Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer
File:                     a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer (raw, json)
Hash identifier:          0yBvopk72rk2y9aywk01+qW/N7Y9qqgeFGu1eT4o6/8=
Subject key identifier:   4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104B033
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Dec 2018 22:38:03 +0000
Certificate not after:    Wed 22 Jan 2025 14:08:42 +0000
Subordinate resources:    IP: 45.232.172.0/22
                          IP: 2803:1720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17084467 (0x104b033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 24 22:38:03 2018 GMT
            Not After : Jan 22 14:08:42 2025 GMT
        Subject: CN=a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:e0:a8:7c:ba:69:2a:b2:c6:60:2c:71:80:
                    ea:79:90:28:43:4f:4d:9f:1d:c8:0d:7f:03:04:1c:
                    e8:03:2c:92:1a:50:16:26:05:e5:2b:2a:a1:4e:3e:
                    98:fc:66:1e:3f:19:9b:9a:9f:64:1e:72:8a:8c:d2:
                    dc:3b:16:76:e2:fa:70:16:be:31:67:17:82:41:85:
                    cd:e2:cd:5e:25:c7:cb:02:e6:66:8d:de:14:bd:a2:
                    5f:77:6b:22:fc:40:9c:ab:36:a7:0c:83:c4:71:94:
                    62:cb:98:ff:cd:ea:d6:81:dd:d8:75:e3:2c:41:fd:
                    33:ea:ad:85:14:ed:24:2d:6c:c0:d7:92:9c:13:b7:
                    fe:75:d2:be:b3:d7:5b:1c:dd:39:81:fd:f5:5c:02:
                    62:f2:00:fc:f2:f5:ff:fa:2e:af:bc:d8:66:48:97:
                    0f:52:9d:5d:05:36:81:f8:79:9a:19:cc:e2:e6:72:
                    8d:9a:2f:06:c4:4a:53:9f:57:cd:ef:0e:b7:b7:f6:
                    50:27:75:7e:97:fd:a2:b3:a5:d4:5a:f2:bd:e3:7e:
                    5c:31:7d:8d:46:f1:73:dc:16:d1:e2:54:12:da:01:
                    8a:84:8d:3c:d1:4b:28:ac:4b:2f:2e:60:4b:2d:45:
                    68:b0:1d:cc:c2:32:f4:93:4c:4b:4f:cd:6f:77:3a:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.172.0/22
                IPv6:
                  2803:1720::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:cb:f0:fe:a5:b4:57:47:f8:0a:92:ab:c1:f7:5b:10:9e:
         a8:af:4e:16:0b:19:70:93:02:ab:71:e9:8b:4d:b6:20:52:bf:
         51:f2:fd:6c:32:c8:fe:37:5a:d3:3e:53:56:fd:44:ad:38:ec:
         06:9b:32:31:7d:8f:70:ce:56:e7:35:9f:dc:96:ef:6c:d2:ca:
         85:c4:86:c1:84:bb:d9:c4:da:ec:09:f6:51:53:49:dc:fa:e3:
         2d:b1:55:fc:d2:f5:16:eb:e5:74:2f:15:3b:53:97:2e:65:f3:
         b5:27:d5:77:4f:2d:87:67:5a:a9:49:c6:80:7c:2a:d3:60:59:
         ee:7d:80:cb:dc:61:53:d2:1d:20:bb:70:5d:45:a0:f9:19:ac:
         26:77:34:3f:74:be:83:08:1d:db:b9:1f:84:27:5e:d4:7c:4e:
         51:6b:06:be:25:16:b6:08:46:76:97:27:08:58:ba:27:38:df:
         ad:90:a9:d0:75:c2:a1:8c:11:75:37:fa:98:66:0c:f7:bd:80:
         d2:77:d6:0e:04:61:e1:06:56:ac:93:9c:9c:28:6a:a7:6f:f9:
         f0:cd:9f:4f:8c:0b:07:06:33:a4:c9:0b:51:2b:c3:9f:55:13:
         c6:e9:cd:0c:f8:99:02:dc:38:13:76:d2:3f:60:a1:5e:64:88:
         58:23:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----