Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/125bf04475f25d938ae1a66ce00fa5c50a6437d6.cer
File:                     125bf04475f25d938ae1a66ce00fa5c50a6437d6.cer (raw, json)
Hash identifier:          C5/PhWBBNjahzYyu3J/WArJocECL6mrji9oR2758abM=
Subject key identifier:   4B:4A:54:6E:38:3F:6B:70:37:01:4E:7D:43:39:74:1F:F5:62:AF:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D3C0FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/125bf04475f25d938ae1a66ce00fa5c50a6437d6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:22 +0000
Certificate not after:    Thu 02 Nov 2023 17:28:19 +0000
Subordinate resources:    AS: 264849
                          IP: 170.83.52.0/22
                          IP: 2803:92c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13877498 (0xd3c0fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:22 2017 GMT
            Not After : Nov  2 17:28:19 2023 GMT
        Subject: CN=125bf04475f25d938ae1a66ce00fa5c50a6437d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:8b:18:ca:3f:1a:16:98:d3:c5:7e:80:02:
                    0a:da:f1:64:9d:80:1f:0d:95:d1:af:82:fd:95:5b:
                    00:8d:d1:1a:7b:06:b6:f7:2d:64:9e:d4:40:a1:be:
                    30:80:0f:21:b5:cd:8d:f4:17:f5:a0:8e:9f:9a:16:
                    42:94:b1:ef:fc:b6:3d:2f:f4:78:06:1d:20:49:ff:
                    a3:af:56:7a:63:fa:b8:2e:8a:a7:f6:0f:a2:6e:ce:
                    f1:59:6e:88:3e:c2:ec:3b:68:5b:72:1d:62:5b:08:
                    1d:e7:a4:25:f0:6d:e0:cc:7f:aa:1f:1c:f3:11:e2:
                    a2:9c:b8:5e:93:5e:cf:d5:32:b5:2a:2c:9d:28:ed:
                    12:12:1e:78:c3:37:ce:82:13:c8:13:df:4f:73:02:
                    bb:df:c5:42:65:e1:a1:a8:1e:25:fe:dd:2f:da:c0:
                    fc:23:b3:e1:e2:f9:58:d2:f1:9b:7f:5b:3a:40:f1:
                    ba:86:2e:32:39:74:f8:53:60:ca:ee:2b:c9:91:91:
                    7d:10:58:0b:27:bc:2a:8e:67:1f:ea:26:ba:0a:58:
                    12:90:67:9c:3c:28:32:39:e3:da:c7:ad:16:3c:27:
                    c6:ec:61:2e:30:cb:6b:ab:f7:fc:02:36:9a:b3:6a:
                    bd:f1:c9:b1:ac:d9:9b:75:22:38:94:57:0b:19:57:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:54:6E:38:3F:6B:70:37:01:4E:7D:43:39:74:1F:F5:62:AF:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/125bf04475f25d938ae1a66ce00fa5c50a6437d6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.52.0/22
                IPv6:
                  2803:92c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264849

    Signature Algorithm: sha256WithRSAEncryption
         21:27:e6:4a:11:39:f2:aa:4f:12:b7:02:6d:08:ad:8c:8f:e0:
         15:f0:83:8b:99:84:06:a1:6b:16:90:d1:26:fa:0c:f9:9b:70:
         e5:b5:af:71:eb:bf:05:a9:91:7f:05:60:9a:1b:29:94:91:b1:
         52:18:33:e6:2f:02:16:44:1b:54:f2:e5:0e:23:44:10:52:68:
         cb:4c:b9:09:fc:d3:1a:a5:5f:82:4c:e1:83:9d:64:03:78:6d:
         1b:b2:c8:a7:60:d5:ae:9f:ac:76:dc:12:9b:69:03:a5:b9:a3:
         0d:7f:a4:80:49:9a:08:7c:ab:ee:5d:ff:a4:c5:33:3d:ad:38:
         54:fa:d3:a6:a6:43:66:fb:d5:ee:19:b1:88:08:5b:ab:c8:44:
         b5:67:6e:7d:c3:bb:4c:76:de:a4:6c:b8:8f:4c:20:87:78:e7:
         be:53:d4:1c:73:11:7c:93:62:81:ee:07:df:46:a8:07:aa:3e:
         67:c7:72:1e:d7:cb:14:9b:3f:e6:2e:5c:4b:f0:a2:dc:a8:ac:
         92:93:e2:99:7f:2b:c8:93:e9:24:b4:a3:80:43:09:87:71:d5:
         cc:30:72:e4:52:36:ac:16:21:47:fd:6f:f7:1f:83:a6:bb:e0:
         90:0b:20:fc:5f:75:bf:66:44:17:ee:55:09:34:d1:89:6e:76:
         22:f2:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----