Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
File:                     bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer (raw, json)
Hash identifier:          NPPPnz+xcXHo9LCufgM6IEKo1l0r+wB45WrtGlpALyY=
Subject key identifier:   EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCE1F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 May 2018 02:00:48 +0000
Certificate not after:    Fri 23 Feb 2024 17:24:28 +0000
Subordinate resources:    AS: 266784
                          IP: 45.235.120.0/22
                          IP: 2803:a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14475766 (0xdce1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 02:00:48 2018 GMT
            Not After : Feb 23 17:24:28 2024 GMT
        Subject: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:83:54:d7:2f:89:26:fb:3f:f1:ec:9a:bc:
                    23:1d:98:f4:85:c7:df:9a:8e:13:bb:6e:1f:a3:e0:
                    7e:f3:31:6c:eb:05:9d:d5:4d:8e:74:5d:a0:08:03:
                    50:6a:30:aa:6e:01:8e:09:9a:61:c9:b2:64:55:c6:
                    a3:62:31:88:93:81:09:69:af:68:5e:b2:e9:53:5a:
                    c9:eb:bb:4a:de:20:08:68:1d:dd:09:37:db:0d:8a:
                    84:e2:06:d9:cd:52:05:3b:7a:20:f4:b7:28:74:10:
                    e0:27:93:57:d2:58:76:e1:4a:5f:f1:7f:0f:8d:56:
                    79:19:c1:f6:59:0d:b5:cb:e0:15:4f:da:54:a9:e7:
                    21:1d:93:b8:29:c2:78:46:1d:6f:c4:5a:8c:84:d9:
                    06:b6:a5:b2:55:41:30:f4:f0:36:6f:a1:b6:bf:67:
                    fc:b0:e3:1e:f8:84:e0:a7:e1:02:3d:ac:a8:5c:08:
                    f2:3e:e3:07:be:52:97:81:ed:23:c9:fd:3a:50:99:
                    b8:34:72:01:e9:40:c7:e6:85:11:16:b5:fd:1d:f7:
                    0d:b0:e6:a6:8f:b9:39:79:31:e3:b6:d5:1a:8e:fe:
                    5d:99:16:b4:c3:11:cf:d4:ef:74:4b:c5:16:d7:9e:
                    fa:87:0b:96:6d:b7:ff:60:7e:a4:15:ff:7c:23:37:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.120.0/22
                IPv6:
                  2803:a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266784

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:15:70:9b:5a:e9:42:0c:03:32:a4:fd:e9:79:fe:f7:5f:
         d1:88:5d:3a:3b:f8:8e:4b:70:1c:74:8b:5f:dc:d0:3a:85:9f:
         54:41:91:20:8a:cb:16:fe:27:ab:e9:4c:38:03:fe:6b:89:0d:
         72:52:93:61:00:0d:3c:fd:74:f6:2a:c2:ca:4d:c5:ae:36:2e:
         c4:95:e9:89:bc:30:98:0f:49:34:37:78:c3:c3:8a:97:7b:b4:
         ea:67:15:7d:7b:f4:75:ff:ec:64:09:b5:44:48:24:ec:8c:33:
         a5:32:53:51:99:51:83:39:8a:00:f8:a2:8c:bb:a9:9f:94:89:
         de:a5:47:34:8c:5f:c4:ca:55:2f:1f:7a:3b:8a:37:5c:29:1e:
         cd:6b:2f:34:b0:57:1c:45:db:f1:fa:bb:49:37:6c:96:9b:46:
         48:83:78:79:94:1e:d7:50:ee:ff:ec:6e:26:b5:b3:41:47:1e:
         8b:13:35:46:23:f3:3e:e3:75:f4:cc:74:f7:33:0c:a9:ca:04:
         14:fb:a8:7e:45:0b:56:fe:ca:5f:17:71:3a:ea:94:d6:c3:c9:
         2d:dd:0a:16:39:86:85:b6:48:6b:5b:37:30:b3:aa:c1:f6:72:
         2d:c4:8d:26:69:3c:09:a5:1e:17:ff:32:52:99:7f:18:d1:21:
         99:49:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----