Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc1bcde4257235b8bb3002cd9de9f796cf885894.cer
File:                     dc1bcde4257235b8bb3002cd9de9f796cf885894.cer (raw, json)
Hash identifier:          ba7aFiB2VS7y0LSsz06IJe3kG/lj8pOgcr0QxGuMgnI=
Subject key identifier:   1A:B6:6F:C0:8F:56:22:99:7E:8E:35:BF:6F:14:98:15:D0:C1:06:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D96C32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/dc1bcde4257235b8bb3002cd9de9f796cf885894.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Dec 2018 22:39:20 +0000
Certificate not after:    Fri 12 Jan 2024 17:25:39 +0000
Subordinate resources:    AS: 266752
                          IP: 45.232.144.0/22
                          IP: 2803:bb20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14249010 (0xd96c32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 18 22:39:20 2018 GMT
            Not After : Jan 12 17:25:39 2024 GMT
        Subject: CN=dc1bcde4257235b8bb3002cd9de9f796cf885894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:91:5b:e8:d3:18:5b:94:bb:55:92:b1:66:
                    c3:ee:75:1d:bf:e0:39:30:3c:71:b4:d8:e5:d5:54:
                    b5:81:67:83:e7:51:cb:a2:2f:15:33:a9:d4:9d:94:
                    4e:0d:1a:27:4d:89:32:3d:3c:26:85:a1:33:ad:cc:
                    d9:e3:fb:b7:5d:fd:56:a0:94:3c:94:cc:7f:a1:3e:
                    23:c3:8c:ab:ce:ee:d1:9f:b9:45:d2:be:15:ef:98:
                    45:1b:62:be:c2:84:56:59:27:18:c0:02:d9:45:2b:
                    98:be:79:ac:26:d5:e4:fe:8d:3a:e0:43:3e:e5:85:
                    52:3e:5c:69:2d:16:e4:00:c1:64:ee:6a:13:66:fa:
                    1d:cc:0b:c7:25:08:e9:42:ed:4a:5f:a3:18:70:07:
                    6f:c2:47:6c:43:05:5b:45:a6:8c:72:7b:ea:35:fd:
                    92:44:49:dc:5b:0b:9c:37:bc:11:fb:65:e8:66:67:
                    61:68:11:0f:26:f0:68:35:2e:ec:9c:45:f4:35:26:
                    06:a0:0b:02:62:68:e2:21:2b:4e:2d:15:60:95:c4:
                    10:5d:16:0c:78:ab:77:11:5e:54:66:1a:39:f8:96:
                    12:d6:7a:b1:16:1a:e0:17:e6:8b:24:99:8b:ac:79:
                    1a:af:e3:9a:78:84:50:35:a2:d4:20:d3:d6:2f:45:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B6:6F:C0:8F:56:22:99:7E:8E:35:BF:6F:14:98:15:D0:C1:06:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/dc1bcde4257235b8bb3002cd9de9f796cf885894.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.144.0/22
                IPv6:
                  2803:bb20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266752

    Signature Algorithm: sha256WithRSAEncryption
         45:da:2d:b8:e9:96:0e:0b:50:88:2e:62:d8:22:ea:cf:07:47:
         c2:4b:a6:9b:52:22:17:df:5c:ac:eb:40:08:2f:1e:3b:cb:05:
         81:90:33:99:39:2d:8c:df:c0:80:45:b2:f5:f1:e1:30:5a:d8:
         97:41:69:a6:08:a4:71:0d:b9:01:ff:52:d8:09:09:ef:e6:54:
         2c:e5:cf:e2:f2:75:45:a8:f4:5c:5c:a3:ad:e2:f0:1e:70:f0:
         6a:c0:81:fa:14:97:0f:16:5d:94:cc:ff:24:c9:6e:b7:cf:81:
         a0:cc:94:63:67:07:0f:4c:77:a5:05:04:77:8a:12:75:e7:8e:
         56:14:d5:2f:df:8b:4a:ae:7d:0b:9d:41:1f:bf:6e:f4:80:a1:
         ef:92:25:b8:e7:a2:05:8a:66:27:16:5f:04:9e:b5:ab:84:6c:
         40:47:01:78:04:03:44:66:60:b3:01:65:72:e9:e6:fa:e0:0e:
         3d:e7:7d:18:0b:e4:9b:c8:cb:04:52:c4:b7:ce:54:a6:c7:7f:
         89:f2:50:a9:e1:eb:9e:13:03:f9:e3:63:e4:2c:43:d7:67:52:
         50:e7:bd:5c:7c:1d:82:8c:d1:a7:e8:81:ee:0e:80:57:cb:32:
         4c:e9:df:29:15:3a:ac:4c:d5:68:cf:90:fd:1c:33:62:18:aa:
         fe:9d:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----