Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2c6939a1b37cd45fa1240eefcd2a1449280535b.cer
File:                     d2c6939a1b37cd45fa1240eefcd2a1449280535b.cer (raw, json)
Hash identifier:          N9I02euhFtDzFpb3QaOLt/xYNJs4mwDF2Fxjg1rGLJ4=
Subject key identifier:   82:AC:48:6D:FC:FC:69:6D:7E:7D:ED:CA:0F:39:9D:19:AF:33:74:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F70831
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a98e77cc-28ed-464d-b3dd-c8dcb1d39ea6/d2c6939a1b37cd45fa1240eefcd2a1449280535b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a98e77cc-28ed-464d-b3dd-c8dcb1d39ea6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Oct 2018 19:52:44 +0000
Certificate not after:    Sat 28 Sep 2024 22:01:55 +0000
Subordinate resources:    AS: 267711
                          IP: 45.227.216.0/22
                          IP: 2803:9120::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16189489 (0xf70831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 19:52:44 2018 GMT
            Not After : Sep 28 22:01:55 2024 GMT
        Subject: CN=d2c6939a1b37cd45fa1240eefcd2a1449280535b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1b:23:94:23:9f:be:e6:44:82:55:eb:62:3a:
                    75:40:4c:23:b7:20:03:ed:2d:7a:2f:3c:9b:1e:5e:
                    8c:7c:30:68:52:d8:fe:52:92:f4:c0:53:36:dd:00:
                    dc:5a:1c:2b:e1:15:94:4c:2a:ac:86:cc:b0:0e:c2:
                    e9:2d:7c:eb:3a:d4:24:18:62:bf:e3:4e:52:7b:86:
                    56:4a:01:48:ff:a1:41:dc:f3:aa:81:b2:f8:99:f9:
                    64:0a:ba:ab:30:71:af:48:90:27:e5:55:3d:47:cd:
                    3e:06:2e:5d:7c:a8:c7:ed:f0:46:86:9c:39:11:f8:
                    0e:fc:c0:ef:9f:5c:91:e1:fe:c3:b5:80:b6:45:86:
                    a1:14:50:99:30:f2:ea:9a:9d:f1:05:77:57:86:dd:
                    4e:9d:f7:76:f4:70:3b:ab:79:f4:43:2d:53:7d:fe:
                    7f:d5:14:76:38:7c:5a:e7:4d:b5:92:b7:c6:1b:6a:
                    24:71:7b:60:c2:de:b2:7f:1d:71:15:22:3e:49:0a:
                    c7:66:8c:3e:a7:fe:53:77:78:a0:d0:e1:4d:b1:1d:
                    30:f4:4c:ed:b3:9f:b3:dd:b1:c1:1c:f2:2d:8f:ed:
                    f4:0a:73:5e:89:8b:ab:c5:6b:a2:b0:a4:0d:6d:90:
                    04:d1:2a:8c:b3:28:60:78:6f:f4:6f:af:a7:3f:dc:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AC:48:6D:FC:FC:69:6D:7E:7D:ED:CA:0F:39:9D:19:AF:33:74:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a98e77cc-28ed-464d-b3dd-c8dcb1d39ea6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a98e77cc-28ed-464d-b3dd-c8dcb1d39ea6/d2c6939a1b37cd45fa1240eefcd2a1449280535b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.216.0/22
                IPv6:
                  2803:9120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267711

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:7b:37:78:c3:b4:7a:55:c5:7f:68:09:36:81:14:65:7f:
         a8:e3:c1:8c:67:9d:50:b0:ac:5e:76:3a:a0:74:df:26:8d:06:
         f1:8d:b6:c0:03:72:8b:e7:e1:d2:66:46:9a:d3:f6:2b:a7:d5:
         2b:91:fe:20:0e:f6:25:ac:28:a8:29:b4:cd:ca:b1:59:c4:47:
         6f:8f:59:ff:f1:d7:b0:c8:95:16:f0:34:d8:dd:e3:48:98:fe:
         3b:4c:a7:3b:c2:e1:19:68:d2:ad:73:32:a2:04:77:57:7f:33:
         6b:45:98:5d:e5:e0:b9:ad:a1:e1:b8:9b:a0:a3:ff:88:18:d7:
         22:24:02:0e:07:ba:c4:ba:21:bb:ab:70:42:c4:73:69:59:30:
         5a:6a:53:05:24:ec:c7:f0:8e:80:18:23:cc:92:b2:bb:8e:8a:
         0b:b2:d7:9f:d3:15:f9:1e:cd:1f:c5:e2:b1:ac:c0:b8:bc:df:
         ff:40:32:85:85:37:e4:8f:82:ec:87:27:fb:86:95:e2:83:32:
         4f:a3:ad:75:72:ee:f6:35:0a:b1:e4:b7:2f:50:81:b4:3d:45:
         52:74:d2:ee:b7:00:a2:6d:ef:28:06:16:93:14:7c:c6:7d:0f:
         37:f5:e0:43:4e:14:87:21:ad:1e:71:1c:2c:a5:52:75:80:2d:
         db:af:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----