Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer
File:                     4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer (raw, json)
Hash identifier:          2k7mxLVNYZQyqNaAhMwRcfXTaNh1qCzg0DPB55WTjsg=
Subject key identifier:   8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF91DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Apr 2018 15:13:17 +0000
Certificate not after:    Fri 29 Nov 2024 22:50:52 +0000
Subordinate resources:    AS: 266734
                          IP: 45.230.216.0/22
                          IP: 2803:4320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16749018 (0xff91da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 15:13:17 2018 GMT
            Not After : Nov 29 22:50:52 2024 GMT
        Subject: CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:e3:80:e5:fc:ec:aa:46:7f:eb:b1:f0:0e:
                    5f:e9:7e:62:52:36:3f:e4:0e:2c:45:d3:17:06:3d:
                    ca:07:94:b4:e5:21:4f:3c:3f:66:9e:7d:b2:92:98:
                    90:ed:f4:e6:50:14:65:ea:72:97:f8:2e:77:29:a0:
                    d6:53:44:ce:7b:02:f2:13:42:6b:00:2a:24:c8:0c:
                    fd:19:3e:8a:b4:26:d7:9a:3f:69:69:04:27:4b:17:
                    4a:db:87:3e:b2:66:f8:d9:4f:3f:6f:b0:96:9b:d0:
                    e2:d9:30:52:a1:2e:b3:3d:9b:6d:ec:9c:43:e2:0f:
                    c2:d9:b9:06:87:dd:39:e8:a6:d6:c8:5a:17:52:85:
                    b2:bb:39:28:ca:f6:d6:db:bd:cb:6d:f3:c8:9f:f5:
                    9e:50:bd:27:35:5f:d7:51:e6:aa:4d:36:29:8e:b2:
                    34:16:84:4e:0a:a2:7c:5a:8b:ca:4a:0e:28:19:19:
                    2f:58:71:aa:ac:32:67:fa:5c:c4:80:fa:93:a4:41:
                    c5:84:93:e9:46:3f:aa:d1:31:36:87:7b:f8:51:5f:
                    35:d9:5e:c6:c4:a7:16:d6:87:69:34:dc:46:8c:8d:
                    f8:ac:ac:19:91:5d:78:57:5d:2c:a8:0a:cf:31:d7:
                    70:38:eb:1a:13:9e:3a:2d:ba:87:f3:15:2e:b4:bb:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.216.0/22
                IPv6:
                  2803:4320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266734

    Signature Algorithm: sha256WithRSAEncryption
         5d:02:f3:ff:e4:03:97:0c:96:ca:71:74:be:26:d6:2e:03:78:
         84:c8:7c:28:65:f6:f3:02:75:b9:6e:14:7a:19:e3:c4:5b:7c:
         3b:37:a1:6f:b8:d5:cb:f3:13:8b:1b:97:ca:03:79:64:65:4f:
         24:d1:b0:88:be:e1:ec:6d:0d:e3:b7:51:9b:5c:70:6b:b5:98:
         0a:55:65:0c:f8:8d:3f:89:4a:d3:28:e5:9d:6d:07:86:f4:9c:
         63:f3:02:34:49:b0:96:2c:25:b8:f1:41:ba:e6:08:53:bc:1b:
         db:56:99:f5:a7:4d:64:e4:92:c6:38:f9:69:5e:e4:ea:77:ce:
         49:25:b6:7f:85:cc:ef:8a:bf:3b:e6:1e:73:9e:fd:24:b0:83:
         a0:4c:88:d8:ad:b8:1a:54:3b:fe:17:2f:61:6d:cf:40:a8:ab:
         57:54:6f:97:76:a8:c7:42:6e:66:50:92:7f:a9:72:e2:83:42:
         60:85:08:ca:da:10:9d:63:3d:27:0c:f7:57:e8:c0:9f:29:c1:
         cd:d3:5a:05:17:62:c5:f0:2d:b7:08:15:36:b6:b4:4b:45:52:
         fb:a9:e6:2b:f1:4f:3d:27:20:d8:26:15:ff:b6:e4:c2:64:67:
         7f:b4:61:9d:8c:27:c6:41:81:96:f5:2d:19:9f:4c:a3:df:c9:
         5a:99:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----