Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f2565a824dbb76a03750769f8d2e74453e03358.cer
File:                     3f2565a824dbb76a03750769f8d2e74453e03358.cer (raw, json)
Hash identifier:          5qq2TLNJnmW14fs7h9ucNIUxWBJXtd1TEZ2JNn2Adr4=
Subject key identifier:   CA:93:03:10:3A:C6:92:99:D6:AF:10:E6:7E:FA:32:CD:8A:89:D8:1F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01002B01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/3f2565a824dbb76a03750769f8d2e74453e03358.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2019 04:06:06 +0000
Certificate not after:    Fri 06 Dec 2024 20:46:45 +0000
Subordinate resources:    AS: 267769
                          IP: 45.170.240.0/22
                          IP: 2803:7ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16788225 (0x1002b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  8 04:06:06 2019 GMT
            Not After : Dec  6 20:46:45 2024 GMT
        Subject: CN=3f2565a824dbb76a03750769f8d2e74453e03358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:95:47:28:56:d9:bf:1c:a9:97:3c:96:a1:
                    75:77:15:ff:26:60:10:a9:df:ba:26:1f:c6:03:74:
                    d3:b8:c0:c1:27:50:07:eb:b0:09:31:5d:4c:27:2a:
                    28:9f:70:56:40:57:76:3c:2d:01:82:d0:37:2e:97:
                    17:c1:a3:6f:2b:4d:67:33:aa:4a:fa:46:ef:84:d7:
                    14:3a:2b:1d:5c:97:6c:db:e3:dd:ef:47:17:97:ad:
                    9a:fb:d1:74:a0:11:ed:2e:4b:9d:3a:39:7a:84:44:
                    5d:30:56:0d:e4:ef:18:da:21:bd:07:67:ea:89:58:
                    b4:ce:24:52:22:ce:db:0d:34:ff:53:65:96:fc:64:
                    99:6c:ec:fb:a4:e6:b9:e4:2e:2b:5d:7a:9a:76:95:
                    c2:c5:70:7a:9d:0c:d3:8f:70:fa:46:e7:f7:58:28:
                    c3:15:b7:73:7c:ff:f6:0e:cb:f6:51:01:03:54:63:
                    bf:93:c7:ac:45:9a:19:fc:74:e3:c1:cd:ab:95:67:
                    95:d9:c2:9c:65:a9:91:58:78:0c:a5:8f:0b:b8:c4:
                    08:01:5d:90:e8:8b:ca:0d:92:4b:d8:41:e2:ea:fa:
                    60:c8:54:f3:65:56:f8:ff:aa:fe:2b:46:b8:49:17:
                    f7:b7:a9:ca:24:4e:79:17:5d:50:67:1e:72:65:d7:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:93:03:10:3A:C6:92:99:D6:AF:10:E6:7E:FA:32:CD:8A:89:D8:1F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/98a2618e-d51b-42d0-90ad-ad6e0f60c6a4/3f2565a824dbb76a03750769f8d2e74453e03358.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.240.0/22
                IPv6:
                  2803:7ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267769

    Signature Algorithm: sha256WithRSAEncryption
         86:26:7f:a5:3b:22:83:99:98:d9:8f:36:c3:71:9a:1d:45:b1:
         28:80:ce:fe:8a:3e:e1:19:13:18:f7:94:6f:46:23:5f:c0:7c:
         ea:1c:bc:17:78:2a:55:23:be:52:a4:a3:b0:e7:60:51:22:37:
         12:12:a4:b7:b0:fc:76:a2:99:29:14:d2:8e:9f:8c:b3:98:ad:
         f8:72:8a:2f:60:89:c1:18:43:39:8c:34:d6:90:4e:1a:1c:78:
         14:73:4a:b9:74:3a:a3:45:e1:29:c9:05:6e:b9:b6:ac:0b:b0:
         16:55:6e:73:f3:6f:bd:6a:10:48:30:bd:46:22:c4:20:3f:7e:
         a8:28:ff:ad:9f:69:80:84:42:73:13:49:af:5d:db:b3:6c:bd:
         2d:96:e6:fa:2c:d0:67:7c:1d:db:c8:60:f9:5f:10:2e:75:c4:
         d6:6e:9a:a7:91:5b:9e:11:77:8c:4e:50:95:0e:42:5e:7b:7b:
         e7:57:69:9a:5e:db:13:b5:bc:45:17:e4:99:78:38:bb:5b:fe:
         c6:cb:09:06:9d:62:00:cd:13:65:c4:3c:e7:82:0d:f0:71:23:
         e2:c2:21:b4:91:02:15:cb:7d:d7:ae:05:eb:ed:80:cf:b9:7f:
         2c:e2:88:4f:04:6b:e9:38:36:f2:97:e0:69:6e:89:d7:cc:18:
         18:82:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----