Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/229214e4977b44c102f28d27dc38d7cc1296d50f.cer
File:                     229214e4977b44c102f28d27dc38d7cc1296d50f.cer (raw, json)
Hash identifier:          wg4vQkmHYe9inw98ACT1sJxIUHOqioEvd+YxK17LbLw=
Subject key identifier:   D7:67:31:CF:5B:94:3C:8A:2B:91:F7:71:52:57:7A:57:C9:FA:31:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01020039
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/229214e4977b44c102f28d27dc38d7cc1296d50f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Mon 23 Dec 2024 14:30:27 +0000
Subordinate resources:    AS: 266749
                          IP: 45.4.164.0/22
                          IP: 2803:76c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16908345 (0x1020039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Dec 23 14:30:27 2024 GMT
        Subject: CN=229214e4977b44c102f28d27dc38d7cc1296d50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:32:f3:fe:de:21:7e:2e:3a:bb:55:0f:e3:
                    ee:c1:88:b7:ee:97:5b:ce:38:b4:09:5e:f2:45:b8:
                    dd:60:0f:67:02:3a:4d:35:4c:df:ac:f6:70:29:7e:
                    d5:ac:3f:40:11:e9:d2:40:4c:21:59:cc:59:0f:b9:
                    85:57:9e:ca:a3:d1:7d:29:f1:45:8f:12:a9:90:e3:
                    a0:97:0f:da:1d:f0:a1:4f:30:1f:99:90:7a:77:dc:
                    85:26:ac:08:29:60:8d:4c:6e:cb:7e:ad:61:94:5f:
                    e3:a6:14:b1:b7:ea:96:50:dc:03:a6:3b:8b:62:22:
                    2b:12:2d:c9:d0:a8:6f:4a:e8:ae:3a:da:dd:5c:90:
                    67:b7:20:5a:82:02:4b:fa:48:a4:32:04:06:8f:24:
                    cc:7c:0a:eb:0e:e4:b8:0e:5a:3c:45:40:51:11:ef:
                    1e:d7:a2:27:69:9b:cf:76:8d:11:74:a7:57:70:80:
                    52:4d:8a:03:19:33:9e:fb:f7:c4:03:5d:14:9f:f0:
                    4c:40:bd:f9:2d:cd:d5:d6:91:9b:e9:16:44:59:cc:
                    98:ac:bb:cc:ea:2c:66:04:8b:b2:be:c7:66:c7:a8:
                    75:42:29:ab:3b:7a:bf:12:0f:ab:ae:da:ee:e5:59:
                    b6:6d:dd:20:05:af:55:61:c1:f6:7e:cf:f6:04:0d:
                    8f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:31:CF:5B:94:3C:8A:2B:91:F7:71:52:57:7A:57:C9:FA:31:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/229214e4977b44c102f28d27dc38d7cc1296d50f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.164.0/22
                IPv6:
                  2803:76c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266749

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:d6:d3:a7:a1:e9:31:79:cd:ea:87:ee:f7:17:8f:e3:86:
         16:45:70:b7:16:f8:f1:f3:a7:57:d5:86:78:e7:19:e6:a1:df:
         eb:7e:4d:d6:ac:2d:4f:05:2e:a9:ad:1a:35:70:e6:cb:c4:af:
         27:85:d1:63:86:d3:a8:2f:7a:73:67:b6:7f:99:fb:16:0a:2f:
         cd:39:e4:98:85:fa:09:a6:1f:cc:03:87:06:3b:fc:64:b0:ed:
         c9:6c:8a:cd:db:39:3f:bc:e6:48:5b:f5:bb:83:27:3a:af:a7:
         43:a4:0e:8c:bb:6f:ba:d0:32:d6:0b:f7:ba:94:84:64:b3:8e:
         0a:55:ae:fc:5b:f9:c7:c7:f5:f9:ec:ce:81:48:7f:60:d7:e6:
         2a:19:ca:8e:1e:da:5b:f2:8a:87:d9:af:4d:62:eb:6d:89:20:
         bd:1a:d9:17:a7:b8:2b:48:71:cc:0d:b4:fa:3e:60:e5:b9:2e:
         54:ac:6e:5d:cb:67:2f:8c:ae:14:63:b6:bd:39:9b:74:55:f6:
         2f:18:7b:31:8f:0d:88:96:a2:f1:ee:43:67:32:93:5a:e2:83:
         af:62:3e:95:b6:ea:48:81:31:44:d4:32:a5:68:b5:46:04:76:
         d7:c1:fe:c8:4e:bc:fa:e6:7f:7c:0f:89:c1:17:e5:50:bf:5c:
         91:b3:f0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----