Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer
File:                     0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer (raw, json)
Hash identifier:          qyg2k+7YukWmV0fF2WBuxoBTiowo1R5iaqs0vaYkRe0=
Subject key identifier:   EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCDC0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:47 +0000
Certificate not after:    Fri 15 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 27659
                          AS: 264626
                          IP: 190.14.48.0/20
                          IP: 200.6.96.0/19
                          IP: 2803:aa00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16571403 (0xfcdc0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:47 2017 GMT
            Not After : Nov 15 04:00:00 2024 GMT
        Subject: CN=0eefd3ca564e9210c3e5d7e79504f7fd6e635260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:45:87:57:13:6e:a5:23:3d:66:61:08:8e:
                    45:d7:2f:7f:76:7b:d5:6b:c1:13:36:b4:04:12:84:
                    cc:17:85:81:b3:d4:91:8a:e0:70:54:77:b8:89:62:
                    45:07:ee:8a:e2:a7:66:f7:01:89:8e:df:41:90:50:
                    92:d3:6a:09:f3:3f:ef:be:7a:ef:0a:0f:28:7c:fa:
                    6c:24:e6:92:e4:52:75:5e:9f:2e:d3:b9:f9:10:4f:
                    73:9c:c4:b4:02:f6:0b:87:69:11:34:ee:da:a0:e5:
                    6d:f0:f1:31:01:35:dd:bd:61:7e:d4:05:9f:17:5a:
                    d3:cf:20:30:03:13:02:76:96:d2:18:a5:dc:cb:bf:
                    69:06:15:5d:41:7c:58:c8:80:50:1b:c0:c1:a1:ce:
                    9e:25:79:c1:39:23:98:d6:0f:1e:03:7c:b7:c2:7d:
                    d6:ca:99:e4:05:b5:e2:a7:3f:88:a7:72:4e:23:0d:
                    a3:ec:f7:00:59:9e:b5:ee:cb:65:44:6f:3a:89:75:
                    d8:e3:ad:3a:90:9a:83:77:a6:38:5b:2e:29:31:2f:
                    09:7f:b5:17:5d:47:32:f3:54:9a:77:32:33:da:e1:
                    6a:54:04:4f:f2:91:af:4c:cc:17:cc:9b:b5:02:9c:
                    61:a6:c6:57:1e:d6:30:a9:0e:ca:82:02:e4:5e:c7:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.48.0/20
                  200.6.96.0/19
                IPv6:
                  2803:aa00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27659
                  264626

    Signature Algorithm: sha256WithRSAEncryption
         b6:3a:bc:a7:59:df:c5:4e:c1:c9:f7:7d:5c:5f:9b:3d:8c:36:
         c4:ea:17:94:d7:21:87:40:16:ef:43:0c:b3:79:42:84:79:1c:
         00:02:34:b1:a5:c7:00:8e:e9:4c:f5:c9:26:5f:fd:92:93:2c:
         32:87:f0:55:68:37:32:fd:8d:2f:9a:e8:c2:0b:dc:56:86:45:
         6d:3c:dc:93:60:4e:d0:20:90:4d:a0:aa:30:e5:86:e8:4c:2f:
         fc:b2:9a:aa:6d:70:f3:50:17:5c:bc:c2:dc:61:ba:01:5f:e4:
         1c:2f:00:f1:73:72:57:f7:20:58:32:b5:73:db:b4:ff:a8:9f:
         86:a7:43:5b:f3:85:d5:65:5c:44:50:9b:43:1d:24:e8:4f:fe:
         37:93:56:7e:17:79:f0:4b:bf:e1:71:03:4f:13:22:d8:3b:b3:
         3d:2a:0a:57:09:39:33:f6:89:d9:7a:98:d0:4b:fb:83:91:23:
         57:9a:0c:db:8b:71:89:90:1d:17:47:59:17:a7:eb:4c:14:1e:
         f9:30:84:63:9a:99:2a:80:47:54:9f:2a:bd:54:a5:24:5b:fc:
         e6:90:bd:12:f9:87:af:79:ab:f1:e9:9e:80:81:41:75:2b:67:
         57:8b:a6:d5:0d:09:ac:76:9b:f4:f4:ea:af:53:af:d6:d8:78:
         e2:01:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----