Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.cer
File:                     b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.cer (raw, json)
Hash identifier:          93kaGaKi6j2PjgYe8NYiDMw7eIbnxj24wD2/0bu1PuA=
Subject key identifier:   0F:D8:5A:F9:A2:48:0B:ED:3B:B9:AC:B7:69:BF:09:8C:0C:47:D2:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3AF35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Dec 2018 00:21:02 +0000
Certificate not after:    Sun 01 Sep 2024 18:26:45 +0000
Subordinate resources:    AS: 267713
                          IP: 45.164.148.0/22
                          IP: 2803:69a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15970101 (0xf3af35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 13 00:21:02 2018 GMT
            Not After : Sep  1 18:26:45 2024 GMT
        Subject: CN=b5dca082181b21ea54e3fcb373c3ae36b89b6b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:df:1d:3a:82:bb:32:dd:c3:12:6a:01:03:
                    71:40:7a:40:1b:43:3e:fc:19:be:39:15:16:7e:fa:
                    bb:04:8d:5a:c9:4b:34:e5:fd:88:6e:58:34:49:f6:
                    82:78:28:04:18:ad:bf:92:85:81:0a:cc:f7:b3:ed:
                    10:d1:78:15:cd:05:12:9a:9c:39:54:3f:e6:bf:17:
                    a1:bd:a8:9b:19:9e:03:82:4b:b1:61:0f:68:c7:75:
                    67:34:31:52:f2:a1:c0:6f:d4:86:02:b5:ee:11:6d:
                    be:39:17:d9:c4:8c:df:6c:52:89:32:56:6f:46:e1:
                    78:31:ac:d9:60:ad:8c:47:b9:7c:95:12:dd:0e:79:
                    58:0f:15:0c:e4:6d:b5:8c:1d:7f:e9:6c:3a:25:60:
                    03:29:79:60:0d:10:37:e9:13:b1:b9:e7:3f:9a:46:
                    d0:a9:53:8f:49:2a:59:d5:03:61:48:26:43:3c:89:
                    d9:3d:6a:89:37:b7:e3:ca:ab:9f:3f:7a:cc:a0:92:
                    65:fc:57:bd:ef:42:b4:13:59:3d:c0:d7:5d:df:5c:
                    7f:9e:2a:fd:5e:28:f5:cf:99:54:b7:8e:ec:8b:a7:
                    d7:a6:86:3b:40:f1:c2:6e:59:c7:7f:0d:4a:65:44:
                    5b:c8:47:20:98:60:ca:79:66:f1:f6:9c:98:82:99:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D8:5A:F9:A2:48:0B:ED:3B:B9:AC:B7:69:BF:09:8C:0C:47:D2:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.148.0/22
                IPv6:
                  2803:69a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267713

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:1b:ba:83:4f:47:10:16:8e:c0:6c:9f:2c:a8:fe:35:e4:
         ce:38:24:25:7e:03:e4:3a:ee:f5:66:85:b8:17:16:49:d7:e3:
         98:4d:65:bc:bd:d9:8d:b1:98:e9:17:26:7c:0b:96:f1:91:21:
         0a:81:3e:0f:4d:c0:53:7d:8e:c1:ab:44:21:f9:70:b2:22:de:
         6f:1d:23:8a:48:c8:31:3f:f1:2d:cf:fa:93:f9:b1:58:bb:a9:
         ca:3b:ff:bd:fa:c6:1a:6c:8c:93:92:1d:00:4d:2f:d8:57:12:
         99:86:a3:85:b1:e0:c6:75:51:6d:ec:bf:e8:4d:d1:25:98:7c:
         9e:d3:a2:13:a3:9d:08:8b:b0:51:2b:60:f1:be:3d:d9:57:da:
         5b:0c:86:d3:27:47:1b:f8:35:5c:4f:24:37:e3:54:21:71:81:
         6f:d4:7d:4c:26:31:bc:75:19:da:ac:dc:98:74:32:c5:de:d7:
         50:c0:cb:57:6b:11:54:ce:3f:b8:42:3b:25:d0:be:be:47:ba:
         18:5c:81:1a:d1:bd:af:85:47:e1:07:29:1e:c9:5c:47:1c:1d:
         14:0f:8d:47:55:e1:5e:37:0b:1a:a0:75:62:ab:96:7a:8e:bc:
         5c:fa:d8:7b:aa:9c:79:9d:a3:4b:0e:12:23:8a:48:ff:96:8c:
         9a:8a:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----