Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
File:                     bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer (raw, json)
Hash identifier:          KguE+UfGkKqNxorsBo9Wk1Pqkp1zVrcxSefrSF4qpXU=
Subject key identifier:   AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF5DAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Aug 2018 08:48:49 +0000
Certificate not after:    Fri 22 Mar 2024 15:44:48 +0000
Subordinate resources:    AS: 266808
                          IP: 45.236.140.0/22
                          IP: 2803:98a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14638506 (0xdf5daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 22 08:48:49 2018 GMT
            Not After : Mar 22 15:44:48 2024 GMT
        Subject: CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:52:9a:a9:c2:e1:19:8d:03:7a:b9:03:af:
                    ea:95:2c:9e:b2:57:93:d2:b3:8b:d4:3d:4e:2d:54:
                    d8:c9:cf:c0:3b:87:eb:89:54:ce:f1:f9:f9:55:6a:
                    89:fb:bf:e8:38:c3:ac:f4:13:10:b7:a8:34:af:d9:
                    5b:90:d1:79:9e:f9:ec:d3:40:80:ad:80:d6:87:0b:
                    f9:0b:f9:ca:d4:6b:a5:1c:ca:6e:49:3f:d7:9d:0f:
                    78:9d:cf:1d:23:23:98:fa:4a:54:be:6b:6e:96:ed:
                    67:8a:9b:8e:0b:da:d0:fa:da:51:b9:d8:e0:ac:51:
                    47:11:f1:5f:3f:8e:46:78:ef:d0:5d:81:32:cc:b5:
                    53:a1:b4:c4:87:02:54:26:7d:aa:75:81:a3:75:b6:
                    be:e3:fd:f9:41:91:73:e4:af:25:6b:38:2b:90:2e:
                    48:c2:ef:6c:74:c6:31:c3:fc:fe:9e:1c:10:34:e4:
                    18:ff:71:d1:cc:3f:ab:d3:51:df:35:52:e5:4b:35:
                    d8:73:da:00:73:48:35:bd:18:10:48:10:5e:06:78:
                    b7:8e:aa:20:4d:57:91:70:5a:38:0b:c4:11:17:96:
                    f4:3e:b4:18:68:3f:cd:88:12:1a:db:22:67:bd:81:
                    9b:0b:f0:ff:d6:9a:b1:13:1d:85:44:94:8b:5c:99:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.140.0/22
                IPv6:
                  2803:98a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266808

    Signature Algorithm: sha256WithRSAEncryption
         84:10:4b:60:f3:02:fa:a6:ca:77:dc:f6:65:fb:0b:dd:87:98:
         c3:86:b8:51:bf:f9:b7:dc:c2:24:2b:b7:b4:d3:21:dc:7f:54:
         91:a1:f7:bc:88:07:1e:82:97:79:a0:c4:d9:26:81:e7:f1:b4:
         45:b4:5e:75:8c:31:0c:5c:45:8f:ac:62:58:c8:93:f7:f7:3f:
         3c:b4:00:54:de:c9:fa:6f:45:f9:d5:1f:59:c2:d8:fb:51:ad:
         64:5c:6c:58:b7:91:14:1e:dd:16:a1:d7:ce:c3:0c:2c:bf:0c:
         57:c8:e6:18:41:e2:56:21:98:4a:87:25:86:16:8c:b6:be:61:
         5d:4a:6e:a7:d2:f0:44:cd:eb:76:83:dd:8f:7f:f3:44:d2:e7:
         50:21:8f:8b:f4:44:26:3c:2c:58:0d:60:d1:02:b0:76:82:9b:
         d7:94:b5:3a:8f:bd:af:33:ed:5b:8c:c4:cc:49:34:20:dc:b2:
         80:76:9e:27:ce:da:6f:56:48:45:3a:ab:ce:7e:de:5e:b4:66:
         8f:f7:8f:5a:aa:9a:ba:3f:58:a6:7c:b7:df:bc:f3:96:64:5c:
         bc:97:bc:a8:db:7e:60:08:84:c1:9f:06:9a:80:c6:97:cd:4b:
         db:ed:0f:61:d5:29:1a:b0:0e:dd:b9:a8:f3:c2:e9:38:a3:3d:
         8b:b0:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----