Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0c3190bc902c16f95a9189977c2b845fc1db00.cer
File:                     bf0c3190bc902c16f95a9189977c2b845fc1db00.cer (raw, json)
Hash identifier:          E3v3TcHmL9CdyGUwlm6CBw7Ajsn4CwLimvwJop6LMmw=
Subject key identifier:   5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010FBDEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/bf0c3190bc902c16f95a9189977c2b845fc1db00.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Nov 2018 13:51:47 +0000
Certificate not after:    Sun 11 May 2025 17:40:44 +0000
Subordinate resources:    AS: 266846
                          IP: 45.238.176.0/23
                          IP: 138.0.122.0/23
                          IP: 2803:bca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17808875 (0x10fbdeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 13:51:47 2018 GMT
            Not After : May 11 17:40:44 2025 GMT
        Subject: CN=bf0c3190bc902c16f95a9189977c2b845fc1db00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:19:f3:ba:89:3f:d2:ce:17:6f:d2:a8:c1:
                    35:51:f0:4b:31:75:5d:f7:10:2c:ab:9f:3a:ae:31:
                    29:6d:48:eb:0d:2f:97:83:07:77:bf:f0:b6:ea:d7:
                    31:7e:1a:ae:a0:5a:7b:b9:e4:72:d8:69:99:b6:35:
                    d3:78:fa:f2:84:7f:6b:bd:d7:da:ce:6b:63:da:15:
                    80:98:2b:eb:5f:d4:7f:61:b6:24:20:5d:6e:7d:74:
                    9b:3c:68:a4:68:3d:fb:e8:39:e2:c2:8a:7f:76:20:
                    7b:bc:c3:d2:85:00:31:f7:41:e4:c5:4d:45:63:4e:
                    82:a5:bb:bb:58:4c:07:90:09:32:fb:c9:31:f7:ae:
                    5e:ff:c0:53:8e:7f:27:59:05:f1:43:c1:3f:3c:ca:
                    6b:ab:7c:79:78:40:d0:30:a3:fe:a4:9f:25:b0:09:
                    cc:81:69:21:13:90:83:5f:4e:8f:64:0f:1d:16:c5:
                    d9:bf:25:56:c5:30:7b:36:d3:82:1d:e5:a9:36:a2:
                    23:cf:26:57:57:fb:d4:13:6a:42:45:4e:91:15:af:
                    b3:a8:7b:7f:32:c0:cb:ff:39:08:cc:26:93:bf:73:
                    49:3c:1a:6e:93:ec:3e:02:04:3d:d3:c2:5d:b5:db:
                    ba:cf:87:9e:ff:cd:7a:3b:53:3a:15:0e:2b:fa:e9:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/bf0c3190bc902c16f95a9189977c2b845fc1db00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/23
                  138.0.122.0/23
                IPv6:
                  2803:bca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266846

    Signature Algorithm: sha256WithRSAEncryption
         af:98:9f:60:be:10:43:78:ff:dc:53:32:31:5d:2e:04:15:d3:
         d1:9c:be:81:df:e2:d0:ee:4c:62:7e:ef:8d:ba:58:ad:26:15:
         99:44:cc:3e:20:9b:72:37:ee:b8:7a:26:56:10:a7:48:5a:0f:
         14:36:57:fd:df:e7:7e:85:41:0e:e2:64:27:cf:43:90:5e:ca:
         43:9d:f6:02:f0:73:f4:71:01:b3:12:52:dc:c0:bf:94:03:84:
         48:88:8b:02:65:ac:e3:cb:27:d1:dc:ba:41:fc:5c:10:96:bc:
         79:fb:fd:b8:86:ce:5b:84:7f:45:f6:1e:d7:4a:8f:e5:bf:d8:
         2f:c9:db:7c:b5:b9:8b:b9:16:e5:a5:da:a0:50:43:c2:3c:59:
         cb:93:c5:ba:bd:90:49:3c:b6:26:c1:66:3c:19:5a:fe:e3:ba:
         1d:98:57:cc:13:e0:d0:a9:02:f9:74:4f:07:cc:76:51:b2:db:
         ba:53:1a:34:fc:bc:69:fe:49:bf:84:d7:3c:1c:5f:19:d0:bf:
         7f:b7:3f:a6:15:3a:48:ad:5b:07:f5:73:fe:18:7b:2b:d5:95:
         3f:59:bd:19:55:f9:89:29:55:a7:d0:55:d7:9d:c7:0d:19:d3:
         eb:c4:a4:3f:23:ea:d7:43:2d:e2:96:53:d6:97:20:42:e3:bb:
         d0:8b:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----