Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ef479d2e99493bf75084a7da68717b455912f4c.cer
File:                     1ef479d2e99493bf75084a7da68717b455912f4c.cer (raw, json)
Hash identifier:          gNTqAWDOlM8HK6iPAplqPFMV0X/wxihsvcoCvZ14fWw=
Subject key identifier:   7D:2F:65:BE:E0:34:8A:F8:EF:69:75:87:F3:E2:06:FA:0F:EE:64:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E972B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/1ef479d2e99493bf75084a7da68717b455912f4c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:00 +0000
Certificate not after:    Tue 11 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 52342
                          IP: 186.148.212.0/22
                          IP: 2800:9b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15299248 (0xe972b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:00 2017 GMT
            Not After : Jun 11 06:00:00 2024 GMT
        Subject: CN=1ef479d2e99493bf75084a7da68717b455912f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:ee:aa:66:39:15:35:8d:b6:48:49:1a:14:
                    2a:4e:61:07:07:f8:b2:e8:80:79:59:95:f0:07:88:
                    56:98:64:87:e8:d2:65:3e:ae:19:0f:ea:59:1e:37:
                    fb:a5:2a:05:c1:7d:82:6b:4e:bf:a7:eb:d0:21:4f:
                    04:bf:fb:30:5d:c3:3c:69:93:23:50:05:e4:d2:11:
                    8e:c8:c1:cb:a1:74:03:ae:71:48:b5:40:0e:59:8d:
                    61:4a:5c:e4:3b:e5:77:e4:0c:4e:17:48:1e:e3:c4:
                    9b:ee:88:07:7f:1f:21:10:41:d1:9c:b4:3e:50:e4:
                    8f:5f:14:2a:83:7f:7a:e7:02:17:19:16:fa:f4:47:
                    e2:7a:29:47:c8:2a:16:3b:5c:0e:55:0f:61:69:96:
                    6a:8b:1e:7d:1d:4f:b5:48:ea:cb:a2:18:0b:b9:ae:
                    a1:a5:04:e1:6b:48:e9:2c:c7:fe:6e:e2:33:47:7f:
                    61:c7:2f:0a:fc:4e:42:98:0c:72:37:7f:2b:ae:a6:
                    30:7b:b0:18:d3:4e:1c:f7:d4:8d:73:fa:2d:77:57:
                    32:ed:a4:cd:1c:6d:cd:94:80:af:df:e9:25:c9:61:
                    95:a1:2d:db:d3:41:a9:14:bd:9e:bc:84:89:35:8e:
                    72:d6:e0:46:70:a0:6d:7f:bc:06:9b:0c:47:a8:76:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:65:BE:E0:34:8A:F8:EF:69:75:87:F3:E2:06:FA:0F:EE:64:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/1ef479d2e99493bf75084a7da68717b455912f4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.212.0/22
                IPv6:
                  2800:9b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52342

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:f6:bb:e0:5c:e3:fd:a9:ce:df:ab:8d:3b:99:f3:9b:54:
         95:72:47:be:09:ac:0c:38:7a:8d:0f:43:32:fe:42:b9:89:7e:
         c1:71:53:88:35:b9:94:a9:7c:e5:94:af:fd:82:2d:a9:55:99:
         83:5f:4f:fa:29:31:35:ea:2d:df:66:21:e6:95:5e:ab:30:cb:
         0f:02:bf:e6:c7:22:c6:bf:71:e0:b5:3e:81:e9:27:78:d0:26:
         2b:9b:7e:58:c2:60:8f:bb:30:43:42:27:72:7b:56:38:51:a0:
         4e:8c:a0:07:57:ad:1a:ce:e0:d3:40:68:66:e1:43:d6:f8:fc:
         33:b5:c4:2c:b4:9a:25:8a:fa:a0:0f:d5:2e:3f:1a:55:3c:4a:
         5c:1d:81:a0:db:8e:64:fb:a2:d6:82:4a:43:59:01:ef:e6:3e:
         13:1a:29:f6:4c:f5:cd:a3:bb:9a:3c:cb:22:6a:06:3b:e9:de:
         3b:20:e0:c9:cc:08:99:1a:a9:cf:35:53:a7:b0:8d:20:f5:9d:
         53:8b:bb:9a:46:ae:e0:55:03:a0:5a:8c:38:7f:cc:8d:17:dc:
         a6:85:63:ff:23:61:ff:ea:1f:89:75:56:4e:21:0a:25:02:06:
         db:7b:59:6f:fb:0a:e1:57:61:17:13:48:7e:15:68:8b:74:56:
         3b:74:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----