Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf3bb686e32ebc18cd86ea468114ebd153206e5.cer
File:                     acf3bb686e32ebc18cd86ea468114ebd153206e5.cer (raw, json)
Hash identifier:          aGH2Rocftiil9wesrXfVN7x5+O0PD/WZ7a8vYE5RFE0=
Subject key identifier:   7B:18:2D:95:C4:1E:BD:D0:20:C0:0F:7E:6A:9F:7A:5B:7D:CB:9D:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3541D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/acf3bb686e32ebc18cd86ea468114ebd153206e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 Oct 2018 00:13:43 +0000
Certificate not after:    Fri 30 Aug 2024 18:56:20 +0000
Subordinate resources:    AS: 267709
                          IP: 45.164.207.0/24
                          IP: 2803:a9a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15946781 (0xf3541d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 00:13:43 2018 GMT
            Not After : Aug 30 18:56:20 2024 GMT
        Subject: CN=acf3bb686e32ebc18cd86ea468114ebd153206e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f6:fb:52:ce:4d:2a:8a:a9:54:1f:c0:89:64:
                    d4:01:e7:29:ca:9a:e0:e5:8a:14:3f:26:78:26:37:
                    b1:51:35:1c:d1:13:75:07:da:17:d9:95:50:2e:b4:
                    2c:15:5f:7c:2d:cc:c6:b2:15:b9:91:e5:36:bc:4a:
                    4f:ed:5f:e9:38:ab:cc:bf:c0:ec:34:2b:8c:a5:b4:
                    bd:f2:2f:91:b2:34:2c:01:7c:06:61:b3:d1:4f:2f:
                    89:e7:5a:fa:a9:ea:45:72:19:54:93:ec:43:3e:c5:
                    8a:95:8b:91:6c:f3:3d:ec:34:4a:8b:4d:0a:e1:ee:
                    77:98:f8:63:5d:49:ff:7e:8d:3b:b2:4e:c2:32:99:
                    41:e5:d4:06:22:59:ad:cb:c5:10:4b:5e:b7:26:33:
                    66:0d:49:b0:60:59:18:b0:ef:79:5f:84:a2:87:0a:
                    1b:98:9e:52:2b:6b:4d:00:10:a6:7d:92:89:27:20:
                    17:62:e5:f4:4b:fb:d7:e1:7c:30:e5:a4:a4:c5:c3:
                    a7:df:07:97:01:97:e0:0f:8e:3f:be:e4:b1:f2:18:
                    e9:b1:17:7c:2c:fc:12:26:a7:84:41:be:b6:06:66:
                    2a:67:99:08:14:3f:43:ae:c7:97:91:c3:30:25:1a:
                    cf:f9:3c:03:b7:3f:8f:70:55:78:78:51:35:02:f8:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:2D:95:C4:1E:BD:D0:20:C0:0F:7E:6A:9F:7A:5B:7D:CB:9D:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/acf3bb686e32ebc18cd86ea468114ebd153206e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.207.0/24
                IPv6:
                  2803:a9a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267709

    Signature Algorithm: sha256WithRSAEncryption
         13:93:c8:01:66:b0:f7:bb:00:3d:ff:ee:77:d6:e4:e8:8d:d9:
         bc:5b:15:01:ad:43:d3:76:c4:bf:bc:ad:89:6b:39:84:ff:7b:
         08:fc:a3:82:59:45:ee:85:cd:a8:4e:ee:8a:ec:8b:1d:54:e5:
         bd:ff:e2:fe:af:5a:30:c1:0c:f9:ff:84:5a:3a:db:b1:0f:95:
         a2:66:9f:20:fe:21:dd:81:d4:66:d2:54:ba:1a:c2:23:a8:00:
         16:d1:e1:f5:e4:cc:a0:c5:56:92:d5:c8:e4:c6:07:bb:de:1b:
         b3:8c:0b:14:7a:cf:28:47:fc:5d:f3:03:e0:38:0e:78:ab:7a:
         55:de:33:57:18:8d:c4:32:90:9a:b7:b9:fe:65:b6:28:0f:11:
         b8:78:a1:d8:96:07:43:ea:00:0c:3d:eb:a7:20:9f:ce:e7:0d:
         9b:d8:a1:fc:42:23:7b:06:4a:d5:56:50:5f:12:b2:c0:0a:dd:
         33:70:11:8b:f5:fb:57:94:1c:d9:25:85:ca:2b:85:b6:a1:3b:
         93:66:fb:59:03:4d:1a:f5:5d:41:78:b2:d8:b7:dc:cc:7b:61:
         93:02:24:90:6b:70:76:69:cf:cf:04:84:be:6c:d6:25:24:a5:
         0d:6b:74:71:f2:d6:ea:07:57:e7:a9:36:09:3c:8d:62:71:46:
         50:25:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----