Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd356fa16701410ed220e07da0b0f97af447c0dd.cer
File:                     bd356fa16701410ed220e07da0b0f97af447c0dd.cer (raw, json)
Hash identifier:          UCfriplH6GwGAq9PzmLAb9H62ud13g/B1+iYC5Rl/ig=
Subject key identifier:   75:5A:84:CC:11:A0:3B:07:23:DD:A6:5B:C4:6D:62:0C:74:98:DB:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C9AB7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/bd356fa16701410ed220e07da0b0f97af447c0dd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Sat 09 Mar 2024 14:44:31 +0000
Subordinate resources:    AS: 265715
                          IP: 45.65.148.0/22
                          IP: 2803:55c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13216634 (0xc9ab7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Mar  9 14:44:31 2024 GMT
        Subject: CN=bd356fa16701410ed220e07da0b0f97af447c0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:f8:4e:c8:8a:6b:a5:b1:a5:d6:a1:5e:86:
                    86:04:b1:df:cb:2c:ff:44:1f:1b:77:d4:db:1c:6e:
                    44:f0:b4:af:46:4a:1a:a7:66:b4:99:10:89:dd:ec:
                    0f:85:da:c4:6e:50:26:7b:b4:0c:68:13:68:5d:3d:
                    32:9e:d9:9d:70:d1:34:ac:61:4e:57:c6:e6:5b:5d:
                    ef:5b:65:73:c0:36:21:dd:d0:df:47:01:a9:07:76:
                    b5:d7:b5:11:dc:b9:c4:3a:61:e5:1b:f5:71:e8:b0:
                    e3:97:8e:0a:04:f5:74:89:88:54:86:94:52:e4:ea:
                    44:8c:34:94:a0:d0:99:e6:d5:f7:cd:2e:a3:1d:b9:
                    94:8c:2f:3f:5c:22:22:a2:40:02:8d:27:9f:c5:2e:
                    93:a3:30:7d:81:7c:d2:77:a7:92:94:ee:37:b1:3d:
                    4c:64:a7:66:2b:13:7b:65:0e:b3:45:97:70:70:91:
                    8f:66:93:9a:ac:39:1d:d2:35:ea:32:3c:a3:32:5e:
                    19:67:f5:34:6f:14:28:8b:3a:5e:45:00:64:8e:0c:
                    e2:f2:75:c2:7d:be:c3:52:64:46:80:2e:f0:d9:5e:
                    0a:60:bd:a1:ca:e6:b0:a2:cd:c9:ee:4c:ab:78:8f:
                    83:ba:80:8d:f2:4e:6a:49:3a:30:e2:7d:e2:3d:b2:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5A:84:CC:11:A0:3B:07:23:DD:A6:5B:C4:6D:62:0C:74:98:DB:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/bd356fa16701410ed220e07da0b0f97af447c0dd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.148.0/22
                IPv6:
                  2803:55c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265715

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:d2:ce:6c:fd:33:2a:20:5f:5d:eb:ee:65:42:8d:4f:f2:
         ae:a2:93:85:65:89:de:63:08:ca:e8:97:58:c6:f3:03:21:c0:
         5f:e9:9b:8f:a0:5f:25:3f:19:11:93:1b:6b:7c:2d:ad:22:e9:
         d8:c3:06:e5:4b:10:55:47:a2:2c:2a:6e:2d:d0:70:6d:bf:64:
         ca:5e:85:08:4a:1b:db:ad:47:81:13:1c:3a:4e:bb:2c:3f:5a:
         9e:b9:aa:3c:29:14:3e:57:c4:d4:66:a0:c2:4d:de:79:cf:44:
         68:ec:6f:bc:1b:84:c7:86:7f:ac:f3:d3:95:b2:b5:f2:72:8b:
         71:6c:7b:cf:f3:b7:dc:66:2f:b8:ca:ce:11:ff:5b:06:ee:6c:
         54:eb:7c:04:90:41:cb:ad:d7:74:cb:d7:20:4e:28:47:63:7e:
         4b:48:8e:ec:6d:25:76:ae:10:60:ac:36:76:85:1c:34:dc:ad:
         1a:b3:bc:1f:5e:58:07:c8:32:19:f5:e4:4b:af:19:b6:62:b3:
         c1:25:c5:20:79:9c:a8:53:59:0c:ec:3c:5b:92:a9:38:7d:55:
         08:62:b3:1e:c8:dc:37:f5:73:ed:f9:1c:bb:d1:db:14:b1:7e:
         f5:03:da:63:a2:74:d3:dc:7d:76:03:99:c7:84:77:59:41:fc:
         dd:8b:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----