Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8908cac79885ef864fb67bc8ac0a9bd63eb7df98.cer
File:                     8908cac79885ef864fb67bc8ac0a9bd63eb7df98.cer (raw, json)
Hash identifier:          LJ9oamFmMF04mPkaPvyN7X65yrJ2ljiOdU9m+q18OPQ=
Subject key identifier:   DD:7F:CB:39:65:9E:80:9A:C2:23:62:86:6B:39:05:9C:20:B5:9B:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D72B92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/8908cac79885ef864fb67bc8ac0a9bd63eb7df98.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 14 Jul 2018 04:17:40 +0000
Certificate not after:    Thu 14 Dec 2023 17:03:51 +0000
Subordinate resources:    AS: 266731
                          IP: 45.230.48.0/22
                          IP: 2803:3320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14101394 (0xd72b92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 14 04:17:40 2018 GMT
            Not After : Dec 14 17:03:51 2023 GMT
        Subject: CN=8908cac79885ef864fb67bc8ac0a9bd63eb7df98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:cc:88:1d:05:ea:c6:60:49:33:6b:8d:00:
                    97:76:ec:ca:ef:b7:64:49:67:20:5e:8c:d0:0c:04:
                    33:fc:7f:9f:18:7d:f2:60:75:32:5b:ba:8f:99:3f:
                    c8:6c:55:92:f8:1f:a7:36:6c:1e:38:5c:3b:cf:90:
                    d3:1b:24:e5:8e:99:2f:a1:25:31:78:ae:e5:4b:35:
                    00:77:ae:fd:70:1d:4c:8d:47:13:b7:18:1a:e4:a9:
                    0f:40:ba:5a:bb:b5:06:72:39:5d:da:ac:ae:95:72:
                    de:bb:ac:cc:0b:03:ab:d0:11:db:cb:ca:70:b5:ae:
                    6f:62:a7:cd:5e:55:08:0a:7c:fd:d7:97:0d:19:5a:
                    40:1d:b6:ae:10:b6:fa:e5:76:5a:4f:83:7c:5c:a9:
                    5c:f3:19:3c:4b:7b:2c:75:73:6b:47:77:99:79:3c:
                    c5:48:07:e4:6d:0f:d7:fe:3c:5e:fb:08:89:3d:db:
                    f2:ab:a3:ae:ed:5b:fa:5b:7c:38:77:da:a2:cd:9f:
                    a6:97:ac:a2:5f:e2:53:72:31:9f:df:25:67:56:8e:
                    c1:6a:a0:fc:1f:3d:7b:ed:c8:ef:84:d6:49:93:96:
                    af:0e:60:0d:92:15:b3:92:53:71:75:9a:c4:7f:9f:
                    50:1a:a7:42:8e:f0:8d:a8:35:3b:28:aa:0e:3f:bb:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7F:CB:39:65:9E:80:9A:C2:23:62:86:6B:39:05:9C:20:B5:9B:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3554149-987a-48e1-868e-ca56c31c9bf7/8908cac79885ef864fb67bc8ac0a9bd63eb7df98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.48.0/22
                IPv6:
                  2803:3320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266731

    Signature Algorithm: sha256WithRSAEncryption
         62:00:f7:08:34:9b:ad:f3:cc:f9:f9:5b:e5:cb:59:fe:2b:0d:
         d1:b5:f4:1a:37:f0:fc:2e:dc:dd:9e:7c:cd:d1:a0:c1:30:b6:
         97:34:4d:a9:6f:c0:f1:5b:82:07:9a:b2:96:5c:b9:db:fb:af:
         b6:77:04:1b:c1:ec:0f:49:b3:a4:91:1b:b4:d2:f0:40:93:04:
         74:ad:93:57:ba:70:82:e0:b3:32:a0:3a:5f:c1:d3:da:f6:b2:
         b0:9a:4c:3c:37:e6:4b:2b:0b:a5:ca:a2:48:33:3a:42:6e:db:
         d3:6b:94:d4:31:5a:2e:37:fd:61:90:22:e3:8a:85:d5:39:75:
         c2:38:4c:4a:c0:35:f6:be:75:88:40:32:de:c1:bb:a7:f5:ef:
         17:c9:76:84:be:11:ef:95:e8:90:50:d8:69:50:0e:39:e7:84:
         df:09:54:ad:e8:33:84:dc:cf:35:1c:ce:f4:da:c0:a1:51:62:
         1e:4f:80:34:f3:00:a8:2c:9f:85:12:8a:d7:00:70:d8:18:8a:
         01:49:61:8c:04:be:6b:6f:a0:ce:3b:7d:2f:cd:f6:5e:3d:57:
         b5:3f:cc:5c:7e:1b:0e:2f:1c:f0:b4:bf:cc:40:8a:5f:57:99:
         de:9d:24:c7:28:82:fc:fa:1d:51:f2:bc:ba:6b:19:3a:a6:06:
         ac:39:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----