Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ef5960d1a1653e9afb4b92c680fec5a4cff418.cer
File:                     15ef5960d1a1653e9afb4b92c680fec5a4cff418.cer (raw, json)
Hash identifier:          +2o5wQFfQtzC31FrubPn+AffE+lnRR/jNueK6xgqfaM=
Subject key identifier:   5F:EB:71:D9:E1:FE:32:9D:1B:31:E9:4A:83:C5:E8:B3:B1:A8:36:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA1758
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/15ef5960d1a1653e9afb4b92c680fec5a4cff418.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Mon 17 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 265794
                          IP: 192.141.40.0/22
                          IP: 2803:e020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15341400 (0xea1758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Jun 17 06:00:00 2024 GMT
        Subject: CN=15ef5960d1a1653e9afb4b92c680fec5a4cff418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:69:a0:c1:15:16:8b:b2:5e:36:70:52:21:
                    54:bb:e9:a1:9c:f6:07:a4:e1:8e:79:80:ac:0b:a6:
                    cc:50:a5:34:a9:fc:7e:2e:3e:3f:f7:13:16:08:a2:
                    1c:54:9c:5a:ec:07:dc:e5:99:fe:3b:fc:c5:ab:e6:
                    df:88:e1:c4:bf:84:89:8e:40:a8:a9:63:35:6c:cc:
                    70:f4:4a:ab:c2:60:6b:bd:98:9c:02:54:e9:e6:ce:
                    c1:8c:0b:ad:51:aa:58:be:99:42:fe:56:22:df:20:
                    fb:90:7e:c3:c4:5d:c3:e7:02:84:03:be:07:0f:8f:
                    c7:fc:7f:22:f5:51:a7:67:29:3a:e5:c6:d6:5b:be:
                    eb:4c:80:fb:32:55:56:11:a7:f7:8f:1d:db:eb:13:
                    06:fb:62:6d:9a:96:00:2b:88:08:68:37:db:ae:aa:
                    eb:ec:51:47:ab:c0:96:a1:4c:4c:22:d8:87:2f:72:
                    3d:0c:ad:95:3f:92:25:62:3f:3f:e6:bf:de:e2:35:
                    60:52:aa:e3:6c:11:08:d8:32:3c:16:17:91:ae:bf:
                    1f:7a:af:9c:10:bb:b7:24:39:65:4e:e1:8c:e9:39:
                    a0:04:64:d5:1a:b8:3f:2c:b8:81:21:bb:3a:87:2d:
                    61:5c:a7:92:5e:0e:13:82:89:1c:be:83:90:d0:fd:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:71:D9:E1:FE:32:9D:1B:31:E9:4A:83:C5:E8:B3:B1:A8:36:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/15ef5960d1a1653e9afb4b92c680fec5a4cff418.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.40.0/22
                IPv6:
                  2803:e020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265794

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:7d:d3:82:31:79:5a:e2:69:81:4f:ae:e5:02:a3:57:c6:
         6c:32:31:65:46:9b:2b:e8:c1:78:77:99:21:a0:b1:09:82:4f:
         e9:1f:e3:a2:26:d8:46:d1:08:4d:bd:78:db:e0:69:11:a7:58:
         90:ae:25:cd:23:c8:2a:57:2a:54:3f:8c:30:96:bc:aa:16:15:
         ce:45:86:a5:3d:18:a3:d1:a8:de:8c:e5:6c:55:27:fe:20:b1:
         f1:d8:66:80:75:e1:d7:df:70:e6:33:15:7c:2a:4c:af:f9:2f:
         a7:5a:9b:a0:1e:b5:af:e2:1e:0d:a8:ca:0f:26:1a:e8:47:7e:
         f3:e7:d0:68:c3:d3:1a:3a:53:86:83:39:c1:02:96:e6:b2:e9:
         e6:ec:e7:88:c5:f2:fb:c8:b9:cb:9e:3d:90:42:81:68:6b:91:
         b3:35:1e:87:30:de:4a:70:02:77:c5:dd:0b:97:3f:ca:af:c0:
         c8:36:a8:08:ec:d7:1f:48:ed:87:5e:66:d3:17:d3:2e:3b:de:
         49:e2:ba:92:aa:cd:28:bb:d3:4c:4d:1a:7a:db:0d:6b:5a:af:
         d8:75:25:67:67:4c:40:5e:18:2b:fc:51:8d:14:6f:e4:ba:af:
         91:23:2e:ee:71:30:21:f4:97:9a:21:94:dc:a9:84:87:89:9b:
         27:a3:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----