.0.0/16
                IPv6:
                  2800:cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262210

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:e2:ec:33:8e:57:d7:cc:22:cf:fc:12:b7:a2:ff:80:1b:
         3a:d8:1a:57:70:e5:79:c9:ac:3e:d9:fa:87:e5:68:cb:bf:2b:
         63:bf:e5:3c:4d:c6:ce:22:e1:98:21:e2:f2:3a:91:75:6e:71:
         7d:7d:25:99:f6:2c:f9:ff:9f:84:02:63:4d:40:72:c9:67:13:
         25:ca:c6:67:43:4c:7f:b3:54:13:9c:55:b9:1b:7a:76:d4:f0:
         24:72:cc:e1:69:e9:4b:f8:4b:a5:60:4f:8a:f7:79:4e:05:2f:
         ed:7d:fa:2e:ff:2e:11:85:25:60:49:ae:37:f1:c5:aa:bc:86:
         b9:67:a2:18:1b:be:5c:09:86:0a:eb:45:33:67:9f:f8:6a:2c:
         03:d7:a8:be:c5:65:a5:d7:dd:70:08:b7:fa:13:17:4c:10:52:
         6e:bb:93:87:b3:4f:c7:18:3e:e8:b1:96:74:31:e2:24:81:d9:
         ca:13:1f:45:f6:ee:d8:91:02:75:99:9f:c3:68:49:8a:c8:bb:
         cc:c7:e7:30:4e:9f:e6:1f:7a:41:f7:47:bb:7b:6e:c9:57:14:
         75:4f:7d:f2:bc:cf:0a:33:69:98:ed:cf:b3:f3:f5:5a:9c:7d:
         23:dc:65:91:76:61:e4:e8:3c:f1:1c:7f:f3:19:65:c7:60:66:
         0f:3b:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----