Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1493cbe50e45cae3fefc4b38bac904681585a59d.cer
File:                     1493cbe50e45cae3fefc4b38bac904681585a59d.cer (raw, json)
Hash identifier:          DXRgmc+zkRd0PzOjkfMCnRaDwjymzpDKLCVrMR99P9M=
Subject key identifier:   21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF055F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/1493cbe50e45cae3fefc4b38bac904681585a59d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:17 +0000
Certificate not after:    Mon 22 Jul 2024 18:13:02 +0000
Subordinate resources:    AS: 264607
                          IP: 138.255.88.0/22
                          IP: 2801:1e8::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15664479 (0xef055f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:17 2017 GMT
            Not After : Jul 22 18:13:02 2024 GMT
        Subject: CN=1493cbe50e45cae3fefc4b38bac904681585a59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:3c:a8:5e:3e:08:9a:7f:81:81:c6:e7:78:
                    c3:d6:8b:4f:b4:97:7b:93:76:ec:8b:39:88:ed:9c:
                    2e:b1:dc:af:ae:5e:12:e3:cc:69:3a:45:4c:c3:e2:
                    6d:5e:59:a1:f8:35:5a:6c:ed:01:13:58:e8:f5:d3:
                    68:21:14:d8:d1:6d:7f:12:33:b6:d8:3c:8e:4c:22:
                    ae:8b:76:b8:3f:db:7f:6c:7e:45:1e:76:e4:08:1c:
                    ba:d1:2a:56:65:55:a0:19:b8:52:99:cf:eb:0a:06:
                    32:e5:79:52:4a:a0:3c:4a:d6:14:82:1b:af:1f:19:
                    e9:4a:d0:9c:5b:5b:e8:66:17:3c:2a:13:b7:3c:df:
                    5e:be:cf:5c:d4:3b:4d:f4:81:0f:91:08:a2:83:be:
                    61:98:36:b7:cb:e7:37:90:ef:2d:03:da:77:46:e8:
                    0d:a9:a2:d8:b8:f7:87:aa:20:48:23:bb:c6:48:9a:
                    7c:67:ae:f1:73:ff:ef:7f:77:8c:c6:d0:cf:e6:85:
                    67:dc:a2:0f:8e:45:5e:97:81:99:a2:dd:a6:41:8a:
                    2c:13:02:15:4e:ca:7b:8f:1f:ed:6f:2f:3b:0b:2c:
                    66:83:70:6d:a2:fb:e8:6e:00:cd:ae:20:88:f2:b5:
                    be:46:47:23:4e:67:85:6a:97:b5:5d:03:f8:b6:88:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/1493cbe50e45cae3fefc4b38bac904681585a59d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.88.0/22
                IPv6:
                  2801:1e8::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264607

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:55:87:3d:32:da:5f:d1:5a:32:a4:c9:8b:4d:59:b4:52:
         54:bf:b6:04:9d:6f:15:bf:85:d5:fa:97:f8:89:e6:52:5c:40:
         d8:89:72:f6:23:18:8d:64:94:02:5a:de:76:fb:ce:98:53:b1:
         8b:dd:1d:37:fe:8c:21:c5:f1:b2:ce:29:74:a7:f1:46:ea:ad:
         e5:b8:b5:57:33:dc:4a:32:81:31:6e:c1:2c:a8:ad:a0:63:ae:
         43:33:d8:15:75:cd:62:cd:1d:b1:43:4a:9a:d7:10:2a:1a:14:
         08:7d:5b:8e:3e:0f:42:29:93:b7:1d:bb:7b:7d:e7:36:19:62:
         95:12:d7:dc:d9:77:92:d6:a5:86:85:28:b2:e0:ee:3d:71:db:
         73:35:22:de:c6:61:86:46:cb:b9:df:df:93:a0:3d:fb:e7:a1:
         53:1e:0f:d9:3d:8b:bf:5d:64:16:be:d6:5b:c1:bb:d8:5a:82:
         cf:4c:fc:59:90:71:3b:b1:ad:f1:04:ff:81:d4:a9:6d:43:3e:
         e0:0f:48:b1:21:d6:44:90:52:99:22:9c:7e:0b:84:1c:64:90:
         d9:5b:f9:aa:10:85:6d:7a:e9:76:fb:3a:d8:8e:c3:39:b6:2b:
         32:6c:70:06:4e:2a:c0:63:9e:69:3b:6f:c6:db:c8:63:2b:4d:
         40:77:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----