Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27d771563476f84472c0c6773e18250f9923ed00.cer
File:                     27d771563476f84472c0c6773e18250f9923ed00.cer (raw, json)
Hash identifier:          hKCQdMSIQiU46Yue0p5KB9elrHTk0N3h3nez/06h0k8=
Subject key identifier:   21:12:3A:78:DA:A4:40:DB:ED:91:44:30:46:52:86:0C:B5:7F:82:3C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFDD3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/27d771563476f84472c0c6773e18250f9923ed00.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:35 +0000
Certificate not after:    Sun 28 Jul 2024 23:17:58 +0000
Subordinate resources:    AS: 265694
                          IP: 170.78.136.0/22
                          IP: 2803:58c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15719743 (0xefdd3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:35 2017 GMT
            Not After : Jul 28 23:17:58 2024 GMT
        Subject: CN=27d771563476f84472c0c6773e18250f9923ed00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:bc:e6:ac:4f:36:f3:cf:d6:75:07:27:ca:
                    d8:d2:b1:39:6e:5c:17:f6:1d:b6:3b:14:a2:c3:27:
                    6f:57:cd:20:62:42:0d:f5:d1:32:48:a2:6a:65:33:
                    95:ab:38:01:d0:b0:20:68:fa:41:fe:d8:8b:e7:8c:
                    1c:89:c6:91:ce:c2:c2:35:a5:65:df:c3:0d:0e:c0:
                    d6:8f:3d:3b:77:78:aa:7d:fb:de:d3:63:07:91:65:
                    c6:77:29:da:47:16:44:e2:79:b3:43:68:5c:91:c2:
                    83:16:82:60:c9:d6:32:ef:23:80:69:a2:2e:4b:c3:
                    45:51:69:8f:d6:be:4f:d5:92:92:fa:49:47:ad:06:
                    89:28:ca:4b:b4:4e:74:4f:6f:6a:8c:fa:5e:40:47:
                    2d:4b:49:30:b4:ea:bd:97:85:67:43:c7:30:07:9e:
                    11:42:2a:3a:39:be:08:58:b2:4c:1d:ae:08:9c:05:
                    8a:43:4e:b2:5b:9c:8f:42:a0:ea:18:a5:fa:e5:dd:
                    78:e7:8c:e4:49:a3:b9:44:78:0a:05:e6:9a:b7:a4:
                    54:0f:50:22:b7:82:24:b9:9c:6e:cf:14:69:2f:bc:
                    1b:31:e6:cb:42:e4:62:15:7c:d6:50:47:05:81:b5:
                    a3:a8:61:32:2d:d6:cc:69:e7:c8:d1:37:44:a3:6b:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:12:3A:78:DA:A4:40:DB:ED:91:44:30:46:52:86:0C:B5:7F:82:3C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/27d771563476f84472c0c6773e18250f9923ed00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.136.0/22
                IPv6:
                  2803:58c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265694

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:4c:83:0a:41:61:00:86:57:4c:1d:b5:31:fc:2e:a8:c1:
         81:d3:55:73:69:f0:30:67:7b:78:2e:68:80:a5:91:64:61:98:
         b0:ca:a9:71:76:95:75:18:4a:d0:40:c8:b6:e8:f7:43:0a:fb:
         f6:87:b8:fc:0d:49:4e:07:40:36:39:d1:c9:6e:44:fe:90:9f:
         74:7e:82:c0:82:d3:89:5b:88:a7:ad:58:02:70:b6:07:9b:e1:
         b8:5d:20:0c:28:ab:c6:97:9a:af:59:9b:aa:bd:af:9e:ef:d0:
         38:52:7c:0e:d1:c5:57:df:bf:f9:3a:3d:06:fd:a5:5b:3d:c6:
         dd:1d:aa:96:da:81:3b:97:7a:58:e2:9d:62:ba:a1:32:7c:ae:
         06:e3:be:12:1f:a6:fc:c8:56:04:80:e4:73:5b:16:a9:70:30:
         17:59:24:fa:08:a7:d5:7e:27:06:d9:5b:fd:4c:a1:54:c2:66:
         e7:a6:a2:e1:64:bd:91:43:10:ad:60:4e:6a:61:cd:7b:2b:fc:
         10:4d:2e:0c:05:58:7e:c9:d5:2b:d8:3e:39:bc:b8:da:09:e4:
         5f:4a:b8:04:f5:08:3a:06:59:24:29:c9:b5:b5:a6:ee:6e:1c:
         a1:38:c3:4f:82:25:b2:36:c5:f0:45:6b:99:09:88:a0:8d:1b:
         2f:ba:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----