Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb00b3d70dd9cb79681cd490843163b3a4674f12.cer
File:                     cb00b3d70dd9cb79681cd490843163b3a4674f12.cer (raw, json)
Hash identifier:          hstq0FKgmu5nxA8SwvhHTbT3LtcAFqEl5ifrS4b/2eE=
Subject key identifier:   9D:D0:C8:1A:A4:CD:00:87:45:BE:B0:07:4C:E0:52:7D:F3:8B:DA:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D3CAF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Mar 2019 23:45:52 +0000
Certificate not after:    Mon 29 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 267818
                          IP: 45.173.120.0/22
                          IP: 2803:8860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13880054 (0xd3caf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 23:45:52 2019 GMT
            Not After : Jan 29 05:00:00 2024 GMT
        Subject: CN=cb00b3d70dd9cb79681cd490843163b3a4674f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:00:33:e2:18:08:a2:9b:f6:62:eb:84:78:
                    e8:b2:a1:b6:7d:53:19:a9:b9:ef:4d:4b:a0:c3:0a:
                    1c:68:3f:16:17:af:09:22:23:c9:d8:bf:f3:8f:53:
                    4c:bf:89:ff:16:36:34:26:41:23:35:03:17:98:f2:
                    a2:b0:8a:cc:bb:ba:64:9f:e6:75:bf:4d:ee:ba:4d:
                    47:65:e3:0d:2c:ae:41:0c:2b:00:4a:ed:4b:fb:48:
                    4a:0b:ef:7e:a7:0d:a8:2c:4a:2f:17:35:af:15:9a:
                    45:e4:b1:89:e7:de:79:13:18:41:ae:87:ff:17:43:
                    cd:df:ae:ae:0f:cf:cf:19:07:a1:e3:55:7f:e3:8c:
                    ea:df:6e:51:e1:f4:41:79:48:7c:a4:56:8a:a1:04:
                    d9:2c:e2:c0:6d:6c:12:b9:67:c5:1a:e0:0f:9c:ea:
                    9c:2d:5c:e1:23:93:cb:5d:1e:b6:c5:04:ee:26:1c:
                    4c:25:83:03:ea:36:4c:29:0b:f9:16:b5:78:59:63:
                    d9:f8:f3:ec:ce:79:c7:8c:de:10:75:23:5f:46:a2:
                    91:b3:63:c1:0d:75:eb:26:85:da:05:8f:a5:c3:0e:
                    91:6f:24:d1:c2:71:8e:3b:33:da:ff:3a:54:0e:29:
                    ae:c0:f6:33:06:95:e8:e0:eb:a6:10:1b:23:43:0e:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D0:C8:1A:A4:CD:00:87:45:BE:B0:07:4C:E0:52:7D:F3:8B:DA:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.120.0/22
                IPv6:
                  2803:8860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267818

    Signature Algorithm: sha256WithRSAEncryption
         89:77:b4:ef:4b:24:bc:68:7a:2b:00:b8:03:30:e4:96:5e:68:
         a8:9b:95:4d:11:bf:81:38:27:82:93:30:73:95:65:11:85:55:
         ed:55:ef:de:83:4f:24:ad:d7:e7:4e:3f:6d:2d:f6:6d:69:1a:
         61:41:7c:1e:e6:3a:07:3d:a5:83:61:85:ec:bf:28:74:58:5a:
         c4:fb:7b:ff:9f:c7:70:5d:8f:97:8f:e3:eb:ab:00:25:d6:c0:
         5d:b9:17:af:24:a3:90:a8:69:b5:d8:dc:b1:9b:e6:8c:e3:e0:
         63:41:db:f1:5e:c3:0c:f7:a6:a6:55:e6:06:fd:d5:71:d8:42:
         cf:7e:37:11:81:f5:c8:11:b9:14:91:0f:10:e7:de:4a:0f:c8:
         0b:ac:db:e6:c2:ac:c7:1a:42:41:6f:61:3f:7b:76:f7:f8:8b:
         ce:06:1c:ab:87:a7:97:ab:8e:75:81:f9:08:eb:e7:51:d5:a3:
         10:e7:21:2b:78:4c:14:6e:a3:dc:87:28:d4:df:07:2b:da:7d:
         78:73:50:7a:f8:1f:06:96:f9:49:1a:4d:4c:bf:a4:8b:43:75:
         ea:de:25:d4:23:6a:6e:1a:a0:81:2d:d3:17:9a:5d:ab:71:8b:
         67:67:7d:89:a7:4c:26:48:b7:c0:ac:6c:fe:1c:89:5f:69:dc:
         67:8e:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----