Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
File:                     df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer (raw, json)
Hash identifier:          YK1pIJxjelnryeKzUp5aXnuAI+Lh8ulxnQo2Zn+0+1Y=
Subject key identifier:   F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA6C12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2019 21:28:44 +0000
Certificate not after:    Tue 22 Oct 2024 17:47:40 +0000
Subordinate resources:    AS: 266682
                          IP: 45.228.76.0/22
                          IP: 2803:4520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16411666 (0xfa6c12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 11 21:28:44 2019 GMT
            Not After : Oct 22 17:47:40 2024 GMT
        Subject: CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:e6:a8:c3:a2:e0:a2:65:e6:17:4a:3e:9e:
                    b4:d4:57:e8:db:3e:d6:ce:06:12:d2:84:6a:d1:3b:
                    6e:ca:7d:f2:ac:1f:ed:fe:02:dc:66:0c:48:cb:b1:
                    8d:b6:44:ec:e0:54:75:72:66:0c:dc:00:76:98:eb:
                    52:47:fd:a6:8d:12:95:9a:87:1b:4d:d9:80:f4:31:
                    cb:fa:78:62:92:b4:77:2d:53:4e:40:21:69:3a:1f:
                    f5:b8:02:32:3d:11:1e:c6:40:01:7c:c9:5c:ae:4b:
                    4e:a3:94:5d:d6:71:6c:8d:44:58:22:2b:d0:8e:8e:
                    53:f6:c2:f4:8a:46:a4:a5:09:47:31:10:4a:06:1e:
                    5a:fc:c3:b1:d2:10:6e:f3:1e:56:0e:08:e7:78:69:
                    1b:aa:60:93:2f:1b:69:34:40:3a:a8:fa:4e:11:73:
                    ca:cf:99:7e:87:65:c6:3c:cd:fc:e9:26:0a:69:5f:
                    63:2a:6a:5b:29:4f:e6:e6:9d:ef:14:96:f5:2f:3a:
                    fd:ce:fd:6e:d3:2c:11:43:c7:2b:13:50:d8:3e:c5:
                    6d:b1:f7:14:5b:a5:5f:c0:68:f0:ed:1d:f6:61:18:
                    9f:c8:5c:39:a5:b1:9e:ce:13:86:3e:30:b2:3b:0a:
                    30:85:91:07:3d:c9:48:52:82:89:58:a3:c8:29:1a:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.76.0/22
                IPv6:
                  2803:4520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266682

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:8e:69:f4:0e:3b:67:99:3f:4d:7d:fe:92:3a:d5:69:44:
         e2:0b:aa:a8:37:99:f8:f3:0b:79:5a:b4:7d:a7:b2:e6:e9:aa:
         d0:c1:21:e8:e0:c7:83:d2:ce:eb:d1:a6:3a:5b:cb:c3:1a:73:
         fe:12:6a:bb:20:56:85:f6:1e:e0:86:4d:5e:32:cc:38:e7:18:
         da:6e:52:1b:68:ee:a8:ee:b7:39:1c:a4:7f:b5:b2:52:b7:2b:
         58:55:10:e3:d9:ce:66:3a:17:7f:bc:77:88:ea:50:f8:03:d5:
         94:01:fd:69:52:09:b7:8e:aa:08:6e:9c:55:76:66:0e:96:51:
         5b:64:b3:a5:a0:6e:30:71:51:17:fa:e1:cd:20:56:e2:c6:dd:
         47:c8:84:43:99:0f:53:b9:ea:99:f1:8e:f6:3f:f7:27:27:06:
         01:70:43:d9:72:b6:75:62:9d:98:30:48:e7:d8:c4:47:b4:6c:
         ca:0f:72:c8:0a:85:da:fa:0e:ba:21:1a:01:2c:34:92:07:dd:
         f4:b0:2f:65:cb:32:88:e2:50:16:13:7d:db:bf:54:bf:44:30:
         02:16:dd:1f:73:2f:62:b8:95:35:4d:dd:4f:82:84:57:09:9e:
         fb:fa:0b:9b:43:32:33:1a:b9:61:6d:13:a0:c4:c3:83:d3:f8:
         99:f2:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----