Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer
File:                     fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer (raw, json)
Hash identifier:          ky88I6BCcQpt60Zv1oS7bcYrL1e1Xu7NKkC1o1EZGrM=
Subject key identifier:   78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E03A58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 31 Mar 2019 17:42:04 +0000
Certificate not after:    Sun 31 Mar 2024 22:29:09 +0000
Subordinate resources:    AS: 264712
                          IP: 170.150.8.0/22
                          IP: 2803:eb40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14695000 (0xe03a58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 31 17:42:04 2019 GMT
            Not After : Mar 31 22:29:09 2024 GMT
        Subject: CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:d0:a3:41:93:57:dc:13:00:53:cb:d6:5e:
                    a2:f3:6e:58:95:d1:01:90:83:59:47:e1:cb:17:c0:
                    a3:45:a4:d5:2c:72:af:61:46:87:3d:bf:9e:f2:7e:
                    d7:da:f6:b3:20:48:34:63:34:bd:f5:4a:69:7c:82:
                    9e:b3:52:11:aa:92:a8:2f:f6:36:4c:6e:43:c4:eb:
                    c7:1f:eb:a0:2d:6d:80:70:66:6f:85:82:41:49:e6:
                    6b:35:c0:90:ae:58:84:b0:da:bc:75:9b:67:a3:8d:
                    23:42:ec:d2:c1:9c:06:ce:03:4b:25:13:26:52:5b:
                    49:31:32:ff:d5:0f:59:e3:aa:0c:74:42:70:e2:55:
                    4b:a8:8e:f8:b2:46:7f:87:8b:df:bc:51:a8:ad:dc:
                    db:89:98:0b:45:76:2a:e6:4d:29:72:34:6a:7b:38:
                    76:cb:12:e6:d3:77:9c:36:d6:6e:a4:1a:93:90:49:
                    1c:68:00:13:9a:25:f1:e0:d0:33:63:03:5d:7a:80:
                    6e:af:f9:b0:03:7e:e5:ae:91:38:bf:01:8d:bc:38:
                    94:00:e8:b9:dc:54:4a:13:91:df:c9:82:e9:bf:c9:
                    ec:c1:12:ec:94:74:17:6d:a0:dc:88:1c:9d:a1:82:
                    a2:f9:e0:0b:3a:01:58:15:7c:8e:66:6a:6c:11:1a:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.8.0/22
                IPv6:
                  2803:eb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264712

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:4a:fe:93:bc:12:f3:83:18:ca:ac:8b:60:c7:00:2f:c1:
         09:8d:e6:43:9b:e5:7e:7c:af:23:89:e5:51:69:b8:12:7e:5d:
         b2:12:54:03:b3:80:ff:28:a5:f3:c4:12:4b:42:4f:bf:fe:bc:
         7c:59:62:f7:f2:85:19:c8:ea:01:8f:b5:2f:63:ff:14:73:9d:
         fc:13:62:8e:ec:7f:34:79:5f:1b:ab:49:d4:12:a6:a7:c9:00:
         89:cd:ef:9b:b9:04:f3:00:d5:4d:75:95:72:54:ac:1a:38:0c:
         18:90:56:fe:3c:6f:9c:c5:df:f0:1d:44:fe:dc:34:45:09:bf:
         00:f6:a5:ed:88:2d:1c:73:31:f2:6e:66:35:56:cd:6f:9b:2d:
         d9:65:fb:fa:89:81:69:63:c9:5f:0a:13:d2:f9:4f:29:19:7e:
         e2:03:55:cf:32:23:16:84:a1:7f:2b:12:89:da:59:33:de:e7:
         54:68:38:ab:c4:ef:ce:55:71:52:60:5d:df:4e:30:5d:3d:c9:
         82:d2:a4:98:b3:d8:0b:a6:f2:f3:f6:ef:88:1f:bc:4d:96:73:
         c2:e0:28:50:ff:2f:79:4b:30:e7:dc:9e:73:b6:83:f6:99:b0:
         f2:94:53:0c:96:f0:45:55:55:85:fe:c8:06:ff:c2:10:15:f7:
         e8:ad:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----