Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer
File:                     9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer (raw, json)
Hash identifier:          zJEDSc/tTGLpfUBUz1JtTN1QI176L3uIXXSL/KTtP1Q=
Subject key identifier:   EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F65FD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/9c039812edab95b305292dc8f1a3339fcf9cd5dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 26 Apr 2018 03:21:06 +0000
Certificate not after:    Tue 24 Sep 2024 00:37:50 +0000
Subordinate resources:    AS: 266655
                          IP: 45.225.43.0/24
                          IP: 45.225.132.0/23
                          IP: 2803:c120::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16146384 (0xf65fd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 26 03:21:06 2018 GMT
            Not After : Sep 24 00:37:50 2024 GMT
        Subject: CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:c6:9b:97:ca:84:b0:a7:79:db:c3:21:79:
                    fe:94:49:45:f0:75:1e:d8:6e:f9:e6:6f:27:26:82:
                    93:a4:2b:89:1d:3d:32:2c:ba:a3:69:f7:6a:2e:67:
                    87:b3:91:d0:91:6f:25:d3:ff:b1:cd:93:30:17:06:
                    fa:a8:75:cc:fc:09:06:30:88:cc:83:fa:e0:8f:5d:
                    d2:ac:1f:37:7e:32:aa:74:9d:2d:ea:4d:35:2c:0b:
                    b4:bb:a5:05:5b:b5:a3:00:70:33:60:2a:ba:d5:11:
                    ba:92:6a:cb:0e:07:34:5b:f7:4c:ce:25:32:9f:45:
                    c3:9b:dc:6d:41:7f:a3:51:54:57:a3:07:23:36:80:
                    cd:18:9b:b6:b8:bf:7b:ce:f0:a7:46:5a:ec:49:e2:
                    f8:46:78:b0:4b:7b:b8:42:87:96:a1:06:e0:45:1a:
                    7c:61:3f:6e:a2:f0:26:2c:74:f8:c9:8e:8e:81:da:
                    03:a6:d2:6d:4b:f3:d9:71:30:1c:0d:98:c2:f7:59:
                    b6:5c:08:4b:f6:f1:d6:6d:cb:fe:11:b4:ac:a7:6e:
                    56:c3:13:54:09:6f:39:b0:f3:ae:a2:2a:fa:c4:d0:
                    48:a5:dc:1c:28:76:c2:83:2d:0c:93:64:ed:28:77:
                    16:ae:78:7f:f0:06:ef:d8:33:49:47:7f:91:8c:e9:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/9c039812edab95b305292dc8f1a3339fcf9cd5dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.43.0/24
                  45.225.132.0/23
                IPv6:
                  2803:c120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266655

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:18:c6:de:04:47:5b:ed:a4:67:a7:91:f1:1d:df:cf:90:
         ac:87:03:f8:23:9f:22:5c:82:f0:9a:08:0f:91:58:35:6e:ee:
         b1:7c:61:aa:6b:4b:26:85:e4:d6:bc:36:0a:69:e7:ed:a4:8a:
         af:fb:10:ef:dd:65:79:dd:fb:9c:b2:ba:e4:8f:02:e8:2c:7e:
         5c:ac:85:3d:ff:af:a9:02:42:24:99:8e:fc:21:d9:f3:91:b8:
         8b:6d:5b:02:77:61:35:07:41:81:c0:81:93:9b:d8:85:71:1b:
         87:8f:5e:c0:67:2b:b0:8f:df:f6:e5:1b:0a:ee:58:e1:d7:f8:
         e4:d6:47:26:61:46:ea:c0:96:97:ce:82:65:6b:3c:45:73:85:
         3e:09:17:8d:fa:1f:a8:72:2c:2b:ae:15:3d:0d:21:a2:5d:0d:
         7d:98:6d:32:39:bf:d5:23:e4:ac:02:a8:ff:6d:7e:20:cc:d2:
         df:28:69:a3:a6:37:ba:5e:30:3f:f4:f9:01:99:98:a2:79:f3:
         fe:5d:73:74:29:ad:ab:41:83:fe:f6:71:f6:07:d7:3b:5a:9e:
         c6:c3:b3:5f:a9:10:cd:9a:16:e2:07:67:0e:f0:13:74:16:71:
         7a:77:4e:fe:ea:bb:8d:03:5f:55:48:86:2e:be:ca:df:cd:17:
         d8:7e:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----