Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ca63c865258600a0c7a90dd457403deaf58ae.cer
File:                     2d7ca63c865258600a0c7a90dd457403deaf58ae.cer (raw, json)
Hash identifier:          F2ivcTWYiRri2jxqU/K5XF/oBVMPiQhoVzq3opC5Rnk=
Subject key identifier:   03:5F:D8:5D:7E:3D:12:69:F8:D8:51:61:01:B7:98:B6:3B:BC:9A:81
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCF7EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/2d7ca63c865258600a0c7a90dd457403deaf58ae.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2018 17:28:15 +0000
Certificate not after:    Sat 16 Nov 2024 19:18:25 +0000
Subordinate resources:    AS: 266700
                          IP: 45.230.20.0/24
                          IP: 2801:15:b000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16578542 (0xfcf7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 17:28:15 2018 GMT
            Not After : Nov 16 19:18:25 2024 GMT
        Subject: CN=2d7ca63c865258600a0c7a90dd457403deaf58ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:78:c7:5b:9c:cb:3d:91:f6:3c:9c:09:09:
                    e3:b9:c2:ea:26:00:18:14:3f:4d:4a:46:3a:b9:af:
                    ee:cf:74:7e:16:18:9c:68:e6:3e:d2:b3:45:b6:c6:
                    ba:dc:6f:f8:75:50:c8:94:de:f1:3f:94:13:a1:53:
                    84:77:eb:4d:73:1b:fc:05:02:29:bd:68:84:2e:1c:
                    13:25:54:8c:29:93:6f:b3:f9:68:4f:c0:71:6c:f7:
                    f2:f1:a8:ce:ae:84:db:c4:be:84:b7:08:1e:74:ac:
                    91:d8:3f:53:df:a2:4d:cb:29:37:e2:9b:94:89:f3:
                    a2:30:03:03:ef:59:1a:4c:86:f0:c3:a9:a0:fc:b2:
                    c0:d6:aa:fc:42:e6:70:00:07:86:64:d7:52:92:6a:
                    59:a2:e5:ed:de:5e:dc:92:a6:a1:09:1a:9e:66:e1:
                    cc:7e:e8:73:ed:f5:20:5c:55:6b:ab:c1:09:97:fb:
                    8e:40:4d:f2:5d:e0:ee:f5:82:ca:f9:92:63:0d:e4:
                    e0:6c:70:f3:76:d1:9e:5e:9c:94:23:1c:ed:09:20:
                    95:ef:b9:d5:4e:a7:64:91:70:03:5e:32:5e:e4:3a:
                    6f:eb:81:d3:88:46:9d:9f:f7:7d:18:ac:4a:bb:d1:
                    fa:1c:5a:a4:14:68:b3:ab:e9:9c:d3:97:22:75:ec:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5F:D8:5D:7E:3D:12:69:F8:D8:51:61:01:B7:98:B6:3B:BC:9A:81
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/2d7ca63c865258600a0c7a90dd457403deaf58ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.20.0/24
                IPv6:
                  2801:15:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266700

    Signature Algorithm: sha256WithRSAEncryption
         a7:40:28:96:56:a1:45:31:59:8e:a5:f3:20:47:70:55:63:2b:
         c9:32:0d:a8:ed:05:fc:be:58:33:de:dd:81:a1:37:5f:5d:e3:
         c8:aa:c4:81:74:df:d3:06:3e:b8:86:8b:61:bf:01:6d:8f:13:
         9e:66:52:28:24:a5:07:e0:88:98:8b:17:91:f8:21:3d:3e:a4:
         06:76:ca:16:f9:5e:77:b0:c6:07:5c:06:c6:a3:70:f9:9a:d0:
         9c:b5:17:2a:73:80:55:c6:1c:e2:7d:4c:1a:37:74:9e:c5:f6:
         02:b9:6b:33:f2:27:46:8a:2a:f0:e9:2f:16:72:aa:23:df:7d:
         c3:0a:8d:88:c6:1b:a2:e0:75:04:f6:1c:ae:45:cf:7d:57:fa:
         bd:3d:9d:bd:eb:ee:49:0d:07:0e:b6:fb:42:ed:3c:38:bc:8a:
         2e:07:85:fe:82:39:49:1e:52:c3:66:0d:f5:08:f0:ff:eb:6e:
         45:a4:89:74:eb:96:b2:16:cf:77:94:11:d0:26:fc:3c:47:3a:
         8c:7f:08:25:79:b4:67:99:ef:2b:3c:31:58:38:10:83:4a:aa:
         19:27:de:1d:5b:98:27:b9:9c:20:26:20:d2:03:01:43:85:1c:
         11:46:d2:27:42:56:e4:c4:62:8f:14:7c:e3:3c:38:3e:84:cb:
         e9:27:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----