Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fc0a5350730d95599a12c52d83db204dd0649b1.cer
File:                     0fc0a5350730d95599a12c52d83db204dd0649b1.cer (raw, json)
Hash identifier:          +vVigIuHu37+Jnu61VpU8y0+2yGdQZoa6GSM3gdDp8U=
Subject key identifier:   62:AC:59:8F:C5:0E:F9:E6:D5:14:5D:0C:EA:78:C0:4A:91:78:2B:DF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D83077
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/0fc0a5350730d95599a12c52d83db204dd0649b1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:22 +0000
Certificate not after:    Tue 26 Dec 2023 16:44:43 +0000
Subordinate resources:    AS: 264847
                          IP: 168.181.120.0/22
                          IP: 2803:9d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14168183 (0xd83077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:22 2017 GMT
            Not After : Dec 26 16:44:43 2023 GMT
        Subject: CN=0fc0a5350730d95599a12c52d83db204dd0649b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:7a:f0:02:fb:4c:7d:09:42:9b:fd:61:1a:
                    1b:f2:31:eb:40:84:32:32:55:37:ae:65:83:91:fb:
                    2e:8a:51:d8:ad:c7:a3:4e:41:7b:30:f1:24:9c:19:
                    a5:62:45:73:02:c3:92:71:ab:4c:84:21:48:1d:06:
                    37:ab:85:f0:58:64:47:1c:31:40:28:29:f9:46:35:
                    b8:f2:bc:2f:68:b8:6c:91:0a:e1:a6:ff:a3:d0:e1:
                    05:2c:4c:c2:a2:e3:f3:f7:19:a9:6e:54:6c:f0:1c:
                    cb:e5:e3:03:52:d6:47:8d:43:23:81:a8:76:ed:78:
                    66:48:3a:96:a4:dc:44:05:75:41:be:b1:f8:62:52:
                    f2:a0:05:f1:2f:f7:41:1c:82:3f:c1:5b:8e:ed:3a:
                    10:96:7a:74:5c:de:b0:8f:53:4c:97:ba:3c:96:19:
                    a4:bd:cf:38:94:36:43:85:f7:5d:0b:8d:30:c5:7b:
                    f1:53:56:da:b8:3f:5f:36:76:04:67:93:34:73:12:
                    6d:86:76:d5:e2:a4:f9:24:7e:97:24:49:bc:de:56:
                    a0:06:57:ab:83:eb:4d:10:86:fe:86:41:d5:fa:db:
                    4c:e6:ed:b8:fd:ba:4d:57:a2:5a:8e:c4:f1:ee:da:
                    b8:3c:44:2b:d2:28:6d:86:93:3e:f9:fc:4f:86:0f:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:59:8F:C5:0E:F9:E6:D5:14:5D:0C:EA:78:C0:4A:91:78:2B:DF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/0fc0a5350730d95599a12c52d83db204dd0649b1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.120.0/22
                IPv6:
                  2803:9d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264847

    Signature Algorithm: sha256WithRSAEncryption
         ab:a3:1c:a8:c5:3a:cf:d3:b5:00:e8:1e:88:84:74:fc:20:9d:
         5b:af:e0:6a:a1:f2:6e:e9:2e:53:bf:ed:0d:73:6c:cc:d9:37:
         3d:39:52:fa:84:23:b8:5d:02:14:fc:23:2f:17:26:27:39:96:
         36:20:56:81:23:fc:ac:ce:4e:39:57:23:7b:e6:a2:dd:6e:b0:
         5d:b5:57:dc:55:72:1d:5d:c0:d8:47:8f:4d:b6:da:46:db:5b:
         f0:2b:c2:66:dc:00:d2:79:07:13:ca:29:dd:47:6f:3f:f6:bc:
         b4:6f:94:92:3e:e7:5e:70:cd:00:6e:51:ac:ac:8f:89:aa:ed:
         c8:02:28:8a:28:38:41:77:bc:55:60:48:7d:db:65:c2:cc:9e:
         bc:70:e5:bb:bb:d4:cc:64:f3:4d:ef:47:fa:82:8f:45:66:49:
         98:44:62:64:d1:6f:53:70:90:de:93:c2:c8:d2:68:12:6d:a9:
         89:b8:8e:17:49:fa:9b:d7:c0:88:6f:01:49:d8:03:fa:fc:7d:
         57:36:d4:6c:0f:e9:78:66:65:cc:a7:61:04:be:32:e2:39:24:
         d4:dd:0e:82:0d:b5:e6:17:52:a0:2c:03:5d:e8:79:a1:72:ab:
         02:cc:13:2d:39:ba:ae:9a:c1:76:d7:22:b5:65:35:18:31:31:
         3e:a2:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----