Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b19124162f94c9ddb57b34689d280b0c29d2be54.cer
File:                     b19124162f94c9ddb57b34689d280b0c29d2be54.cer (raw, json)
Hash identifier:          /vHfn2U84QPea3L1mTwomczHK4pNo7RdgSV2riqqiEI=
Subject key identifier:   DD:3A:05:F0:F8:5F:7E:F3:70:84:D3:69:4F:0F:90:88:42:05:8A:96
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC1960
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/b19124162f94c9ddb57b34689d280b0c29d2be54.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 16 Apr 2018 17:05:22 +0000
Certificate not after:    Fri 16 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 264848
                          IP: 45.235.88.0/22
                          IP: 2801:11:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14424416 (0xdc1960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 16 17:05:22 2018 GMT
            Not After : Feb 16 05:00:00 2024 GMT
        Subject: CN=b19124162f94c9ddb57b34689d280b0c29d2be54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:b4:bb:74:5b:64:6c:db:d6:25:da:e9:70:
                    5a:24:61:a1:18:27:d6:96:c5:98:9c:67:94:ac:89:
                    fb:c1:ff:47:81:b3:17:22:76:f9:72:84:85:88:fd:
                    49:b6:79:6a:6e:4f:bd:71:5a:2e:48:1b:2f:63:2b:
                    89:7f:49:dd:b2:f8:fd:04:6c:04:9d:7d:25:5e:39:
                    8e:fc:80:55:f9:ac:31:2d:3c:41:eb:e6:ed:bf:13:
                    fe:b5:c0:ce:40:82:d0:f0:ca:d4:78:04:0e:eb:6b:
                    11:2b:70:52:eb:ee:f4:7a:8f:e7:e2:f7:55:1c:ca:
                    ee:09:56:25:5d:90:2c:24:6b:e1:1b:36:ef:31:73:
                    c9:fe:88:80:6c:d6:5c:c7:5a:b2:e2:59:1e:98:b4:
                    db:e3:4f:a3:0c:50:bb:3d:9a:c9:4b:06:ae:00:06:
                    72:8e:c6:ae:5a:df:fc:d9:f9:e3:f2:21:3d:01:82:
                    22:71:c9:7e:6a:93:aa:1b:3c:7f:97:e2:1b:b6:45:
                    13:e4:85:dc:1c:dc:3b:d7:59:77:71:42:66:c3:34:
                    31:78:33:e1:f4:f0:d9:61:4f:a5:fe:f6:0f:22:96:
                    ec:6d:dd:61:70:27:6f:cf:76:a1:9d:da:65:ea:51:
                    d5:6e:aa:5e:b4:10:31:e6:e9:2c:c0:a3:08:cb:7c:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:05:F0:F8:5F:7E:F3:70:84:D3:69:4F:0F:90:88:42:05:8A:96
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/b19124162f94c9ddb57b34689d280b0c29d2be54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.88.0/22
                IPv6:
                  2801:11:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264848

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:dc:3f:19:39:f7:a3:a8:d5:21:8d:56:ca:fa:83:0f:22:
         56:71:e8:dc:08:d2:62:64:ae:7f:ea:f6:2a:cb:c4:9b:6c:a9:
         0c:96:58:7c:fb:aa:70:79:49:4d:06:26:97:51:af:e9:96:3e:
         6e:d5:a9:f6:bf:31:57:aa:f9:d5:e6:5f:49:01:67:79:6c:5b:
         57:27:b1:91:c7:f4:90:2f:b5:8a:41:68:2f:ca:e7:7c:2e:18:
         4c:54:37:ef:fe:c4:5c:8e:57:08:9d:de:fb:4e:cd:f9:90:0b:
         8e:6d:54:1b:b8:ad:6c:af:49:45:27:e2:24:d8:92:8e:fa:be:
         a1:62:9d:c3:97:ae:44:52:48:f8:bb:36:56:e6:5d:9c:ce:cc:
         ea:ae:ef:ee:86:ee:d6:2f:af:bd:b9:10:8f:e4:5e:be:ee:91:
         13:25:a3:e3:0e:29:e4:56:04:68:61:9f:a1:50:af:e8:e2:09:
         33:32:7e:ff:38:1c:2f:6d:ae:f7:23:35:b3:90:8c:c0:7f:5a:
         52:44:4d:29:b8:af:d7:83:02:ea:bd:8b:8d:0b:fc:34:04:05:
         66:ab:b6:7d:fe:d4:0c:53:53:34:dc:bf:9f:79:33:57:e8:e4:
         62:63:1d:6a:3b:7a:c4:d0:53:06:d5:a7:32:98:6b:b1:59:1b:
         64:76:a8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----