Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
File:                     3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer (raw, json)
Hash identifier:          b7IzueEBxei1vedJ5aCqjyhIIA+66Uanu5fxXXIvkvw=
Subject key identifier:   DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD976B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:28 +0000
Certificate not after:    Thu 21 Nov 2024 16:41:06 +0000
Subordinate resources:    AS: 28005
                          IP: 138.118.124.0/22
                          IP: 190.102.56.0/21
                          IP: 2803:b840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16619371 (0xfd976b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:28 2017 GMT
            Not After : Nov 21 16:41:06 2024 GMT
        Subject: CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:a5:bb:b3:7f:3d:86:b9:c9:08:3a:b6:0c:
                    6a:cf:f3:a7:15:02:27:31:0a:7d:f2:af:fd:7b:c1:
                    f8:4c:33:9b:53:d1:7d:84:4e:fb:4c:a5:ec:aa:63:
                    ca:24:81:a0:bd:e2:00:3c:4e:6a:08:fb:e5:c2:60:
                    f4:e4:89:fa:65:7f:c0:73:e4:c4:b9:fb:1a:38:a3:
                    31:2a:15:3c:8b:dc:33:ce:41:26:eb:34:09:fe:c6:
                    eb:19:b3:9c:ae:a9:76:7f:ab:cc:b8:42:3b:17:56:
                    04:bf:38:09:93:32:69:f6:87:5f:46:f8:3f:80:b6:
                    4a:97:dc:d5:45:cc:cc:00:f8:2a:19:e5:50:b5:23:
                    af:91:f4:17:7f:75:19:6f:1e:c5:96:4d:59:f1:49:
                    b5:60:2e:1f:8d:5e:4b:42:e8:76:1e:5e:f4:12:29:
                    35:5c:e5:6c:c4:00:a2:33:da:3a:55:34:3e:f9:67:
                    b8:57:79:7d:c0:a4:39:be:d7:cd:de:5f:68:5a:20:
                    d8:1e:70:50:38:93:fc:9c:c8:44:ab:01:e4:69:a5:
                    3a:69:48:21:a6:c3:ac:f6:97:18:f7:79:15:7d:e6:
                    a5:86:6f:5f:fa:f3:fd:07:b6:f2:37:fd:3a:d9:61:
                    00:2d:eb:dc:64:b0:b0:33:59:c7:58:52:a2:53:61:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.124.0/22
                  190.102.56.0/21
                IPv6:
                  2803:b840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28005

    Signature Algorithm: sha256WithRSAEncryption
         ac:7e:3d:c1:36:db:3e:47:aa:f3:4a:e6:10:d6:a9:8e:ec:ab:
         95:3e:38:04:bc:55:91:1b:60:60:ab:fa:50:db:e4:c1:d0:c5:
         d6:89:5d:1a:ba:f7:bc:f9:10:55:a0:fd:eb:50:e6:f9:65:ad:
         4b:17:2d:4d:8f:35:cf:40:36:9f:99:3f:5d:66:ff:1a:cf:c3:
         44:6b:03:3d:20:9e:bf:46:de:23:b2:02:84:3a:f8:ac:6f:ba:
         21:3c:b1:a5:7d:2f:75:c0:73:bb:6d:45:4f:65:c4:58:40:87:
         7f:26:a4:17:57:96:63:65:bf:4b:d0:8d:a2:d6:a0:0b:f3:f8:
         a7:db:0c:d1:b6:1e:ce:21:2f:8e:c4:ea:63:e8:64:18:15:18:
         92:84:46:25:3d:d4:0e:ca:26:c1:5b:3d:2a:ab:ad:3b:77:df:
         a6:9b:da:a9:15:bb:2d:f9:24:72:5c:ae:e3:21:9a:19:90:4a:
         cc:ab:4f:8b:f7:da:a8:4d:6f:5d:50:ba:60:41:c9:e3:c6:94:
         6d:6d:cb:89:82:ba:46:f3:40:fc:50:98:e0:7b:d7:3f:0a:f8:
         ac:71:09:8d:1b:dd:2f:e7:7f:9b:1c:94:18:7b:7b:59:45:dd:
         ee:c8:ae:e6:f0:a0:f7:f7:f0:35:9b:15:fd:7f:19:9c:81:b3:
         c7:d5:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----