Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a221969bbfbc74451f1eb376e1b95786137555.cer
File:                     c8a221969bbfbc74451f1eb376e1b95786137555.cer (raw, json)
Hash identifier:          e3RKnnw3eGpSZZgXNh8t+UcC68LDcVxqHmNzBc3zZ6A=
Subject key identifier:   8C:C6:C2:EC:CC:AE:29:FB:0B:98:F8:DD:F5:FC:E5:16:21:0C:BA:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE0DBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc43ebad-e062-41e7-90b2-f4604e70a0c4/c8a221969bbfbc74451f1eb376e1b95786137555.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc43ebad-e062-41e7-90b2-f4604e70a0c4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Dec 2018 15:53:32 +0000
Certificate not after:    Fri 08 Mar 2024 20:44:46 +0000
Subordinate resources:    AS: 266895
                          IP: 45.65.240.0/22
                          IP: 2803:95c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14552507 (0xde0dbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 28 15:53:32 2018 GMT
            Not After : Mar  8 20:44:46 2024 GMT
        Subject: CN=c8a221969bbfbc74451f1eb376e1b95786137555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:c4:db:c8:99:8a:3f:ce:e8:74:47:15:b1:
                    72:76:ce:81:ce:ee:a9:ac:f2:9c:21:50:65:f2:08:
                    af:13:95:fc:f1:05:10:7e:93:8c:56:33:ec:6e:83:
                    d3:aa:58:91:18:54:05:0c:7b:ab:76:32:08:57:13:
                    26:c8:13:2c:5e:c3:48:e4:b7:20:5b:20:ac:ac:fc:
                    cd:d9:1e:9d:68:ae:9c:52:bc:2e:67:d8:c0:f9:b7:
                    7c:49:07:2b:69:d3:11:19:fa:01:a0:e6:55:71:9b:
                    f2:3f:2c:89:c8:81:68:98:2c:b7:87:01:66:14:b8:
                    de:33:a5:5e:a2:82:78:79:be:20:ed:60:5d:9e:c5:
                    29:ce:96:6e:69:d5:92:54:28:08:e3:ed:68:3c:da:
                    51:68:07:b4:3a:52:5f:f9:48:3a:9d:ca:02:78:c3:
                    b9:41:8e:76:69:86:4c:4b:33:9e:3f:f6:05:00:68:
                    73:4e:26:ff:49:b7:fe:88:cb:6d:54:3f:07:37:dc:
                    a1:16:78:58:64:8e:0a:07:cc:1e:c0:51:4c:55:7a:
                    22:cd:c9:0a:e5:bd:12:8c:f3:69:82:e9:2a:86:21:
                    99:a3:ac:d3:c0:db:02:06:d3:5c:81:82:d6:31:95:
                    54:d6:39:76:16:75:2a:cb:26:50:c8:e8:26:8b:95:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C6:C2:EC:CC:AE:29:FB:0B:98:F8:DD:F5:FC:E5:16:21:0C:BA:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc43ebad-e062-41e7-90b2-f4604e70a0c4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc43ebad-e062-41e7-90b2-f4604e70a0c4/c8a221969bbfbc74451f1eb376e1b95786137555.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.240.0/22
                IPv6:
                  2803:95c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266895

    Signature Algorithm: sha256WithRSAEncryption
         ad:6f:2c:24:d7:74:43:06:95:5c:d6:3a:b0:f5:d8:94:21:29:
         08:6d:39:f8:24:b7:3c:dd:b0:c8:f0:20:9e:7d:40:b4:46:f6:
         0f:9d:50:b9:61:c6:49:a0:31:e6:5b:cf:38:99:2c:eb:e9:63:
         f3:d0:9f:07:33:c9:22:7d:f8:17:f8:c6:7d:3c:ed:9f:a6:ef:
         94:cc:d5:b8:3d:61:ed:d2:78:1e:e8:4c:fa:2e:c0:55:a5:c0:
         de:4c:fe:c7:93:78:e2:53:ac:29:24:5c:8a:df:0d:17:c1:91:
         5d:54:6f:ed:10:e3:a3:10:80:37:27:ce:db:a9:46:f4:53:54:
         fe:83:93:51:d8:b4:51:6f:a8:b5:de:b4:bb:22:8c:c5:9e:69:
         95:cd:04:35:0c:62:94:44:96:ea:85:4d:c9:55:4a:13:2d:39:
         5e:a2:ed:4f:e8:87:31:15:7d:9f:1f:e3:95:1b:fa:0e:f4:f4:
         ee:32:ad:f8:3a:d7:a0:aa:83:f6:f1:60:3a:d6:51:9d:50:c2:
         fd:e4:61:14:8d:ad:70:18:8e:d4:fe:b5:10:9e:af:cf:d9:fb:
         23:93:68:89:d3:f2:3d:7e:ac:08:6e:13:21:e2:96:94:b7:c4:
         f4:a6:04:f1:f1:c0:7a:fb:d2:84:ac:a6:dc:37:4e:fb:d0:7a:
         f5:27:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----