Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4c34beded58f9028077382865f49d5f2d2c5b13.cer
File:                     c4c34beded58f9028077382865f49d5f2d2c5b13.cer (raw, json)
Hash identifier:          z/oJGOI7ptC9xGCUYChjzOWJHrskWQyY0H2A1WHDTWY=
Subject key identifier:   A9:C0:A9:D6:35:53:63:70:EC:A3:47:35:41:B1:AF:2F:94:2E:F3:E4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D916E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/c4c34beded58f9028077382865f49d5f2d2c5b13.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Mon 08 Jan 2024 14:17:39 +0000
Subordinate resources:    AS: 265666
                          IP: 45.5.56.0/22
                          IP: 2803:eec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14227168 (0xd916e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Jan  8 14:17:39 2024 GMT
        Subject: CN=c4c34beded58f9028077382865f49d5f2d2c5b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:0c:b4:ab:71:f5:bc:3d:08:c1:35:4f:3b:
                    60:18:ce:85:1b:0a:3d:fb:7c:cb:ad:24:db:58:36:
                    68:0e:d0:af:06:51:34:de:13:e3:41:8c:7a:94:ca:
                    40:e6:8d:3a:a9:3a:a5:f7:f1:17:1e:2b:ed:84:07:
                    ce:2c:08:fc:c8:ad:c0:b0:4c:ea:e0:27:55:45:3c:
                    d7:b8:59:85:54:e6:7d:ed:1e:8f:f8:30:17:b6:ee:
                    8a:c6:88:d4:3a:f1:7a:0a:e6:d1:48:9e:9c:07:f9:
                    cd:dc:5b:9c:b3:39:a0:06:11:bb:da:4c:98:a0:49:
                    73:7a:6b:3d:e2:22:fc:28:f6:3e:ae:19:0f:17:ad:
                    15:74:78:bd:59:cc:2a:09:59:2f:f0:5a:d2:80:37:
                    1f:ac:96:88:f4:c2:4b:90:e0:b3:28:11:35:c9:9b:
                    d9:69:e1:90:71:42:15:eb:7b:97:71:10:b8:0d:fb:
                    db:a0:d9:9e:23:b5:89:df:02:d5:14:63:3e:7a:dd:
                    ab:6f:e8:c5:5a:6e:dc:08:c0:bd:24:b7:e8:be:5f:
                    c8:19:a6:df:3f:3c:b0:1a:66:ba:7e:bb:bd:80:88:
                    a3:f5:dc:a4:ce:d6:51:9f:dd:4e:6c:01:bf:d8:c0:
                    89:2b:e8:c8:e6:75:ed:54:e1:f9:ed:8c:ce:41:27:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:A9:D6:35:53:63:70:EC:A3:47:35:41:B1:AF:2F:94:2E:F3:E4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a99f809-08d7-44c0-a4ac-0647313941e1/c4c34beded58f9028077382865f49d5f2d2c5b13.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.56.0/22
                IPv6:
                  2803:eec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265666

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:b5:86:01:ee:ec:92:40:a6:5f:bc:6b:d7:05:77:33:79:
         e6:0b:96:5a:d6:41:2c:d2:57:12:51:ac:55:5b:d0:aa:8d:d8:
         74:b2:eb:eb:8a:59:2f:b3:48:46:06:44:c4:77:57:04:67:ea:
         b7:3d:ad:c9:dc:d9:ec:fa:45:c5:4e:4e:ff:70:39:64:d9:42:
         d9:00:ba:11:7c:4c:82:70:49:fe:fa:08:40:cf:a0:23:9d:9f:
         8e:a8:85:98:47:42:90:d0:6d:47:e0:31:be:42:27:6b:44:56:
         c4:71:0a:97:c8:2c:b8:79:08:7d:d9:52:85:af:6b:9f:a5:e7:
         b0:6b:5c:a3:5d:1c:79:08:71:ed:e0:c0:34:fe:53:16:06:e1:
         2d:cf:d8:0c:d6:fe:29:88:60:47:13:db:0f:1c:c7:d1:e8:3c:
         43:6d:aa:ec:93:cc:96:50:56:74:d4:a1:64:a3:59:f6:54:5e:
         59:b0:d5:29:8a:9c:ed:bc:17:52:24:58:51:22:4b:c5:8f:89:
         4c:84:62:33:34:6f:16:b1:3f:af:65:fe:ea:a2:da:72:47:2e:
         ed:db:fd:db:8b:6b:4c:cf:3d:f0:a8:7c:01:3d:1a:19:68:08:
         ca:69:ee:65:fc:05:a7:5f:f1:90:1a:ff:97:43:f7:1e:6f:a8:
         35:01:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----