Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4d5ca46da5dbbcf109b53a8f6a6be440251a74e.cer
File:                     d4d5ca46da5dbbcf109b53a8f6a6be440251a74e.cer (raw, json)
Hash identifier:          h4stUT28MpMWPH6po7TKbh+iy5hMbCfuZPakspwmmrw=
Subject key identifier:   FC:BE:DE:EA:9E:EF:C5:A5:AD:AE:63:FB:D3:54:EA:B2:A1:61:6F:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5D475
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/d4d5ca46da5dbbcf109b53a8f6a6be440251a74e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Jul 2018 17:01:00 +0000
Certificate not after:    Fri 17 May 2024 06:00:00 +0000
Subordinate resources:    AS: 266856
                          IP: 45.239.160.0/22
                          IP: 2803:92a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15062133 (0xe5d475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 31 17:01:00 2018 GMT
            Not After : May 17 06:00:00 2024 GMT
        Subject: CN=d4d5ca46da5dbbcf109b53a8f6a6be440251a74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:24:ab:b2:d0:56:ff:da:e4:c3:c1:71:f7:
                    1c:a5:7f:06:93:29:7f:49:5f:0e:f3:6b:91:8c:5c:
                    2f:5d:3b:e5:79:e1:eb:1e:bd:40:61:ed:56:0b:e1:
                    76:aa:b1:7a:82:bb:87:b3:80:a3:59:d8:ba:41:b0:
                    f8:46:e0:eb:d5:6d:d5:0f:01:6d:ad:34:d7:ea:36:
                    84:66:18:ef:d6:f6:28:42:78:57:1c:18:7e:06:9e:
                    a6:f0:b7:f7:5c:eb:e1:ab:8e:1d:46:35:d9:dc:dd:
                    a6:c2:bd:c8:40:1c:1e:3d:4f:1f:32:c3:d3:cb:51:
                    d5:15:15:86:3b:8d:a6:db:f6:33:45:4c:10:ef:d5:
                    3b:6a:aa:b1:0c:4f:c7:90:0d:ef:b8:62:4f:dc:30:
                    7d:3b:69:4a:36:c1:dd:d4:45:83:27:06:a0:90:7c:
                    9f:6c:9d:0a:b9:38:18:68:cb:ca:89:76:7a:f6:02:
                    03:f2:0f:92:eb:d6:89:18:64:92:db:e7:05:93:71:
                    4a:2a:b1:25:18:ab:3e:07:c4:1a:d2:e3:f0:df:8b:
                    cf:12:c1:36:f1:d7:40:52:9d:7f:98:93:21:79:53:
                    ed:f0:f3:6f:e6:02:54:ac:e2:b5:f3:c9:87:be:33:
                    bc:c3:94:d0:00:25:a1:17:eb:a1:3b:2e:a6:f6:bc:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:DE:EA:9E:EF:C5:A5:AD:AE:63:FB:D3:54:EA:B2:A1:61:6F:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/d4d5ca46da5dbbcf109b53a8f6a6be440251a74e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.160.0/22
                IPv6:
                  2803:92a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266856

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:10:a2:40:fe:95:95:6e:8d:62:5e:cd:99:e8:1e:5c:78:
         80:d3:99:87:65:ec:16:64:50:39:b8:10:7a:63:9d:81:6b:5e:
         36:ab:d6:33:ca:f2:4f:2c:31:c3:2f:d9:66:61:c2:e9:4d:a1:
         b5:86:27:ac:90:91:b7:8b:1d:3a:47:e9:91:f6:ac:70:92:d8:
         4a:22:57:2a:ce:8b:35:25:6b:d2:c1:44:e4:d7:40:1d:aa:b4:
         26:a4:c7:5b:34:30:bd:0c:21:96:e6:04:39:6e:40:be:66:ba:
         15:a5:0f:75:74:dd:9f:34:fd:1f:ce:1b:f4:54:36:6e:b6:9d:
         ce:9a:0a:e3:93:1a:92:bd:7c:b2:76:4b:46:ff:ba:79:5d:0f:
         d7:91:0b:65:84:3a:62:8f:c2:11:83:f8:38:8b:79:50:21:32:
         09:37:07:19:fe:06:09:e4:29:4b:e7:c6:c7:89:23:44:e5:0b:
         ac:51:bc:65:da:46:54:e7:90:1e:26:ab:d3:29:70:14:be:85:
         ab:f5:55:2e:21:83:f2:1c:b2:d1:52:bd:27:02:81:d4:df:45:
         c6:4a:92:bc:c0:ff:90:7e:1d:47:fa:2c:87:65:4e:33:7b:de:
         5d:69:75:15:06:17:e6:b1:8c:57:f5:a9:04:95:f9:2c:56:71:
         6b:5b:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----