Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer
File:                     9a70223a7072e26ee6c67536cef9197634c52008.cer (raw, json)
Hash identifier:          BmU3E6qbGc0voBIWzce8BQ7RqVHymgIhuWQeaneb4KY=
Subject key identifier:   41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7F113
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/9a70223a7072e26ee6c67536cef9197634c52008.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Oct 2018 16:33:23 +0000
Certificate not after:    Sun 24 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 265662
                          IP: 45.4.0.0/22
                          IP: 2803:ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14151955 (0xd7f113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 16:33:23 2018 GMT
            Not After : Dec 24 05:00:00 2023 GMT
        Subject: CN=9a70223a7072e26ee6c67536cef9197634c52008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:ab:70:f8:01:29:c9:b4:c1:f1:89:79:4c:
                    15:1a:2c:7a:67:6a:9f:46:d1:86:e4:75:e9:e7:7f:
                    c7:da:20:60:81:87:4c:33:ff:20:62:dc:81:60:71:
                    72:5d:be:35:5b:4c:7f:7b:1a:a0:8c:dd:1a:01:b2:
                    7b:01:6d:14:69:24:22:24:2b:d8:fe:1b:f0:be:72:
                    2a:4f:27:22:3a:05:4e:f7:7e:b1:70:60:0d:d1:de:
                    9d:cc:af:d6:d8:b6:aa:9f:26:fd:25:07:55:74:bc:
                    22:1b:2a:13:9a:8f:f2:e1:11:a0:28:a7:de:7b:54:
                    31:82:11:60:c9:8e:98:78:59:10:6c:a0:d8:e3:d2:
                    5e:84:88:20:4c:e9:10:12:79:89:bd:ba:e2:6f:a3:
                    67:d1:8b:42:65:64:0e:d7:4a:13:74:60:3a:02:cb:
                    6c:62:c4:49:29:11:fa:d2:31:db:e0:59:f2:74:67:
                    8a:14:2b:3b:9b:8a:a8:83:c6:5d:af:bb:e8:ab:72:
                    55:ad:43:24:fc:be:91:ce:a0:de:96:85:8e:07:b1:
                    74:9a:60:af:dd:93:34:3d:8e:9e:e3:cb:0f:82:3c:
                    a1:5c:a2:47:33:ff:e1:60:c2:8a:da:cb:8d:2b:1e:
                    96:32:d4:0a:13:ee:25:7d:8f:c6:9a:97:af:bb:20:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/9a70223a7072e26ee6c67536cef9197634c52008.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.0.0/22
                IPv6:
                  2803:ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265662

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:37:f0:94:a3:e6:58:2d:5d:2b:26:9a:77:31:7f:68:9d:
         01:d9:4e:42:84:94:bb:c3:6c:82:b6:75:9e:36:16:da:76:ee:
         86:07:23:29:3b:7d:4b:4b:73:2e:e2:98:b1:9f:ba:22:fe:ec:
         2c:6d:55:03:1b:1d:b1:a0:f6:9d:af:70:50:89:19:f1:5a:66:
         38:d0:62:3f:4f:6f:ff:c9:64:e3:13:bc:6b:ed:2d:40:da:8f:
         35:80:fd:a0:c6:42:0e:dd:9c:25:b9:c8:c7:44:46:08:8a:03:
         e4:7c:57:6d:17:f3:7a:c2:3d:75:61:3d:0e:e9:be:ee:0a:87:
         33:24:c5:2a:84:47:e8:74:a6:35:40:2b:7a:b7:20:2b:e4:f4:
         36:a5:c1:1b:4a:97:be:b7:47:d5:84:77:16:e7:3f:a6:9f:08:
         95:c2:f0:e7:95:b4:88:c4:00:9c:26:f3:a8:9c:da:3f:e4:e7:
         fc:e5:8d:12:04:2c:c2:f6:cc:b9:44:28:01:c2:a3:be:d1:c8:
         eb:bb:4b:10:fb:28:10:70:13:fb:47:9c:5b:a4:70:88:b7:c5:
         e8:57:b9:70:de:23:2e:73:fb:43:fd:ef:42:ee:9f:b9:07:60:
         f9:4f:d6:c1:be:f7:f5:fb:40:07:7b:45:1e:eb:4b:8d:43:30:
         9a:0c:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----