Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer
File:                     c3d85f03580e6350cae3b1665689b40bfef21165.cer (raw, json)
Hash identifier:          c5NOsjGVYQYI1C+Q1tmMCRQM1CURP/WOTLECBb9uhwQ=
Subject key identifier:   1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7B60E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 22 Sep 2019 00:57:36 +0000
Certificate not after:    Thu 21 Dec 2023 18:28:41 +0000
Subordinate resources:    AS: 267778
                          IP: 45.171.108.0/22
                          IP: 2803:97a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14136846 (0xd7b60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 00:57:36 2019 GMT
            Not After : Dec 21 18:28:41 2023 GMT
        Subject: CN=c3d85f03580e6350cae3b1665689b40bfef21165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:18:f5:55:61:e1:2f:3b:02:29:0e:7d:1c:
                    a7:f1:d8:92:7a:27:85:3c:af:9e:78:4e:de:34:2f:
                    14:ef:af:c9:1d:e5:cc:b9:43:79:06:f9:56:41:b8:
                    29:1a:c1:3a:41:94:ec:3f:27:82:73:4f:bd:ce:11:
                    01:7a:69:be:ea:15:5d:e1:98:da:00:4f:51:e2:85:
                    08:74:06:e9:46:c4:e2:ce:f2:67:2b:36:88:69:c0:
                    68:41:97:0c:f8:fc:43:57:93:b0:6d:04:5a:46:1c:
                    b1:35:ce:04:d9:f5:2f:7b:6c:fc:57:75:ea:e9:46:
                    a2:12:33:6a:77:c6:52:9b:68:19:85:94:ec:91:07:
                    9e:99:90:68:88:f1:93:25:52:e3:62:1f:d9:c0:13:
                    6f:1d:32:0b:d3:d6:1f:58:bd:8a:dc:b6:b3:b5:38:
                    d2:8d:99:1b:5e:15:6e:2f:59:04:92:5c:00:22:8c:
                    a4:64:2e:8d:bd:5c:34:91:d1:27:4a:77:be:a4:b6:
                    2b:8d:e0:1e:cb:96:8d:9d:08:72:7e:cd:67:9c:df:
                    eb:4f:6e:61:f9:a3:62:d7:eb:d1:03:f8:fe:c0:15:
                    63:6a:18:5b:3c:a8:52:f5:22:d6:b4:62:f7:bd:79:
                    71:ff:9d:92:83:f5:63:81:05:39:9c:95:6f:33:62:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.108.0/22
                IPv6:
                  2803:97a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267778

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:01:58:f1:9e:f8:84:4c:09:01:6e:88:11:74:4f:f2:eb:
         29:d5:3f:0b:06:c3:8f:63:b3:04:e0:68:7f:42:a6:c5:d9:30:
         d0:b5:17:e4:74:79:5c:64:d9:2c:75:c6:b1:54:fa:2c:4f:a5:
         e4:ca:d8:ba:5a:b2:1e:44:dc:1e:48:06:8b:a7:f1:5d:7f:a0:
         f3:c7:5d:ea:f4:bd:26:78:ea:db:09:03:5a:57:f2:7c:60:cf:
         22:b4:24:ca:d6:10:b1:c1:a5:d6:a1:12:76:ef:1e:4d:ea:2a:
         d7:77:21:cb:ac:95:5f:13:f4:e4:fa:2c:d8:b3:00:5d:5b:aa:
         3e:bb:df:79:3a:1f:93:36:2b:2a:17:40:55:08:f0:cf:e4:b7:
         b0:d8:e2:51:52:ae:50:a9:31:9e:36:8f:df:87:3b:67:a4:82:
         f8:3a:0f:20:36:6b:a1:71:c1:1f:ae:6b:16:d2:0c:b9:9a:29:
         70:f9:8d:95:d8:61:cc:c4:6b:47:a7:87:44:a5:46:10:f7:28:
         38:84:de:74:49:16:0f:4b:08:3a:c3:c2:9d:07:7a:81:a6:e7:
         21:17:18:bb:10:82:ae:7c:bb:07:52:12:95:0f:ec:f1:d9:dc:
         f4:57:39:4f:b5:4e:b1:31:7c:42:04:a8:07:96:ef:9e:9c:73:
         5a:58:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----