Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
File:                     4245076a2cc4607485f913342504c58cdd14441f.cer (raw, json)
Hash identifier:          9TadiQerzpHWgoJdWiJxEztc54UPAZLgMynTfRt5Eo8=
Subject key identifier:   AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102016B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 May 2018 12:19:06 +0000
Certificate not after:    Mon 23 Dec 2024 14:14:32 +0000
Subordinate resources:    AS: 61503
                          IP: 138.36.252.0/22
                          IP: 2803:2f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16908651 (0x102016b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 12:19:06 2018 GMT
            Not After : Dec 23 14:14:32 2024 GMT
        Subject: CN=4245076a2cc4607485f913342504c58cdd14441f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:a7:bb:5b:0f:e9:5a:1b:2a:16:8e:ad:03:
                    50:e8:8f:c6:e9:4f:47:0e:29:4c:b0:db:5c:b1:9e:
                    c7:d3:95:ac:89:27:64:bd:45:fb:83:06:3e:6f:04:
                    9a:f7:a1:cc:b6:b0:d7:6c:2d:0a:45:55:9e:01:13:
                    78:3a:17:5e:cd:2b:b6:db:60:4e:fa:91:02:ff:e7:
                    3a:cd:99:19:ff:39:09:d9:52:4f:5f:9c:ec:bb:85:
                    19:a8:21:27:64:f7:40:f4:11:fb:7b:85:2a:b5:25:
                    74:42:8a:fb:19:d4:a5:f8:29:2f:14:1a:10:ac:69:
                    a7:00:1a:57:bf:80:3a:59:01:a3:de:0e:df:e7:80:
                    13:fd:4b:4e:35:94:01:06:76:46:f7:17:93:e8:2e:
                    9b:c1:ae:f6:15:ae:06:82:24:c3:98:0b:be:b9:4d:
                    d3:49:87:cc:c0:d3:a0:c4:2b:44:35:9b:e9:ee:8e:
                    85:31:4b:89:f8:b7:d9:03:42:68:29:4f:a8:39:f9:
                    b5:2a:58:22:47:fe:3e:f6:6c:22:7a:62:8f:fb:16:
                    26:95:bd:cc:0f:7e:58:90:2f:fc:3c:ac:31:f2:13:
                    5c:8c:f3:57:3e:72:d8:91:af:2b:d2:83:9e:a8:f1:
                    91:c5:f0:78:00:38:f8:11:2b:cc:d9:c0:2b:7a:46:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22
                IPv6:
                  2803:2f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61503

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:82:01:93:8e:61:b0:18:3b:ad:58:8c:ec:d1:18:d8:3d:
         9a:fb:df:9c:7c:2c:af:e6:a0:26:67:c4:b3:c9:98:e1:2f:a8:
         6b:eb:86:56:d0:4d:61:ad:b1:bb:e7:73:10:1a:95:bb:8c:3d:
         42:c9:83:f7:f5:5b:0a:43:e3:76:4c:22:bc:a2:ef:24:f8:26:
         75:88:1e:6d:3b:00:e2:c6:86:bc:74:94:77:17:cd:4a:21:41:
         e9:fe:cd:31:33:b0:f9:2d:40:a7:1e:80:f1:ec:3d:2e:4a:cf:
         a4:58:9d:ba:3a:b3:33:f9:58:53:a9:9d:88:c5:67:b8:86:7b:
         09:d5:e0:2f:c3:ec:20:c7:e4:8e:0b:13:03:0b:72:ff:60:2b:
         4a:23:77:ca:b2:f3:6e:43:98:a9:de:92:61:1d:e5:fa:53:d9:
         f2:d1:56:8b:5c:44:8e:65:de:cf:0c:79:5b:ec:cb:2e:1e:98:
         81:33:95:6b:90:d0:33:60:70:49:ea:7d:ae:68:20:e8:da:76:
         b5:44:e3:df:51:2f:fc:da:a8:5b:9e:c9:35:c8:4b:06:a7:c8:
         95:f2:40:09:e3:ce:83:d3:1e:11:60:1e:3c:7c:22:a7:3c:f0:
         5c:65:54:b9:06:ab:5b:4b:37:c2:c9:3f:d2:ec:21:e5:f3:1a:
         38:b6:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----