Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c09f4dc9446535d2264e5afbc2b3e9ad85f2746c.cer
File:                     c09f4dc9446535d2264e5afbc2b3e9ad85f2746c.cer (raw, json)
Hash identifier:          RPvqJeYNnQwERUmbm05wvO8IFRIkDXVHyFFld7m82iY=
Subject key identifier:   BC:44:A1:FB:D2:A4:4C:22:AF:69:04:36:55:3D:F4:13:44:4F:DA:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF8E7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/45573a30-eead-49e5-854a-7526d14847e6/c09f4dc9446535d2264e5afbc2b3e9ad85f2746c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/45573a30-eead-49e5-854a-7526d14847e6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 09 Nov 2018 22:56:10 +0000
Certificate not after:    Sat 27 Jul 2024 17:02:32 +0000
Subordinate resources:    AS: 267687
                          IP: 45.163.80.0/22
                          IP: 2803:7ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15699580 (0xef8e7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 22:56:10 2018 GMT
            Not After : Jul 27 17:02:32 2024 GMT
        Subject: CN=c09f4dc9446535d2264e5afbc2b3e9ad85f2746c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:b0:c7:d4:be:c9:5c:84:92:81:4e:a0:77:
                    07:1a:6f:21:c7:92:c8:23:cd:88:c6:06:40:1b:e5:
                    e5:ff:cc:a9:e3:25:b1:da:80:7c:dc:ff:ba:49:38:
                    2f:93:59:9e:31:96:3c:87:b7:a1:43:3e:20:fa:8d:
                    14:23:95:cf:c7:69:d1:8f:52:6c:76:a5:49:de:01:
                    d0:e8:da:cf:91:9a:54:6b:08:9a:ff:ef:0f:72:29:
                    63:94:a5:32:da:bc:1c:87:57:7a:e9:17:56:9a:13:
                    90:10:08:e4:65:fa:74:37:28:63:4a:7a:df:7d:99:
                    a0:eb:b4:77:c7:1f:06:8b:fa:48:c4:49:f0:52:ee:
                    67:f2:40:1c:74:78:67:a7:49:29:d7:67:f0:d8:0a:
                    fb:2f:9d:5f:bb:b7:75:4b:ad:07:25:4b:c6:ac:35:
                    9e:af:7d:cc:f2:87:6f:bd:b5:5a:c1:b2:f9:0b:77:
                    2a:17:e7:96:39:e4:2a:8d:52:ab:e8:1e:e4:8a:6e:
                    d4:c6:16:15:66:96:f3:81:b8:55:80:ec:05:0a:7b:
                    ae:53:bd:0a:c5:fd:ee:c3:e3:ea:54:f0:27:df:c1:
                    a2:15:d5:1e:2b:ec:ae:f5:e1:67:f5:c2:48:a3:79:
                    3a:e4:91:15:ba:0c:5a:cd:a0:eb:f3:44:b9:de:1f:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:44:A1:FB:D2:A4:4C:22:AF:69:04:36:55:3D:F4:13:44:4F:DA:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/45573a30-eead-49e5-854a-7526d14847e6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/45573a30-eead-49e5-854a-7526d14847e6/c09f4dc9446535d2264e5afbc2b3e9ad85f2746c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.80.0/22
                IPv6:
                  2803:7ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267687

    Signature Algorithm: sha256WithRSAEncryption
         68:01:1e:0e:53:80:2f:10:e6:92:3e:25:10:71:cf:e5:72:a6:
         d3:d6:ea:2f:c0:d9:2f:f8:07:63:72:2d:1d:cc:6e:8f:75:02:
         f9:78:1f:a0:d3:e3:ce:ec:2a:aa:a4:6e:29:19:b4:90:31:96:
         bd:04:73:69:df:da:03:3c:2a:5c:8d:a2:54:82:0a:28:5c:83:
         5f:0f:35:35:14:58:7c:06:60:bc:41:ea:81:26:f1:49:ce:c3:
         e7:54:4f:95:3c:28:1d:d1:69:6f:0f:43:a4:9a:04:55:5c:eb:
         b0:33:b8:c4:01:b3:06:4e:12:17:09:a2:4a:c7:ec:a0:59:02:
         e7:c3:fc:5b:ab:22:e7:26:b6:0c:3a:ae:9a:60:f5:50:be:40:
         04:84:b0:40:a5:c7:7a:a5:5b:9c:81:81:cd:76:46:d4:55:ec:
         2c:4a:c7:ad:43:f1:d7:96:a4:f3:0a:9f:0b:e1:b1:3a:ba:72:
         68:a7:7b:2a:fc:cf:e2:d9:45:ea:05:44:3c:3d:d1:63:a3:b9:
         5e:05:42:60:22:2f:99:22:95:b8:c9:0c:44:a3:2f:0a:f5:cc:
         97:5f:bc:d1:0a:ea:ed:12:00:02:ac:c6:ff:7d:c9:14:0b:43:
         d0:56:52:86:4b:60:7c:da:d3:08:96:aa:0e:36:f4:6e:43:e3:
         21:52:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----