Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
File:                     2bee98b52bf99165b867835f5390295e9317bb56.cer (raw, json)
Hash identifier:          AaOsQ5lTzzHVs0Z7VfKMTYz5kzDsfI2m4l0nRusTTns=
Subject key identifier:   87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBCC8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:46 +0000
Certificate not after:    Sun 03 Nov 2024 15:11:05 +0000
Subordinate resources:    AS: 266841
                          IP: 170.83.76.0/22
                          IP: 2803:52c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16501901 (0xfbcc8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:46 2017 GMT
            Not After : Nov  3 15:11:05 2024 GMT
        Subject: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:3d:0c:cf:d8:12:ef:c6:d8:eb:08:8e:78:
                    75:9a:42:ed:21:ca:78:40:86:0b:f4:11:be:3e:fe:
                    ad:31:d7:d8:dc:51:56:d6:14:2f:a4:a2:5f:ad:8b:
                    9b:1e:9a:32:44:93:fa:ac:96:8a:04:86:6e:cd:28:
                    86:e0:dd:12:63:d2:0e:10:c8:bd:23:1f:8f:a8:7d:
                    8a:3e:c3:9a:d8:ea:3f:62:7d:19:67:3b:b3:0d:24:
                    f1:11:2a:69:02:dc:e4:a2:61:90:20:dd:bf:4f:38:
                    4a:23:a2:00:90:ac:63:c7:ac:9a:7d:ef:89:50:df:
                    63:a1:37:7e:a7:93:1b:a6:34:a9:07:48:6a:ef:6e:
                    41:55:4d:14:d3:26:a0:60:22:e8:bb:bd:fa:6a:64:
                    01:68:3e:eb:2f:2c:6d:d5:4f:8f:f1:30:7c:fd:1b:
                    91:8e:f1:db:62:9a:d7:3f:dd:b0:0e:8a:88:12:55:
                    7c:65:f6:e0:7e:af:6b:6a:cb:1b:99:cf:3d:33:95:
                    c8:b6:60:f5:5f:b6:ef:45:e1:13:72:16:3d:09:ff:
                    12:9c:5c:3d:0e:58:6f:95:ab:ed:44:52:ac:4f:5d:
                    43:c6:b1:b2:4d:c4:bd:39:be:34:5c:3d:96:b1:09:
                    cc:cd:48:89:cd:c7:92:c0:49:b5:85:c9:7c:13:29:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.76.0/22
                IPv6:
                  2803:52c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266841

    Signature Algorithm: sha256WithRSAEncryption
         b6:78:b7:5c:1c:a8:3a:8b:d2:3e:59:e4:de:94:02:4d:53:66:
         6d:13:4c:3e:05:e9:91:04:08:94:f2:42:0a:0e:1f:ac:be:9d:
         01:d4:5d:68:99:05:4f:38:85:b7:10:c7:36:c0:38:3c:8e:b2:
         30:2f:0f:71:66:e9:91:1a:3d:32:ad:af:42:0c:7e:38:96:ad:
         d5:fd:7b:45:cb:43:ef:4d:e8:ca:ff:be:29:df:33:85:3c:ad:
         0f:ea:45:db:50:9c:a8:57:41:ab:a2:f1:9c:ef:16:d1:9a:16:
         19:9c:12:78:41:2c:14:fd:6c:cf:60:11:ac:56:28:32:a1:7f:
         b9:54:a3:77:e8:f2:78:12:4a:8a:39:3b:c3:6a:d2:b9:c0:e8:
         ed:db:6d:df:2e:20:ed:52:b3:3b:55:5d:df:aa:a1:6a:d1:90:
         d7:a1:63:fb:b2:29:58:60:7c:e0:e9:df:1f:9c:81:66:e9:ed:
         f9:a7:1a:c1:d4:6e:bf:9d:28:2e:f5:e9:12:d8:05:f0:fd:85:
         13:6d:c9:d4:91:9f:39:fb:78:bb:f3:fb:ac:7d:86:6e:2f:16:
         4b:e8:cd:55:13:f0:5a:3e:4b:96:1a:ec:bc:4e:13:b6:84:fe:
         d3:8d:d9:74:d3:dd:71:05:3b:b4:53:0e:ef:f4:1a:55:c5:98:
         4d:c5:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----