Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer
File:                     0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer (raw, json)
Hash identifier:          26NmP91bskcSPntSajEuRJmv9qxT+2ovOKjOWviFinU=
Subject key identifier:   7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F60C33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2018 14:44:57 +0000
Certificate not after:    Sat 21 Sep 2024 17:42:42 +0000
Subordinate resources:    AS: 264815
                          IP: 170.239.168.0/22
                          IP: 2801:13:5000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16124979 (0xf60c33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 18 14:44:57 2018 GMT
            Not After : Sep 21 17:42:42 2024 GMT
        Subject: CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:a4:c0:e1:68:e1:c3:22:18:3c:bd:89:4b:
                    0d:99:45:9b:72:77:c7:c6:a7:77:1e:5f:d5:33:9a:
                    75:ea:81:03:de:64:ef:e8:84:28:95:00:52:5e:c8:
                    92:d9:20:3e:6a:eb:84:d7:96:99:51:1b:2a:a6:d0:
                    49:d5:b5:fc:86:cb:f7:fa:65:d9:4b:ac:78:fa:96:
                    e0:8b:6b:51:f8:5a:4b:7e:a3:1a:b5:c7:97:9e:a7:
                    24:81:c6:c5:00:74:d2:ee:6d:5d:3a:bb:dd:f9:b8:
                    42:20:3e:05:f0:10:24:e5:2a:b1:24:a4:5d:3a:ce:
                    c1:66:5f:e0:f3:70:d0:c0:6b:62:c5:89:dd:8f:ca:
                    18:fe:47:25:91:f5:78:2a:27:3a:61:d1:9d:86:81:
                    5f:6a:47:92:45:8e:5e:fd:78:99:c3:6b:e5:9b:9e:
                    f2:ba:13:d8:6b:3a:d0:e5:c7:57:90:7a:cb:21:64:
                    c3:7f:3f:73:07:fd:31:f0:3e:26:16:6e:06:bc:91:
                    37:90:d9:3b:b7:cd:23:e9:a2:37:47:ae:27:8f:29:
                    cc:56:11:b0:78:76:07:fb:b2:b9:ba:35:59:62:3e:
                    6a:73:0c:e9:74:2a:db:55:7e:14:fd:31:9f:65:6a:
                    29:fd:22:dc:56:f9:ed:62:c4:af:35:07:5b:e6:4b:
                    7a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.168.0/22
                IPv6:
                  2801:13:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264815

    Signature Algorithm: sha256WithRSAEncryption
         1d:59:7e:ae:16:36:11:5a:6e:e6:ca:ce:88:57:c5:5d:00:b6:
         c0:cd:f0:c0:da:40:cc:c0:46:f8:ad:4e:7b:08:85:8e:f7:a6:
         99:ff:79:de:7a:51:fc:31:ed:ea:54:ee:1e:ed:d0:4e:f2:f2:
         7f:da:8f:3e:94:a5:85:94:7e:9c:09:49:2e:15:3a:8d:60:cf:
         a1:59:ea:74:ff:e3:77:e0:4e:44:69:4a:ea:66:fe:8a:f4:3a:
         f3:78:82:7e:e5:08:ca:48:5c:db:37:ad:9f:2b:ec:b4:88:1c:
         85:d7:69:c2:79:2d:23:e3:22:2f:51:9a:73:c5:57:e6:2a:d7:
         4b:6c:45:4f:c9:3e:e1:13:f5:63:1c:34:7a:98:7e:53:ea:7a:
         53:79:cc:c0:4e:d4:40:62:0f:d0:bc:c5:b9:ee:32:78:eb:89:
         a6:87:fa:c8:1a:cf:6d:79:1a:5d:0a:a0:c4:64:c2:45:3f:f1:
         d4:df:41:bb:50:2e:cb:cb:02:8b:c9:22:10:3d:f0:dd:ef:04:
         4b:8f:e7:e4:96:5f:9f:f5:ee:42:30:11:c6:56:07:27:56:e5:
         65:eb:18:6f:4e:40:0c:3e:0c:6a:34:97:b2:06:c1:7a:71:4a:
         32:05:4b:0f:fd:db:81:b2:81:15:1c:58:e8:1f:09:40:da:41:
         e1:c5:7e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----