Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
File:                     dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer (raw, json)
Hash identifier:          mtk3Z+vWG/waFRN6MdIvag6Lv7WyxHCaDAhKpi429oI=
Subject key identifier:   04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBD501
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 29 Sep 2018 01:28:26 +0000
Certificate not after:    Sun 11 Feb 2024 13:40:13 +0000
Subordinate resources:    AS: 266771
                          IP: 45.232.176.0/22
                          IP: 2803:cf20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14406913 (0xdbd501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 29 01:28:26 2018 GMT
            Not After : Feb 11 13:40:13 2024 GMT
        Subject: CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:b3:9e:de:f4:af:80:bf:5f:9f:6b:c9:30:
                    d6:c8:db:34:d2:a7:71:17:bb:23:4d:33:ac:43:9e:
                    74:1b:68:fd:8e:69:6b:96:49:ac:6b:4d:ea:37:92:
                    40:f7:6b:06:c0:a0:ef:a9:e3:5b:f1:16:e6:6f:76:
                    8d:e8:fd:72:70:f2:ad:65:a6:63:06:50:f6:bb:b5:
                    9c:67:4b:6d:0c:58:19:1e:a8:92:1a:ab:a1:c7:ae:
                    46:c3:70:00:35:24:a4:e1:30:7d:c6:4c:0f:0f:b0:
                    1d:90:dd:e5:1e:ad:6d:4e:c0:ae:e2:5a:58:22:78:
                    5d:64:ea:02:dc:6f:9c:b2:92:18:8d:61:2e:4b:75:
                    de:47:f8:e4:04:b9:b8:90:2d:2c:8f:89:a3:9b:d6:
                    0c:a3:93:f4:40:fd:8c:49:89:42:e4:6e:cf:61:78:
                    36:97:fd:a6:a3:1a:69:a5:ba:42:fa:37:ab:a5:90:
                    b0:73:ac:48:02:cd:59:cf:fd:44:23:52:3d:6e:ac:
                    ed:1e:b4:cc:62:23:78:04:0d:65:78:5e:71:12:0c:
                    2e:b9:f9:be:89:1f:0b:03:72:c3:24:75:8c:f8:9a:
                    16:f7:52:52:6f:91:c9:16:9e:11:dd:db:f9:de:d0:
                    2d:b7:dd:e0:c7:2a:9b:77:3d:37:eb:0c:7a:d5:fe:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.176.0/22
                IPv6:
                  2803:cf20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266771

    Signature Algorithm: sha256WithRSAEncryption
         4b:4e:5d:0f:36:db:ef:eb:43:3c:50:8d:a9:07:85:f2:26:4d:
         19:30:a0:81:6e:8a:8a:72:d5:6f:c0:a2:91:46:52:35:0b:a9:
         eb:e3:26:05:49:f7:f5:56:f4:2b:0f:78:08:42:2d:76:8e:c6:
         5f:08:8b:dc:4a:54:09:18:b0:05:b8:be:82:e9:e4:8d:ea:dd:
         01:10:5a:c5:d7:7c:c5:14:56:f5:8b:b1:29:c0:ca:ac:37:fa:
         07:36:75:0e:53:ef:84:59:3f:b0:cd:dc:31:a0:d1:25:c2:db:
         ff:6f:76:55:91:91:76:64:ff:dd:d4:cf:af:ff:73:d0:0d:9f:
         b8:3c:4e:8c:dd:fb:98:24:e7:2e:5d:28:27:1e:4a:a0:71:c6:
         f6:33:77:45:94:37:71:d1:4c:fe:94:d8:d2:d9:42:78:5d:3d:
         0e:30:f9:24:e0:4d:35:0c:15:7d:be:a4:bd:ca:42:a0:fb:c7:
         98:59:83:1e:7f:81:49:f2:e0:5e:12:11:ef:1a:4e:eb:f8:5d:
         a1:dd:6f:c4:0e:e3:ff:05:af:46:f7:18:7d:9a:aa:89:50:12:
         c2:c1:90:5c:a5:4e:4c:f6:96:6c:44:01:c4:27:2b:ff:e3:bc:
         44:82:2c:df:c0:23:1b:a7:f9:b2:d3:17:62:5b:69:5f:e6:18:
         75:fd:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----