Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer
File:                     a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer (raw, json)
Hash identifier:          ENVhLmui18kOGBJkr8BJRrqlMmP5xRPN78NcSlvTiH4=
Subject key identifier:   4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA4598
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Dec 2018 22:38:03 +0000
Certificate not after:    Mon 22 Jan 2024 14:08:42 +0000
Subordinate resources:    IP: 45.232.172.0/22
                          IP: 2803:1720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14304664 (0xda4598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 24 22:38:03 2018 GMT
            Not After : Jan 22 14:08:42 2024 GMT
        Subject: CN=a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:e0:a8:7c:ba:69:2a:b2:c6:60:2c:71:80:
                    ea:79:90:28:43:4f:4d:9f:1d:c8:0d:7f:03:04:1c:
                    e8:03:2c:92:1a:50:16:26:05:e5:2b:2a:a1:4e:3e:
                    98:fc:66:1e:3f:19:9b:9a:9f:64:1e:72:8a:8c:d2:
                    dc:3b:16:76:e2:fa:70:16:be:31:67:17:82:41:85:
                    cd:e2:cd:5e:25:c7:cb:02:e6:66:8d:de:14:bd:a2:
                    5f:77:6b:22:fc:40:9c:ab:36:a7:0c:83:c4:71:94:
                    62:cb:98:ff:cd:ea:d6:81:dd:d8:75:e3:2c:41:fd:
                    33:ea:ad:85:14:ed:24:2d:6c:c0:d7:92:9c:13:b7:
                    fe:75:d2:be:b3:d7:5b:1c:dd:39:81:fd:f5:5c:02:
                    62:f2:00:fc:f2:f5:ff:fa:2e:af:bc:d8:66:48:97:
                    0f:52:9d:5d:05:36:81:f8:79:9a:19:cc:e2:e6:72:
                    8d:9a:2f:06:c4:4a:53:9f:57:cd:ef:0e:b7:b7:f6:
                    50:27:75:7e:97:fd:a2:b3:a5:d4:5a:f2:bd:e3:7e:
                    5c:31:7d:8d:46:f1:73:dc:16:d1:e2:54:12:da:01:
                    8a:84:8d:3c:d1:4b:28:ac:4b:2f:2e:60:4b:2d:45:
                    68:b0:1d:cc:c2:32:f4:93:4c:4b:4f:cd:6f:77:3a:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.172.0/22
                IPv6:
                  2803:1720::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:91:4f:25:97:7e:ac:d2:b6:0a:07:cf:c4:b8:8a:dc:fb:
         66:f0:9d:77:36:10:f4:e1:96:14:1a:87:38:ad:d6:9b:29:0c:
         31:c9:75:6c:fb:3d:b2:ae:f5:06:13:16:01:ed:14:31:1a:c9:
         f6:83:70:08:1e:0e:99:62:a6:98:8f:6e:5f:4f:a4:d1:54:0c:
         1c:a2:6e:e0:89:e3:62:1f:63:a8:62:9c:c7:cf:2b:ec:1c:86:
         72:83:61:3e:df:b2:ea:ef:bf:68:0a:5c:61:bb:54:32:3b:17:
         aa:91:5d:32:fa:e8:37:2a:ee:fe:a6:8e:39:87:69:ec:3b:3b:
         42:03:07:90:e3:6f:40:5d:68:93:c2:79:43:40:8f:78:32:3e:
         93:b9:8d:c1:07:5e:65:42:7b:b8:bb:6a:cf:e0:95:aa:7a:8b:
         18:51:9b:d1:e1:af:72:05:d0:c3:6a:8f:15:c7:40:d6:7f:fe:
         ad:c3:d8:d0:3c:f0:db:72:41:a6:6d:04:ed:2d:83:89:b2:4b:
         25:09:d0:e3:05:6a:59:20:1e:97:91:4e:5a:e8:24:85:57:d4:
         c7:3b:89:b3:a6:7c:ac:90:76:fc:2a:bf:8f:c4:da:76:5c:c5:
         4a:79:6f:36:84:ff:34:81:71:14:bd:63:9a:e5:a1:4a:a0:9d:
         00:5b:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----