Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d04907a356f0a8b7666c3d0b0211071f864896e9.cer
File:                     d04907a356f0a8b7666c3d0b0211071f864896e9.cer (raw, json)
Hash identifier:          nPIO1bvjjmnW6PqBibbd4qIdCBUqxMnG9II+om+FWO0=
Subject key identifier:   97:21:06:D3:30:1B:05:99:69:0F:21:9E:9A:A0:46:E2:B5:11:0C:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F167EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a51d31c-8088-4924-badb-50b854105e18/d04907a356f0a8b7666c3d0b0211071f864896e9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a51d31c-8088-4924-badb-50b854105e18/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Dec 2018 02:32:45 +0000
Certificate not after:    Sun 11 Aug 2024 19:51:57 +0000
Subordinate resources:    AS: 267704
                          IP: 45.162.180.0/22
                          IP: 2803:b1a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15820783 (0xf167ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  7 02:32:45 2018 GMT
            Not After : Aug 11 19:51:57 2024 GMT
        Subject: CN=d04907a356f0a8b7666c3d0b0211071f864896e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:cf:8a:a2:c5:0f:72:93:cd:33:12:cb:3a:
                    ea:79:24:da:13:4e:24:dd:46:52:2b:78:45:3d:97:
                    2a:56:c7:12:62:39:57:82:f5:7f:60:93:20:63:af:
                    39:3f:e2:b1:ce:fb:b1:65:61:ca:10:f7:94:46:82:
                    c8:52:8d:a5:83:19:86:64:a7:51:b5:cc:9c:49:3d:
                    a2:48:d7:43:92:6c:92:fe:cb:c9:a8:75:23:9b:81:
                    d7:9f:20:5f:36:29:df:da:c4:b3:ac:4b:b9:48:38:
                    cd:bd:f2:67:c1:1c:ec:3f:46:03:f4:4e:86:07:14:
                    b0:3a:3a:db:fa:dd:f6:29:6c:19:86:2d:98:be:21:
                    c3:ac:9d:f7:9c:90:61:58:02:7a:c2:60:a1:bc:4d:
                    c6:a1:53:bb:6d:31:65:07:dd:91:84:7b:85:98:7a:
                    4d:06:56:ed:ba:d7:7a:a3:23:d1:3d:87:e1:2b:f6:
                    98:ee:0c:46:28:d8:86:dc:18:ee:2a:1b:14:92:e1:
                    56:f3:2d:9a:42:f3:04:6e:85:e5:45:f7:80:5f:fe:
                    3e:ff:b1:e4:c6:71:e4:c5:11:a7:8d:65:e2:b4:67:
                    a4:26:17:d1:3d:3d:5b:d5:da:6a:f2:b5:63:10:ee:
                    77:1f:0a:e4:61:ef:31:71:f5:12:ce:fc:e5:e4:5a:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:06:D3:30:1B:05:99:69:0F:21:9E:9A:A0:46:E2:B5:11:0C:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a51d31c-8088-4924-badb-50b854105e18/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a51d31c-8088-4924-badb-50b854105e18/d04907a356f0a8b7666c3d0b0211071f864896e9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.180.0/22
                IPv6:
                  2803:b1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267704

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:0c:fe:27:ed:5a:ce:91:b9:b1:70:54:0f:37:71:71:e9:
         d8:47:e3:4f:67:06:ee:74:8c:ea:fe:11:e9:ed:c7:a1:aa:49:
         3f:52:a6:f2:a1:7e:8a:00:80:1e:69:46:5c:ca:7b:29:3d:ca:
         fa:57:89:d5:3e:2b:d1:25:8d:40:14:c2:f7:4f:5b:f8:e0:26:
         33:f7:7e:26:2c:cf:67:1c:67:8a:eb:04:20:13:77:e2:1c:a3:
         cf:b0:46:81:f2:ad:f0:b1:bd:8d:8e:06:e6:79:81:76:e9:c1:
         42:fb:cf:5a:76:8c:f9:a6:09:99:6a:dc:7a:e4:8c:96:82:98:
         02:b8:ea:57:11:53:f6:49:48:15:98:4c:ea:d8:0b:5c:1d:fd:
         14:62:42:c8:eb:a2:98:53:c6:cd:e3:42:41:c8:27:68:81:07:
         f5:6f:d9:e3:7f:1f:a2:c4:e6:ad:41:92:41:97:0a:dd:3a:28:
         97:ca:b1:ad:99:6d:e5:01:04:ac:57:02:b9:25:0b:dd:50:6d:
         c3:18:2e:c3:9e:1d:6d:11:63:37:b1:db:d8:a2:93:89:93:0c:
         d1:c5:90:f2:73:b4:7b:5a:2b:72:d4:ca:a0:53:14:c8:19:4a:
         0b:1c:a5:7a:72:4c:8e:b9:7d:b1:74:76:07:36:d6:79:43:55:
         8b:79:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----