Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ef571adb012b3671bada59a339d19495e1bafe3.cer
File:                     2ef571adb012b3671bada59a339d19495e1bafe3.cer (raw, json)
Hash identifier:          AE3VRIyQwVWpcB8hLCTIw6CMqWnq5ScLsbxdqF1r8VE=
Subject key identifier:   0F:66:0E:39:86:10:B3:91:A1:CC:B8:3C:4F:0E:3E:7B:A2:D8:E9:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7EA4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/2ef571adb012b3671bada59a339d19495e1bafe3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:44 +0000
Certificate not after:    Sat 01 Jun 2024 17:22:51 +0000
Subordinate resources:    AS: 61475
                          IP: 201.131.41.0/24
                          IP: 2801:19:a000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15198795 (0xe7ea4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:44 2017 GMT
            Not After : Jun  1 17:22:51 2024 GMT
        Subject: CN=2ef571adb012b3671bada59a339d19495e1bafe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:f1:f7:5a:f8:10:d8:22:e8:c1:4f:bd:f6:
                    fc:3e:3c:0e:d0:53:7d:09:d5:50:26:80:8f:48:d1:
                    fb:15:95:aa:17:53:fb:d9:31:6e:c4:e9:ea:7e:2d:
                    a0:dc:c5:fb:45:5a:9a:e7:27:ff:f7:25:69:4b:fa:
                    31:60:b2:c3:49:1f:a5:19:82:e3:08:c2:67:bf:a7:
                    bf:36:1a:03:61:9c:b5:e8:32:f1:67:be:35:d7:7d:
                    05:9d:11:3b:49:30:00:16:c6:ae:c1:60:76:c8:69:
                    14:d9:5d:0e:f6:ad:f0:6c:32:77:47:51:1d:4e:8e:
                    b8:12:09:d3:ff:98:09:75:e2:40:1c:7a:49:51:ad:
                    c8:a8:83:bb:49:bb:7f:6c:41:61:2b:a2:7e:8b:58:
                    b7:a2:49:f2:23:10:cf:e8:18:70:fb:c1:87:fb:17:
                    47:ef:69:79:27:21:77:5c:2c:a5:e0:20:24:4d:65:
                    27:28:30:48:e4:c2:58:05:e0:0d:70:25:86:80:11:
                    e2:96:86:7b:97:8e:0f:48:15:34:ef:e7:48:6c:50:
                    5e:2d:1f:fa:78:97:da:50:f2:74:f3:f9:d9:df:c2:
                    b1:1b:c6:d2:d7:c1:31:a6:c6:bd:90:1e:fc:f3:16:
                    6c:3b:9f:f2:fb:92:bf:33:93:04:3e:36:f9:55:63:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:66:0E:39:86:10:B3:91:A1:CC:B8:3C:4F:0E:3E:7B:A2:D8:E9:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/2ef571adb012b3671bada59a339d19495e1bafe3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.41.0/24
                IPv6:
                  2801:19:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61475

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:b9:bf:ef:d9:6e:82:11:7a:f2:ad:6d:a4:be:b8:6e:cf:
         32:e9:ad:2f:1f:33:4a:25:c9:fd:a4:62:4b:3b:ce:99:5b:93:
         99:86:32:a0:46:75:9a:da:60:4a:ab:5d:8f:9e:c1:56:d0:cc:
         24:b9:71:5e:bf:b3:7d:1e:95:28:61:dd:94:03:e9:e0:4a:58:
         e8:dd:1a:2c:5e:09:ed:c0:36:7c:9f:48:37:ba:84:34:36:23:
         ed:75:16:fd:05:d5:e2:0c:b2:5d:69:aa:25:be:38:7e:1e:a3:
         8e:7d:10:3d:c7:6a:c9:64:9a:ad:37:a3:30:8d:6d:0d:a4:a2:
         22:1b:c2:05:d7:b0:65:de:d7:7d:a6:3c:40:87:52:3f:c8:d3:
         32:d1:38:0f:f9:64:ea:09:30:07:1d:78:7d:aa:b5:82:59:73:
         3b:19:ec:50:c3:f0:12:8b:e9:c8:5b:89:ea:51:6e:67:32:8a:
         72:63:e3:82:92:ee:13:92:01:00:75:3c:27:37:f7:7c:c6:d7:
         81:53:4a:b7:96:45:f6:d4:ae:35:af:1b:3d:eb:21:b0:b2:3c:
         bc:c4:7d:1f:b3:71:68:88:75:0d:84:8a:4c:4d:fc:fb:9f:86:
         1b:cb:11:1d:93:a7:9e:c1:ab:14:af:cf:3c:87:0a:e6:b7:e0:
         90:f7:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----