Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd5bdf4364a69749441571efcc359e8b36e0aa9d.cer
File:                     cd5bdf4364a69749441571efcc359e8b36e0aa9d.cer (raw, json)
Hash identifier:          +pPZOwxgYLXy44hZi3N0vMdn9jrjcWL9iNCufuFu2Tk=
Subject key identifier:   A8:58:B2:4C:DD:9A:12:71:8D:FF:37:C9:9C:4D:FD:8C:BD:DA:FB:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3B144
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/cd5bdf4364a69749441571efcc359e8b36e0aa9d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 11 May 2018 15:59:42 +0000
Certificate not after:    Sun 05 May 2024 20:31:16 +0000
Subordinate resources:    AS: 265856
                          IP: 170.231.204.0/22
                          IP: 2803:9740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14922052 (0xe3b144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 11 15:59:42 2018 GMT
            Not After : May  5 20:31:16 2024 GMT
        Subject: CN=cd5bdf4364a69749441571efcc359e8b36e0aa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:07:98:2d:ca:a7:20:7c:4d:b5:70:bb:87:
                    14:2e:9b:d9:ca:79:65:bf:b7:c7:a9:d3:36:56:b9:
                    30:29:08:7a:5a:8d:c8:44:61:1f:61:44:fd:7d:fe:
                    b1:40:92:68:c0:89:02:76:ed:ed:a0:54:d7:aa:c7:
                    60:00:70:5b:83:29:c9:3b:43:be:9b:c7:71:b5:98:
                    0b:4a:07:a9:6e:bb:98:24:c3:a6:cd:83:85:42:b2:
                    d2:8f:27:d6:ba:66:04:1d:27:c4:cf:39:84:4f:d2:
                    dd:75:ad:62:61:96:3a:b9:b9:3b:0f:76:72:d2:38:
                    a3:5f:97:dd:07:44:f3:0e:41:8f:9e:18:34:f5:f1:
                    87:a9:93:02:f6:9c:ff:5b:d2:e1:00:04:14:7e:ba:
                    b6:13:81:52:80:b8:46:5e:c8:4e:43:9b:0e:17:1b:
                    90:8f:f0:c9:15:06:fc:e9:43:7d:a6:07:62:06:5f:
                    72:37:f5:d6:96:ae:1b:ce:71:d8:b0:44:21:0c:db:
                    da:38:32:69:c0:60:9e:1a:fb:8c:9c:76:fb:8a:f4:
                    8a:36:7b:7d:08:82:e4:01:09:a3:ff:26:5b:52:57:
                    6e:2f:1c:6f:7f:ba:df:27:77:ad:77:d2:34:ea:8d:
                    64:5f:f7:b1:71:58:5d:7e:80:fa:c1:c4:4a:97:64:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:58:B2:4C:DD:9A:12:71:8D:FF:37:C9:9C:4D:FD:8C:BD:DA:FB:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/cd5bdf4364a69749441571efcc359e8b36e0aa9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.204.0/22
                IPv6:
                  2803:9740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265856

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:14:7b:e1:de:bc:8e:4c:71:cf:01:ca:59:cf:c6:23:66:
         47:fa:b3:ca:5f:c9:4d:4c:a7:1e:ea:7e:2b:69:82:11:d8:6b:
         ec:52:01:f8:67:fe:29:0c:5c:2b:9a:bc:34:66:02:09:e9:a8:
         c3:25:15:0b:d8:90:81:80:56:a9:b1:e9:e8:5d:4e:88:12:05:
         f4:f3:10:f2:69:ab:b6:43:fc:51:75:71:b4:37:30:0b:21:46:
         99:eb:f1:1a:ce:b0:41:2b:32:63:74:82:a3:2d:ba:08:4e:ef:
         61:69:2e:1f:a1:6c:b7:0c:c0:14:7b:c2:c9:18:fe:0f:36:79:
         c7:f5:1c:3b:37:19:d5:fe:e0:2d:8b:e4:b0:f7:f5:f4:ed:f2:
         26:bd:00:7b:76:29:bb:56:74:c5:d1:4e:4f:f1:8c:8a:18:4d:
         13:b1:87:16:08:02:d1:57:f9:b9:b2:fe:ee:29:c8:b4:6a:84:
         11:97:18:5d:10:8f:c2:32:bb:f0:4a:d0:ae:fe:86:42:6d:78:
         8c:58:08:48:b9:8b:5d:c7:74:a5:53:f9:bf:9e:ae:b2:4e:d4:
         c5:25:12:52:fb:22:33:ce:b5:3a:5b:d1:9d:41:66:71:65:58:
         d6:0d:b3:25:92:17:5b:dc:9f:37:99:ef:9c:d3:9d:32:f0:06:
         51:e9:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----