Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer
File:                     c3d85f03580e6350cae3b1665689b40bfef21165.cer (raw, json)
Hash identifier:          tVl4iW3NI4kDw+7+X2VxJufo8cWWv0bk4EBcMv3DhIA=
Subject key identifier:   1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101C44E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 22 Sep 2019 00:57:36 +0000
Certificate not after:    Sat 21 Dec 2024 18:28:41 +0000
Subordinate resources:    AS: 267778
                          IP: 45.171.108.0/22
                          IP: 2803:97a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16893006 (0x101c44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 00:57:36 2019 GMT
            Not After : Dec 21 18:28:41 2024 GMT
        Subject: CN=c3d85f03580e6350cae3b1665689b40bfef21165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:18:f5:55:61:e1:2f:3b:02:29:0e:7d:1c:
                    a7:f1:d8:92:7a:27:85:3c:af:9e:78:4e:de:34:2f:
                    14:ef:af:c9:1d:e5:cc:b9:43:79:06:f9:56:41:b8:
                    29:1a:c1:3a:41:94:ec:3f:27:82:73:4f:bd:ce:11:
                    01:7a:69:be:ea:15:5d:e1:98:da:00:4f:51:e2:85:
                    08:74:06:e9:46:c4:e2:ce:f2:67:2b:36:88:69:c0:
                    68:41:97:0c:f8:fc:43:57:93:b0:6d:04:5a:46:1c:
                    b1:35:ce:04:d9:f5:2f:7b:6c:fc:57:75:ea:e9:46:
                    a2:12:33:6a:77:c6:52:9b:68:19:85:94:ec:91:07:
                    9e:99:90:68:88:f1:93:25:52:e3:62:1f:d9:c0:13:
                    6f:1d:32:0b:d3:d6:1f:58:bd:8a:dc:b6:b3:b5:38:
                    d2:8d:99:1b:5e:15:6e:2f:59:04:92:5c:00:22:8c:
                    a4:64:2e:8d:bd:5c:34:91:d1:27:4a:77:be:a4:b6:
                    2b:8d:e0:1e:cb:96:8d:9d:08:72:7e:cd:67:9c:df:
                    eb:4f:6e:61:f9:a3:62:d7:eb:d1:03:f8:fe:c0:15:
                    63:6a:18:5b:3c:a8:52:f5:22:d6:b4:62:f7:bd:79:
                    71:ff:9d:92:83:f5:63:81:05:39:9c:95:6f:33:62:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.108.0/22
                IPv6:
                  2803:97a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267778

    Signature Algorithm: sha256WithRSAEncryption
         02:57:5e:c9:9b:43:9a:8a:14:9e:dd:e0:77:92:ba:11:73:f7:
         98:76:50:94:b0:7b:d5:9e:8d:0c:7a:85:50:3f:c1:47:cd:be:
         a2:fd:c3:bc:d6:0e:f6:bc:3f:66:17:24:bc:2c:f3:c2:db:88:
         b5:8a:5a:fb:a9:09:cc:af:5e:a1:b3:b5:e5:20:e6:e7:a1:73:
         bc:e5:00:08:5d:87:c8:58:a2:90:ff:39:a7:18:22:3a:d9:3b:
         18:6b:68:ef:fd:9d:fb:80:14:02:d9:5a:ed:a4:4c:18:a1:e9:
         d5:9c:f6:17:f8:bd:1c:5a:ec:c7:36:b4:ca:fc:db:35:b9:84:
         76:ef:1b:46:ad:05:80:ee:13:6a:6a:b4:e4:64:c7:f6:90:b5:
         bb:7b:37:4e:8c:2a:bf:18:f5:2c:eb:b5:77:05:b7:92:07:c3:
         1b:89:8e:65:1a:ee:94:70:a5:2c:70:75:77:da:a3:2d:ad:93:
         d6:29:fb:94:1c:d7:a9:b4:d5:c8:5e:4c:36:1d:d6:4a:a9:f3:
         45:3a:d2:d6:ae:d0:92:ee:c5:f0:06:8c:15:17:f8:1b:30:d0:
         d9:98:dc:ff:c3:d3:0b:8b:bc:1c:a5:22:ea:0c:90:e8:8d:d7:
         3a:95:c6:55:0d:9c:2e:5c:08:e4:40:69:25:7b:5a:67:7a:fe:
         d4:f7:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----