Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/046c6c87e55bb7fb72fee72270aa89d00135211d.cer
File:                     046c6c87e55bb7fb72fee72270aa89d00135211d.cer (raw, json)
Hash identifier:          vE9ibLCcRd4uQLD5K7r45YBqPMdLaTQyMjLiEYJHw68=
Subject key identifier:   FA:AB:BF:64:B3:33:40:93:81:AC:9E:11:A5:E2:28:97:4C:3B:48:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F31F31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/046c6c87e55bb7fb72fee72270aa89d00135211d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:25 +0000
Certificate not after:    Tue 27 Aug 2024 15:53:54 +0000
Subordinate resources:    AS: 264629
                          IP: 143.202.32.0/22
                          IP: 2803:6140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15933233 (0xf31f31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:25 2017 GMT
            Not After : Aug 27 15:53:54 2024 GMT
        Subject: CN=046c6c87e55bb7fb72fee72270aa89d00135211d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:7b:95:37:53:56:cf:d7:2a:52:3d:98:cf:
                    03:7b:41:ae:d7:70:bc:6b:7c:a9:dc:5c:19:0d:af:
                    77:32:57:b6:24:ef:9f:f5:32:75:af:4d:e5:9c:7e:
                    34:f6:5f:d4:65:b8:9e:43:91:7e:49:17:c3:45:06:
                    93:84:8b:82:6f:b2:70:1a:02:aa:f1:29:df:03:3a:
                    37:21:45:e9:26:4e:a4:4a:db:7b:57:fc:e2:6d:95:
                    db:0d:ba:9f:f0:b1:a1:35:f7:44:7a:b2:b3:9d:5d:
                    48:a3:d7:33:49:2f:41:0d:6f:c6:31:d1:40:41:67:
                    e7:94:68:bf:6c:fc:1c:78:81:96:49:18:e5:65:35:
                    28:66:f3:5e:a9:65:7e:5d:bb:3a:5c:c7:58:dd:9b:
                    31:a3:ec:60:21:20:c1:bb:3f:75:c4:49:df:de:f3:
                    af:dc:b4:07:d4:fa:32:9d:51:29:08:fd:9f:32:18:
                    ca:9f:1f:78:b2:67:c6:44:f5:69:c0:b5:ce:62:4c:
                    32:b8:92:ac:70:7d:43:60:25:b0:cc:0a:77:c8:75:
                    2a:f5:51:a0:c6:4a:09:cd:c7:5d:e1:f8:bf:76:5c:
                    b5:36:f8:9d:ea:86:dd:93:0c:b9:8a:f7:e0:07:35:
                    97:84:33:bd:99:da:69:ad:12:80:4f:73:ff:57:83:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AB:BF:64:B3:33:40:93:81:AC:9E:11:A5:E2:28:97:4C:3B:48:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/046c6c87e55bb7fb72fee72270aa89d00135211d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.32.0/22
                IPv6:
                  2803:6140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264629

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:6b:ce:3f:79:64:00:e0:62:1d:82:a1:89:39:44:b0:cd:
         ea:9d:f7:a9:d3:d2:14:0d:9c:4c:b8:1e:07:93:b2:9f:ce:e4:
         13:08:e6:01:d6:14:f3:08:02:8f:80:0e:05:06:c1:d2:ab:a6:
         27:16:13:d4:aa:a9:07:4b:d6:73:45:cb:df:75:5d:52:bd:50:
         e2:6e:8a:b4:7e:c4:81:99:3c:1e:22:7f:89:71:86:07:54:01:
         a5:4b:11:49:3c:22:84:c0:37:c4:fa:d2:df:28:85:86:81:69:
         2c:ab:2f:4a:42:59:b4:c1:83:51:b2:25:96:d7:6c:fe:f1:e8:
         16:2b:b0:d1:2d:05:9d:ca:2a:68:32:66:ca:03:a9:a3:b4:1c:
         23:1e:cb:64:d4:9d:0e:55:4e:ad:ab:99:7b:91:50:30:a6:6c:
         cc:eb:55:7a:ac:5a:cb:df:5b:ac:83:c4:42:dd:cb:cf:bf:12:
         5e:e8:c2:e3:10:43:47:f9:fa:eb:ff:b1:df:7a:ae:46:29:5a:
         98:94:ff:57:c1:78:f7:a9:68:5b:ba:42:6c:e1:c3:3b:32:46:
         97:21:cf:f7:10:10:f2:2a:4a:bd:d3:ed:c2:fd:cc:5d:34:85:
         89:2c:b7:a2:46:e1:09:4a:77:ab:4d:2f:00:d1:fc:7a:2a:11:
         04:d6:5c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----