Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer
File:                     2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer (raw, json)
Hash identifier:          NcPvwSL88oih0wUnsPb0fJXpRHZYO1sqI0nm/3f4LWY=
Subject key identifier:   8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CA111E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/2530e9633e4c0fd319edd31c24cbda0c0b19490c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:30 +0000
Certificate not after:    Tue 19 Mar 2024 23:17:10 +0000
Subordinate resources:    AS: 263770
                          IP: 138.118.144.0/22
                          IP: 2803:3840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13242654 (0xca111e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:30 2017 GMT
            Not After : Mar 19 23:17:10 2024 GMT
        Subject: CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fb:f0:49:d6:cb:c6:aa:3a:19:f8:45:03:93:
                    cd:a9:2a:5a:e8:81:ac:88:d5:be:e9:2b:9d:28:4c:
                    83:a7:53:7a:fa:16:e2:6f:cf:ee:1b:58:70:4d:1a:
                    9b:29:63:98:b4:f5:6d:f2:26:e0:22:63:14:5f:9e:
                    97:61:4d:a7:96:17:c1:88:00:07:5d:bf:13:ac:04:
                    88:55:36:a9:fa:5b:4f:71:76:a0:1c:36:37:03:46:
                    2e:fb:39:6f:76:fd:4c:88:84:84:cb:6f:f0:24:d8:
                    77:bb:e1:a2:df:78:ba:c8:5e:73:2d:b1:27:4d:b8:
                    5e:48:a3:de:4c:6f:53:c7:b9:73:49:ae:da:2c:7e:
                    69:9a:7e:ec:f2:8b:f8:4e:1c:df:cb:07:b0:54:ce:
                    75:2f:91:01:66:26:ae:9f:86:d5:6b:9c:99:32:fe:
                    3f:c2:82:3a:9c:b8:c9:f1:89:4c:cb:37:8b:f8:8d:
                    45:17:f8:4d:2b:84:44:62:09:2a:e0:41:e2:6c:81:
                    37:3e:8f:e9:3d:10:5e:4a:d2:0a:e5:a9:d2:70:2f:
                    7b:a0:81:04:4e:6f:f3:7e:0c:41:a6:9b:af:09:3b:
                    ec:69:ec:1c:12:0d:08:7e:6d:77:48:30:16:4d:b7:
                    b2:58:2d:f5:65:4e:d3:b2:b3:85:88:10:2e:94:9b:
                    f6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/2530e9633e4c0fd319edd31c24cbda0c0b19490c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.144.0/22
                IPv6:
                  2803:3840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263770

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:b9:4b:f5:21:e3:f6:b1:57:f0:c0:5e:f4:2b:65:92:2c:
         97:1d:89:5e:ba:23:b2:cd:da:3e:60:bf:f5:27:c4:8e:44:c2:
         5b:e1:31:42:f5:92:ec:c2:69:5c:79:4e:4d:3b:54:70:bf:21:
         00:8a:f5:6a:bc:80:6d:9b:53:ba:6e:16:ab:1b:6a:86:8f:52:
         b7:dd:e0:c8:b0:3e:34:d2:38:7e:22:19:c6:65:11:4d:b4:e0:
         67:29:e0:76:f5:f5:c6:b3:03:ad:c0:f8:32:2d:88:9e:7c:4f:
         66:0f:0a:0d:25:1f:fb:5e:3b:54:2c:ad:b0:d1:f1:01:d4:54:
         5d:fd:91:3d:34:51:86:1a:7c:81:51:05:ed:d4:13:f0:f3:a9:
         b4:b1:39:e9:e8:b0:5d:c2:35:0a:a8:dd:34:31:47:34:07:be:
         6e:45:f7:17:f9:f4:f2:ac:64:28:70:e4:7c:7f:bc:12:94:84:
         93:17:51:3b:4f:85:b4:a0:3f:97:67:09:80:40:fa:a6:50:48:
         2e:4f:d7:6e:37:fd:ad:56:2b:de:21:8d:33:48:aa:68:42:47:
         bb:4e:59:6e:e7:90:8b:d2:ec:ed:e7:8a:9d:5b:d5:17:c5:4f:
         29:18:4e:d4:ef:d2:d3:e1:df:53:2a:f0:45:8d:0d:d2:3f:04:
         ec:45:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----