Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer
File:                     f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer (raw, json)
Hash identifier:          BWqBPPzdvYoreNoj0J9AZTtqKgq7JE8iITmgVtP5R4E=
Subject key identifier:   27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF9F88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Dec 2018 22:35:51 +0000
Certificate not after:    Mon 25 Mar 2024 23:26:31 +0000
Subordinate resources:    AS: 266815
                          IP: 45.237.48.0/22
                          IP: 2803:78a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14655368 (0xdf9f88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 24 22:35:51 2018 GMT
            Not After : Mar 25 23:26:31 2024 GMT
        Subject: CN=f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:9a:27:95:7b:b3:2f:e1:68:c8:d1:b7:4b:
                    35:f9:20:6b:a9:76:d5:7a:44:dc:05:69:64:9f:43:
                    30:04:eb:74:04:d0:d0:c3:07:2b:b7:b9:12:6f:29:
                    4a:01:30:b8:cf:75:fa:ae:48:45:9e:72:68:f9:06:
                    89:ae:be:95:80:a5:27:0f:34:ea:ca:4d:a3:0a:78:
                    a8:22:1e:5f:2e:47:d3:e4:7d:6b:16:00:1e:43:a7:
                    1e:5d:5b:55:79:42:a9:bf:19:e1:51:c0:8e:27:1d:
                    6e:78:1b:9d:2a:8a:4b:74:57:2c:ec:94:82:c1:b3:
                    7b:d3:68:a8:fd:f2:4a:de:22:2d:f8:27:e6:3b:66:
                    1a:fd:47:95:4f:dd:e4:47:0f:f3:1f:9a:21:73:43:
                    6a:38:d0:44:d7:50:90:60:6d:0f:da:0e:63:06:41:
                    bc:df:88:a8:90:77:d6:a6:f0:ba:48:d5:94:9b:c0:
                    07:13:0d:93:9f:65:da:7f:f3:2f:5b:6f:d0:8f:4d:
                    64:3b:76:a8:cd:86:d0:45:a9:6d:57:4e:de:b7:d8:
                    a7:7e:1c:40:7e:14:c6:ac:1e:b3:d4:19:df:6a:53:
                    38:e2:38:8e:b6:a8:66:1e:54:dc:4d:e4:5a:24:fa:
                    56:98:2b:5c:1e:cc:da:af:86:8a:95:20:1a:de:79:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.48.0/22
                IPv6:
                  2803:78a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266815

    Signature Algorithm: sha256WithRSAEncryption
         2a:21:d5:12:08:fb:a3:20:2f:ba:36:f4:72:ec:c8:bd:c7:73:
         13:82:dc:16:3c:3c:1a:d7:d1:73:cf:f5:20:41:1c:43:f7:25:
         1c:57:74:90:bf:52:3c:dc:82:ca:dd:ff:da:bb:bf:32:6c:06:
         b0:ef:78:b5:b3:44:b4:ec:87:08:6b:1e:a2:ba:ff:c1:19:4b:
         df:db:2f:43:b6:c2:12:ae:0b:b1:06:7d:fa:fc:c8:12:40:89:
         4a:6c:70:a4:38:ca:a8:b8:eb:1d:e4:16:53:fd:38:f5:e1:34:
         37:63:cb:52:36:4b:a0:d3:97:d3:99:db:e7:fd:30:58:68:b1:
         b4:12:af:77:7e:fa:b5:cb:c2:01:73:5c:f6:30:d2:a8:b5:e3:
         6d:d5:94:ec:61:04:fc:35:aa:e3:89:68:4a:c0:86:22:e3:80:
         94:07:4d:ab:5b:85:6c:5a:ff:fc:1a:ea:34:5b:94:f1:5a:cd:
         14:71:8b:c5:fe:50:52:2d:b6:ea:56:91:a1:09:ec:5e:72:7b:
         c9:bb:13:cd:93:dd:61:ca:60:0f:e3:6c:c9:ea:66:fe:8d:8c:
         9b:6e:57:0d:7f:cb:71:24:fc:ec:ef:f7:24:70:e2:74:c1:fe:
         91:4c:0d:67:f8:7b:da:98:a5:53:a1:76:14:d9:94:84:ef:6d:
         c2:73:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----