Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30f90efd4f665f660016ee07b02e301c5abbad8d.cer
File:                     30f90efd4f665f660016ee07b02e301c5abbad8d.cer (raw, json)
Hash identifier:          q4XYsJvY+xXKHerSYpKm7nTNtstMlkzAEBeem4TaDBE=
Subject key identifier:   35:E3:6C:D8:7D:CE:DB:F9:B2:5C:84:9C:75:88:0F:6F:CE:AF:A2:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DAF997
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0579818d-e9b6-40a8-8893-993378e28503/30f90efd4f665f660016ee07b02e301c5abbad8d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0579818d-e9b6-40a8-8893-993378e28503/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:40 +0000
Certificate not after:    Tue 30 Jan 2024 18:08:22 +0000
Subordinate resources:    AS: 264708
                          IP: 168.228.56.0/22
                          IP: 2803:c340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14350743 (0xdaf997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:40 2017 GMT
            Not After : Jan 30 18:08:22 2024 GMT
        Subject: CN=30f90efd4f665f660016ee07b02e301c5abbad8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:e9:61:4a:f9:2f:0c:98:2d:c4:d4:19:35:
                    27:9f:8a:32:58:0d:56:93:d6:75:c8:7c:89:eb:13:
                    1f:6a:ea:32:67:7e:1c:2a:d7:5e:fc:a6:c0:1a:b9:
                    65:e8:ef:3d:8d:6f:54:8a:b4:56:bd:7c:2f:33:ed:
                    99:59:09:dd:22:2e:84:f8:29:73:ff:09:17:08:aa:
                    c8:98:25:32:e5:83:24:0f:1a:7e:4d:c7:84:18:32:
                    2e:0d:02:c1:69:70:ce:25:70:e3:bd:9e:e0:cf:21:
                    bd:66:bd:8d:c2:0d:a7:ff:7f:43:ef:8a:d1:59:dc:
                    9b:09:21:a9:57:d5:e2:d8:b4:93:f4:27:e6:fc:41:
                    a9:e0:5f:c8:2c:5b:87:a7:57:27:35:12:1f:92:7d:
                    57:9f:b0:da:06:4f:e7:26:cc:a0:d4:54:43:07:9a:
                    99:e9:8c:93:1c:cc:8d:66:94:93:f4:7a:d4:fe:8c:
                    ac:06:24:d2:59:09:87:71:ca:03:b3:a8:cf:f2:e2:
                    25:b2:0c:fc:ab:4a:4f:77:bb:ea:8a:37:0a:79:f7:
                    92:4d:10:78:76:e7:63:86:40:6b:e2:7b:db:ca:67:
                    c8:11:ae:f9:3b:3f:77:d8:57:f9:0a:6f:33:df:65:
                    24:67:65:3f:d3:b9:26:a8:45:50:63:93:93:65:bf:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E3:6C:D8:7D:CE:DB:F9:B2:5C:84:9C:75:88:0F:6F:CE:AF:A2:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0579818d-e9b6-40a8-8893-993378e28503/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0579818d-e9b6-40a8-8893-993378e28503/30f90efd4f665f660016ee07b02e301c5abbad8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.56.0/22
                IPv6:
                  2803:c340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264708

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:83:d4:f8:12:50:e0:61:d1:61:bf:f4:23:d0:c0:ef:e9:
         73:14:d1:9e:2a:a3:9c:bd:9a:0d:ea:75:e3:ee:f3:0a:ed:ab:
         dd:8b:31:49:2d:ce:12:77:c9:05:41:05:55:a1:af:5e:6e:46:
         41:ca:32:0b:1a:e6:04:5e:44:e0:ee:6c:3e:d5:d2:12:1e:6d:
         34:c8:82:c7:69:a0:bf:cd:2e:1e:8e:b5:69:7a:73:ad:99:e0:
         1d:3f:ed:6f:49:33:59:c0:96:76:cd:ed:27:2d:d3:56:22:a9:
         b4:13:19:ea:c6:29:ec:1e:7f:b6:ad:5c:e3:23:88:7f:96:7a:
         95:ed:eb:91:eb:8d:85:6b:26:53:b2:c2:a4:2c:3d:95:eb:13:
         2c:bd:29:2b:a7:09:73:92:ac:c9:5a:5f:28:c3:b7:6f:87:72:
         1c:5c:8a:0b:2c:00:e6:2a:f4:d5:a5:09:ca:8c:19:e9:b8:88:
         99:e5:69:12:30:70:3e:71:0c:8c:54:6b:17:b2:42:16:32:44:
         26:b7:84:6a:6a:9e:a0:22:2f:42:01:6d:71:6d:37:3b:38:28:
         d5:bf:ac:47:fc:ba:b8:92:04:e2:5e:4f:c2:7f:84:2e:ba:c0:
         2b:8a:ff:5e:ab:c9:7d:0f:67:9a:6c:a8:21:45:ff:4f:93:cb:
         a3:0b:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----