Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8a4d0a42b52adb7241fa29a2d1d1feaf478e189.cer
File:                     d8a4d0a42b52adb7241fa29a2d1d1feaf478e189.cer (raw, json)
Hash identifier:          OwE+vH87xcbb22EQUHFy1O2DfHPp2542t4/67nriJHc=
Subject key identifier:   1B:DB:D9:63:BA:52:76:04:03:3D:34:02:1D:2B:FD:0E:19:EB:D9:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5A651
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4790f5d-093f-4f7e-8adf-cd7329a44bb6/d8a4d0a42b52adb7241fa29a2d1d1feaf478e189.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4790f5d-093f-4f7e-8adf-cd7329a44bb6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Dec 2018 17:21:29 +0000
Certificate not after:    Tue 17 Sep 2024 17:01:40 +0000
Subordinate resources:    AS: 265877
                          IP: 45.227.36.0/22
                          IP: 2803:9e20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16098897 (0xf5a651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 18 17:21:29 2018 GMT
            Not After : Sep 17 17:01:40 2024 GMT
        Subject: CN=d8a4d0a42b52adb7241fa29a2d1d1feaf478e189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:0c:f6:11:b5:7d:35:bd:11:82:b3:4c:3b:
                    67:32:9f:f8:83:4c:4c:d7:de:26:c3:c3:ec:05:b2:
                    9e:d6:da:ba:11:95:c9:21:0e:aa:6a:8f:ba:fa:cc:
                    9c:c1:66:e4:97:11:06:df:ac:f5:dc:1a:79:20:1a:
                    2f:2e:d3:12:fb:f3:b3:84:c7:2a:55:b9:58:21:05:
                    2b:42:a1:b1:07:79:5a:87:e1:ec:6e:c1:4a:cc:d3:
                    c5:c6:c8:5b:b1:29:bd:83:b3:72:e8:f6:85:a9:62:
                    2b:48:6a:5f:42:3d:a3:42:6f:52:7e:37:14:0a:cf:
                    49:51:dc:c7:6f:84:07:04:54:e6:b9:6b:a5:fb:0b:
                    01:82:dc:5e:43:3a:9f:17:58:b6:f3:50:72:c7:71:
                    da:a7:cc:eb:f2:35:f1:21:66:0a:2f:3f:bd:66:2f:
                    90:93:cd:ca:42:0d:15:52:97:37:86:20:27:44:1c:
                    37:8f:11:74:fd:c1:2d:29:b0:3f:b2:c3:42:d5:3b:
                    a9:0f:24:d0:f7:31:6e:d9:c2:9c:ce:02:39:66:22:
                    f6:94:c8:57:2d:45:f9:30:e2:c3:27:cf:db:6d:9f:
                    30:cf:f5:63:20:b8:f5:5d:dd:c9:20:18:c1:47:65:
                    b7:7d:35:8c:8f:e8:f7:18:a7:1f:83:27:76:83:cf:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:D9:63:BA:52:76:04:03:3D:34:02:1D:2B:FD:0E:19:EB:D9:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4790f5d-093f-4f7e-8adf-cd7329a44bb6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4790f5d-093f-4f7e-8adf-cd7329a44bb6/d8a4d0a42b52adb7241fa29a2d1d1feaf478e189.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.36.0/22
                IPv6:
                  2803:9e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265877

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:45:60:c6:a1:cd:e4:58:21:4a:73:9f:ae:f1:b6:64:8e:
         d6:f1:a6:38:e3:94:7e:0e:4c:76:7a:41:5b:91:89:6d:d1:32:
         93:74:5d:e7:3a:35:15:0e:32:76:ce:f0:68:18:a6:c1:b4:b8:
         07:67:ae:cc:95:3d:9e:cf:3c:c3:2c:90:ec:44:29:17:96:c1:
         79:71:86:02:91:54:92:3d:fa:68:71:2d:5f:d3:f6:6c:e2:51:
         67:bd:a7:3c:b3:c7:95:ce:97:c7:0b:98:e2:2a:92:12:a3:91:
         31:f4:53:a0:49:ce:2c:9b:9f:60:a7:01:40:e7:16:94:dc:5a:
         ac:b6:01:55:d5:10:81:07:e8:bf:f6:0f:95:39:5b:90:17:4c:
         3d:3e:4e:40:db:43:33:f4:78:c5:69:5b:4b:2b:06:a9:44:8f:
         d0:f0:20:b9:7b:00:e0:4c:52:fe:73:06:a2:35:b2:86:83:44:
         45:c0:1d:e1:a2:70:cd:91:06:af:15:98:b6:c6:0d:29:11:33:
         b4:4d:b0:fd:1c:b0:cc:68:f2:77:4f:61:da:0e:35:3a:a1:ec:
         ca:23:e0:59:03:3a:6a:71:d6:0c:30:0a:a9:cc:58:12:30:cd:
         32:b5:08:39:66:6d:08:cc:9e:35:59:0d:09:bc:dd:b1:b7:00:
         c9:c6:92:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----