Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3aa1352b087f0160069b27f405ef9ef1d44b7c9.cer
File:                     a3aa1352b087f0160069b27f405ef9ef1d44b7c9.cer (raw, json)
Hash identifier:          GidDmY0Sy4xIytePr/MWRN8hFR5zeK5BXfBGh9tWgIA=
Subject key identifier:   40:84:B9:5E:5C:9A:D6:54:CE:CD:9F:FB:50:CE:49:E0:64:B3:E1:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAEE85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/41e69025-3b91-4623-ac7a-0a379c0ec092/a3aa1352b087f0160069b27f405ef9ef1d44b7c9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/41e69025-3b91-4623-ac7a-0a379c0ec092/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Apr 2018 15:46:38 +0000
Certificate not after:    Mon 28 Oct 2024 16:45:15 +0000
Subordinate resources:    AS: 266691
                          IP: 45.228.156.0/24
                          IP: 2803:d520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16445061 (0xfaee85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 15:46:38 2018 GMT
            Not After : Oct 28 16:45:15 2024 GMT
        Subject: CN=a3aa1352b087f0160069b27f405ef9ef1d44b7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:6f:d8:79:cd:4d:2b:02:44:30:39:8a:99:
                    ee:81:e8:20:8b:f5:77:f9:19:26:a3:52:4c:04:45:
                    1e:0d:92:8c:fe:69:58:56:df:ce:68:45:4c:a7:ac:
                    0a:37:3e:d3:a1:68:d7:d1:dd:a6:7c:c6:8b:58:bd:
                    de:63:8d:9b:e7:da:45:70:15:39:d4:95:39:2b:10:
                    af:2e:a0:b9:8b:cc:17:39:7b:c0:6f:a4:24:e3:dd:
                    dc:b7:54:74:9f:bd:81:7d:c6:65:1f:16:21:e6:69:
                    68:a2:88:78:98:46:2c:5c:34:ae:e4:a1:ba:c0:05:
                    fc:f7:f6:aa:66:9d:47:6a:2e:35:48:af:56:8f:d4:
                    3a:04:40:74:2e:35:85:b0:83:2e:d1:11:21:5d:04:
                    a0:3e:dc:c9:b9:86:3d:1e:2e:f4:8a:63:e2:5b:b6:
                    e2:f1:b2:c4:14:07:24:3b:5e:a7:61:0f:6d:0d:d1:
                    4a:65:88:3f:ab:8e:e5:06:b1:ae:f0:17:26:48:d6:
                    5e:b6:71:6d:49:28:31:8b:ba:2e:d8:d4:22:d4:18:
                    2b:11:de:3b:c2:2f:7f:98:62:d2:2d:25:81:a1:ea:
                    5c:1a:0a:b0:bf:df:c7:4e:80:6e:58:58:d3:32:4c:
                    df:f9:50:c4:8e:f4:73:cf:eb:f3:bf:16:3a:99:aa:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:B9:5E:5C:9A:D6:54:CE:CD:9F:FB:50:CE:49:E0:64:B3:E1:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/41e69025-3b91-4623-ac7a-0a379c0ec092/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/41e69025-3b91-4623-ac7a-0a379c0ec092/a3aa1352b087f0160069b27f405ef9ef1d44b7c9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.156.0/24
                IPv6:
                  2803:d520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266691

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:24:22:e6:c4:8a:1b:15:9c:3f:c0:e3:5e:17:ab:07:da:
         cd:ee:d6:0a:49:f2:a2:09:12:3d:bf:c6:e1:6e:14:c2:01:b8:
         e8:0f:e5:c5:c5:68:98:92:70:49:f0:ed:be:00:f3:1b:67:30:
         da:54:b1:7b:02:61:b4:dc:a0:9a:3e:8b:7a:90:86:3f:4d:fe:
         29:9c:f6:7a:a5:21:ca:85:a0:7c:96:d1:75:b1:48:ed:30:a6:
         43:96:9b:bb:27:aa:a2:b9:3e:e3:66:a8:c4:40:00:3f:12:cd:
         9e:95:d2:bb:2a:56:f6:e0:0f:1e:9e:37:ad:84:1a:62:81:7c:
         fb:d0:2c:1a:39:f1:96:1d:5b:3e:74:11:59:b0:4b:55:ba:71:
         d1:b7:aa:4d:18:ac:3f:a2:8e:13:91:bd:05:c6:5c:10:91:01:
         aa:7e:3a:df:8c:af:fe:d7:f4:1a:c9:79:7b:7f:59:26:88:16:
         2a:92:7a:66:b0:9c:4e:4d:eb:e4:ea:a0:dc:d1:7e:ea:04:b2:
         26:f5:41:e3:24:65:27:e4:10:2a:b8:b0:0d:b4:fb:d1:84:ba:
         f7:90:1c:bf:23:1f:f3:6b:d1:a0:74:09:57:3f:9b:9f:9c:39:
         6b:d2:cb:96:f3:7c:59:c9:3a:b7:d7:07:71:10:fc:5e:ef:fa:
         ea:cd:01:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----