Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
File:                     a00f13820b977914dc96250807fd66f6707db9ec.cer (raw, json)
Hash identifier:          D6cDBPQUS+nL9xBAVrHPHJ5CBLDZqgYw37sUzJxyPmY=
Subject key identifier:   62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D852E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Oct 2018 20:49:38 +0000
Certificate not after:    Thu 28 Dec 2023 13:22:51 +0000
Subordinate resources:    AS: 266742
                          IP: 45.230.168.0/22
                          IP: 2803:ab20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14176994 (0xd852e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  5 20:49:38 2018 GMT
            Not After : Dec 28 13:22:51 2023 GMT
        Subject: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:4e:4d:24:87:fe:09:41:cd:ec:48:b2:75:
                    28:b6:74:f9:0d:c9:0f:bc:1a:da:30:6f:63:d4:da:
                    86:bb:18:ef:d1:8c:0b:ab:d0:af:35:40:1b:83:6f:
                    f6:89:75:10:40:2d:5a:74:11:de:81:4e:43:b5:a5:
                    aa:ec:1e:5a:7e:6f:91:da:4a:41:a6:de:6a:6b:70:
                    0b:42:99:9e:28:4a:de:d0:19:f4:f9:4a:0b:ea:30:
                    04:25:5b:81:1d:48:91:bd:fb:9c:d0:b9:f1:78:7c:
                    39:75:e8:b7:20:de:e6:5a:4a:de:0e:b1:fa:dc:b0:
                    53:21:1c:f2:66:a5:ee:fd:79:81:1c:52:11:82:5c:
                    45:13:ab:55:6a:44:25:7a:02:87:c9:ff:d9:08:01:
                    bb:32:88:82:79:11:7b:6f:e4:e7:06:d9:21:b8:ea:
                    87:8d:f9:c3:1a:57:6e:1e:36:fd:5c:a2:c7:19:33:
                    77:08:ec:ab:a2:02:c8:61:cd:54:37:93:f1:9b:9c:
                    f1:7b:1a:04:59:37:33:fb:9c:01:ea:d5:b6:91:40:
                    78:d6:c4:48:c7:f1:2a:65:21:8d:5c:1c:8b:ca:05:
                    30:c7:74:90:27:ea:8f:8e:79:f5:76:37:58:ea:02:
                    ce:41:2e:e5:dc:02:e0:ae:6d:cc:aa:8a:67:5f:0a:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22
                IPv6:
                  2803:ab20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266742

    Signature Algorithm: sha256WithRSAEncryption
         21:70:4d:f8:38:0b:69:c9:b1:4e:99:39:19:74:d1:fb:32:bf:
         09:dc:78:9d:cb:93:f1:ad:42:fc:1e:b3:ac:ea:0e:89:47:96:
         c6:95:49:a8:8a:11:74:77:ff:a2:c5:ad:eb:4f:4b:bf:46:0f:
         71:ba:d9:b1:94:6a:aa:c9:9e:97:47:e5:94:eb:7b:af:cd:ce:
         fb:3f:74:0d:71:30:10:3f:d4:67:70:3c:33:76:ea:1e:94:70:
         46:ca:6b:15:37:df:09:e2:71:9a:05:96:ba:13:dd:af:45:40:
         00:26:84:7a:ce:36:2f:e4:10:85:5c:d5:ee:be:c9:04:5b:7d:
         29:e4:93:d9:91:71:65:60:d1:8b:2e:25:08:eb:8e:04:78:f3:
         e4:92:03:24:f3:df:e1:d0:e2:fc:66:39:78:ef:ae:4b:14:68:
         8a:fa:c0:22:72:7c:4e:8a:79:66:8d:e7:42:00:7e:8f:25:27:
         38:53:15:6e:55:85:0f:cb:99:51:f9:d9:45:ab:84:15:d8:2e:
         89:22:58:2a:d8:00:86:37:df:be:e7:86:50:7c:c3:9a:2e:23:
         42:c5:c3:62:e9:7a:bf:f2:b0:16:47:95:09:b1:e6:f1:8f:9a:
         d6:4f:37:62:ee:98:ec:17:2a:e7:8d:2e:b6:e8:92:03:04:1a:
         df:d3:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----