Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
File:                     ba308093e64c97bdb011354807c2065ac693e761.cer (raw, json)
Hash identifier:          HsEmmvvhFu3Gz/VzrBXLV8rIzMFBQVfciXbZ96cfW6s=
Subject key identifier:   1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F708FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Dec 2018 12:59:32 +0000
Certificate not after:    Sat 28 Sep 2024 22:45:27 +0000
Subordinate resources:    AS: 269804
                          IP: 45.167.124.0 -- 45.167.126.255
                          IP: 2803:b5a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16189695 (0xf708ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 10 12:59:32 2018 GMT
            Not After : Sep 28 22:45:27 2024 GMT
        Subject: CN=ba308093e64c97bdb011354807c2065ac693e761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:dc:c1:93:a1:f9:78:a7:20:94:2a:e4:ee:
                    30:d8:d5:a5:f8:d6:10:42:6d:83:63:aa:ed:12:f3:
                    32:b3:cb:a5:81:0f:57:ad:8b:7a:38:93:67:6b:b0:
                    06:8f:af:ff:e6:2a:6d:c2:d1:f0:01:16:93:63:45:
                    27:5a:e7:45:73:1b:45:7c:1a:d4:71:aa:72:73:6f:
                    5c:3d:c4:0f:f9:bc:29:cc:38:c0:d9:0a:b8:13:f7:
                    1d:76:59:85:90:da:ad:0a:be:cf:fd:17:0c:88:34:
                    7c:ff:56:d8:d6:be:00:2b:3b:34:4c:bc:9b:e8:f2:
                    55:64:1c:ff:c2:f2:e0:0d:33:97:71:b3:63:64:ce:
                    91:7a:62:ed:cf:9f:73:62:d7:2a:df:6f:d4:47:b8:
                    04:ea:f8:57:6a:f2:73:84:43:e5:cd:4c:3b:64:23:
                    db:be:48:98:35:fa:6b:8f:41:91:a6:e5:bb:59:0d:
                    3a:07:f9:d2:ec:42:83:51:79:dc:0e:63:ab:9f:c2:
                    ce:02:e3:4e:31:d0:34:bd:80:f1:f8:01:c3:df:27:
                    84:5f:d4:b4:0c:8a:16:a2:31:d7:aa:df:37:c3:f9:
                    67:28:3b:0e:1b:59:8a:b1:84:3a:75:f5:d4:e1:50:
                    5a:0f:e8:5b:bc:ca:e6:c7:11:73:be:dc:af:a9:75:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.124.0-45.167.126.255
                IPv6:
                  2803:b5a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269804

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:d8:04:af:58:1d:03:28:81:05:8d:f2:26:eb:df:cc:88:
         0e:11:23:ec:fa:0c:d2:17:03:f8:bb:0d:db:f8:4b:37:f8:10:
         cf:32:45:02:3d:4c:c9:d7:36:62:11:ed:74:e2:4d:b8:eb:0a:
         5d:d7:96:df:24:40:e1:93:fb:e0:39:af:fe:44:c4:a3:13:4e:
         b7:30:10:06:40:25:f8:3d:d9:0d:82:91:a4:d5:0e:cc:d5:14:
         38:c3:dd:9c:ba:ce:a8:4f:30:33:48:b8:ea:b2:74:18:f5:ce:
         73:66:bf:d6:6e:e0:0d:7d:db:87:41:4c:bd:f7:6f:6c:18:2e:
         57:68:cf:c9:a4:62:c3:b4:99:16:8e:77:91:b1:45:cd:56:8f:
         da:54:1d:78:55:b4:4a:07:6c:a7:e2:22:86:85:21:dd:25:6d:
         9d:07:a0:c0:3b:ac:d7:e4:53:e6:1d:a7:a4:0b:27:02:10:e8:
         b2:b1:dc:aa:58:7d:2f:47:62:91:b0:f6:86:45:7f:51:bc:9f:
         96:ed:7f:27:10:04:57:59:c1:be:bc:01:01:91:6b:0c:2d:91:
         2a:19:74:db:4f:41:03:e1:15:7f:8b:67:91:9f:51:69:74:a1:
         9d:6f:7a:97:02:6d:24:e1:a3:73:b1:92:66:cb:a2:b7:41:ff:
         a7:bf:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----