Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12ff89774599a3b510bac6a3818f3d64e1638997.cer
File:                     12ff89774599a3b510bac6a3818f3d64e1638997.cer (raw, json)
Hash identifier:          E3R78cEPjo69w5tV3ZrlcPnocFkuuR1yLfaZ4CMmp1E=
Subject key identifier:   F7:B4:89:86:03:46:5C:8E:15:DA:8E:15:35:A3:6F:3F:C1:13:9B:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E47746
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/007d3f4a-691a-47a6-9523-28dc2dbdcb3f/12ff89774599a3b510bac6a3818f3d64e1638997.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/007d3f4a-691a-47a6-9523-28dc2dbdcb3f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2017 12:09:58 +0000
Certificate not after:    Sat 11 May 2024 06:00:00 +0000
Subordinate resources:    AS: 27790
                          IP: 200.16.16.0/20
                          IP: 2801:120::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14972742 (0xe47746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  5 12:09:58 2017 GMT
            Not After : May 11 06:00:00 2024 GMT
        Subject: CN=12ff89774599a3b510bac6a3818f3d64e1638997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:d6:48:e1:d1:a1:6b:39:aa:d4:7c:43:43:
                    9f:51:e7:88:95:17:20:39:08:97:6a:c7:f9:6b:69:
                    a8:dc:23:d7:98:ca:40:5f:4e:fd:26:7f:27:25:d5:
                    56:69:ca:96:eb:23:13:fd:d7:20:7d:9c:12:b2:6f:
                    91:9b:84:6e:f8:83:ef:d4:6c:f4:9c:a1:18:ab:20:
                    4c:e5:8e:01:53:58:b0:fe:8f:42:19:d6:25:f7:b6:
                    b7:de:80:1b:a1:ce:a3:72:f1:e2:ad:4f:28:32:2a:
                    c3:56:bf:fd:53:3e:3f:43:a9:7a:e0:60:b1:09:76:
                    2a:b7:aa:7d:51:40:fd:07:a1:9b:5e:9d:09:00:a1:
                    90:a4:d3:be:7c:8f:4a:19:94:d9:7f:fd:28:ac:27:
                    74:26:ef:b4:e8:79:64:31:3c:cc:36:bc:54:b2:8f:
                    3d:8d:d2:41:84:fc:82:01:d3:d3:3d:70:2f:37:d6:
                    9f:c9:61:22:29:79:61:54:8f:a7:64:b6:ce:5f:18:
                    f6:42:b9:3d:e1:05:9b:ab:71:9e:29:cb:5d:96:5d:
                    ef:14:03:3a:04:a8:59:73:f3:95:19:a3:53:ed:73:
                    29:4d:c0:61:3d:23:46:fe:c8:ec:a3:2e:07:d1:db:
                    db:ed:22:dc:f6:6c:45:4d:ca:15:78:33:49:93:09:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B4:89:86:03:46:5C:8E:15:DA:8E:15:35:A3:6F:3F:C1:13:9B:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/007d3f4a-691a-47a6-9523-28dc2dbdcb3f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/007d3f4a-691a-47a6-9523-28dc2dbdcb3f/12ff89774599a3b510bac6a3818f3d64e1638997.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.16.0/20
                IPv6:
                  2801:120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27790

    Signature Algorithm: sha256WithRSAEncryption
         6c:5c:7e:f7:a4:f2:86:d4:63:32:8c:81:e9:ca:85:0e:c6:eb:
         eb:d4:26:98:0f:78:29:39:f3:7e:56:a6:04:a3:e0:e8:ac:19:
         b2:03:9e:e9:eb:a4:f4:8e:78:6f:cb:13:28:18:50:fd:72:67:
         de:d1:b7:b8:9f:13:b3:4c:96:20:49:93:a9:45:11:1b:65:75:
         8c:2c:81:15:73:04:d0:67:62:21:44:31:af:0a:88:61:dc:c1:
         01:f7:2a:1b:f8:0b:85:56:39:39:28:f7:6a:a2:3f:da:4e:f5:
         8e:93:6a:f7:d4:73:24:cf:74:f0:e8:98:96:10:c9:3d:77:7d:
         0d:5a:37:28:e4:5f:8d:07:1f:16:39:d3:9a:99:13:41:31:c6:
         06:cb:5d:8e:0d:fc:e0:41:e3:1e:57:f8:0e:35:61:00:96:c4:
         c3:95:e0:58:51:34:69:e6:32:4d:b7:ff:4a:6c:58:6a:06:9c:
         50:5c:4e:b3:0a:03:87:0a:ca:c9:99:06:a7:cf:e7:4d:df:06:
         fd:0b:5f:e7:4f:a7:7a:32:66:ca:ee:90:8e:3a:b8:b9:cc:64:
         6c:30:7f:f7:d7:f7:87:7c:8a:16:f8:7b:fb:2a:75:03:04:48:
         0b:7c:56:fc:46:24:7a:20:33:82:97:22:e2:6b:60:35:16:75:
         72:d7:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----