Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.cer
File:                     8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.cer (raw, json)
Hash identifier:          nel9PWdTRcuMvebNS4VctwUmFBefFdSUL0G6SujquDY=
Subject key identifier:   D2:4A:DE:42:D5:78:F2:8F:9B:25:EA:F2:5A:80:27:9F:BF:D8:0C:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB3383
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Nov 2018 12:56:18 +0000
Certificate not after:    Mon 24 Jun 2024 19:05:03 +0000
Subordinate resources:    AS: 266892
                          IP: 45.161.180.0/22
                          IP: 2803:e6a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15414147 (0xeb3383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 12 12:56:18 2018 GMT
            Not After : Jun 24 19:05:03 2024 GMT
        Subject: CN=8b3409d23417b7ed5b171c186d6bc0e2b8b69dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:48:f6:bf:b2:33:ad:b5:be:85:73:6d:a2:
                    54:b7:1b:46:3a:41:6e:66:8c:0a:5f:0f:66:51:06:
                    67:27:c9:57:7f:dd:81:24:0b:d7:d6:a4:1f:0b:aa:
                    9c:db:fd:da:07:e6:70:3f:90:88:6d:de:54:4b:03:
                    76:89:5d:9f:e2:9e:7c:74:62:ce:cb:4e:76:cf:a2:
                    46:f4:89:aa:c3:7d:51:a8:47:df:fd:86:f7:1d:08:
                    08:31:d0:f3:51:07:df:ee:92:75:e7:58:75:b7:e1:
                    c4:c4:4b:c0:d4:68:9c:cd:a8:6b:77:11:92:24:91:
                    77:a2:35:9a:b1:0f:d1:56:76:3b:ef:3b:e0:99:69:
                    49:e9:c3:a5:60:81:e9:26:4a:3b:d6:0d:aa:c3:fe:
                    2e:3d:ad:27:2e:cb:7c:47:8e:7a:6c:17:10:d8:fb:
                    53:53:29:86:8d:c0:39:09:e8:07:07:98:50:11:ae:
                    7b:fa:f7:ab:bf:5d:62:e3:13:65:56:5d:bf:8b:a0:
                    5b:d4:18:0a:ab:d8:7a:50:e4:dd:b3:85:95:bd:9d:
                    9a:47:7f:3c:40:8d:59:11:d8:24:55:3e:1e:f9:8d:
                    ea:84:43:41:9d:fd:89:6b:1e:56:53:4a:bf:b8:ad:
                    c8:63:59:d4:14:65:22:37:b6:e2:ca:bb:59:27:63:
                    82:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4A:DE:42:D5:78:F2:8F:9B:25:EA:F2:5A:80:27:9F:BF:D8:0C:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.180.0/22
                IPv6:
                  2803:e6a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266892

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:4c:be:41:de:c0:e4:ae:f0:03:76:f7:db:08:27:59:cc:
         8a:0e:21:07:9e:8e:a5:36:11:14:18:81:44:3a:96:76:74:ed:
         f1:cd:32:c4:2a:7d:ca:0a:06:30:82:91:09:8e:12:bc:98:0e:
         88:0d:cc:3d:4d:c8:0d:51:34:8e:d2:39:53:b0:4e:25:a2:af:
         53:07:5b:9c:f2:73:78:80:74:55:02:e1:48:a7:d6:02:48:9c:
         1d:c0:d3:87:ff:8c:d0:3b:32:1b:17:29:31:6f:82:46:ec:dc:
         96:d9:b0:c3:c3:f7:8a:25:a4:4c:8a:f9:f5:b8:de:db:31:3b:
         b7:ed:5c:fa:c5:00:c7:15:ce:1e:7b:53:0d:75:7d:53:08:d0:
         ca:dc:3b:a0:a4:7e:83:c7:82:47:fb:15:40:4e:4e:4c:1b:a3:
         7a:6c:0f:d4:ec:7c:f5:10:77:4d:6e:d1:e6:7e:54:2b:cc:66:
         bf:30:ee:a0:75:d4:de:f9:ca:0b:85:66:2d:fe:e0:e6:6c:0a:
         ee:cb:23:10:d7:57:f5:18:60:6c:9c:f5:db:db:0c:4c:3e:4f:
         e2:4e:28:10:ac:55:a7:56:e6:2c:97:38:ec:74:b1:27:d6:a1:
         02:ed:1e:5e:58:ca:bc:4c:60:a5:27:8c:1d:77:7d:3e:1b:27:
         78:d9:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----