Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39073eec304c8ab3529f304e195b5403c9a33b05.cer
File:                     39073eec304c8ab3529f304e195b5403c9a33b05.cer (raw, json)
Hash identifier:          ND+5drwsKQvRlcRtPnFhnfRFNK9RjfDodKPCn3VejL4=
Subject key identifier:   17:98:67:57:43:99:C5:89:E5:EF:72:DD:79:F2:CA:2F:FE:41:B7:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4928A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/39073eec304c8ab3529f304e195b5403c9a33b05.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Nov 2018 20:00:37 +0000
Certificate not after:    Sat 11 May 2024 14:29:16 +0000
Subordinate resources:    AS: 265768
                          IP: 131.196.0.0/22
                          IP: 2803:a7c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14979722 (0xe4928a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 27 20:00:37 2018 GMT
            Not After : May 11 14:29:16 2024 GMT
        Subject: CN=39073eec304c8ab3529f304e195b5403c9a33b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:33:ff:db:44:cc:5a:00:49:cc:8d:5f:9a:
                    ce:0a:ef:43:fd:b9:b1:dc:3a:92:ef:0d:75:b3:d4:
                    d8:80:ff:1b:95:f7:1d:27:59:42:96:75:cf:a3:66:
                    56:69:94:a8:d7:97:97:c4:b4:1c:1c:14:37:1a:6c:
                    36:91:5c:9e:a2:d5:04:c2:1b:a2:8e:6f:22:ff:ca:
                    16:0d:14:ef:c1:cd:ca:f6:40:57:26:7e:0e:9d:53:
                    3d:85:c2:d3:61:21:4f:9f:db:b7:8b:5b:34:15:42:
                    86:d5:c0:46:ff:3f:d8:69:8f:b1:86:35:dd:41:2c:
                    43:dd:fa:27:22:f0:24:e3:79:31:b6:72:ce:37:6b:
                    05:72:16:b8:81:84:ed:de:8c:6a:c5:32:30:c7:e4:
                    9c:c2:f8:57:41:55:35:93:fc:08:c3:cb:1f:27:9b:
                    39:b5:46:98:59:1e:4b:a1:f5:30:61:80:ea:23:58:
                    43:14:4a:32:3d:b3:2c:39:9d:ce:aa:93:bd:ce:1c:
                    27:59:bf:3d:14:08:30:ec:d9:95:3b:ff:df:38:99:
                    3f:55:d6:e4:d9:9b:7c:b9:a3:c2:fc:48:e2:ca:dc:
                    ac:2e:12:c4:9c:6b:1b:fe:2e:33:eb:88:42:e3:76:
                    ce:d3:80:27:57:9b:93:c3:46:0d:0b:16:49:0a:eb:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:98:67:57:43:99:C5:89:E5:EF:72:DD:79:F2:CA:2F:FE:41:B7:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/39073eec304c8ab3529f304e195b5403c9a33b05.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.0.0/22
                IPv6:
                  2803:a7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265768

    Signature Algorithm: sha256WithRSAEncryption
         4c:d1:be:bd:bb:18:3d:6a:6f:ac:3d:77:2b:64:2f:30:99:16:
         9d:be:80:85:c1:e3:63:86:c2:1a:88:b4:05:14:6f:d6:80:77:
         58:93:ff:76:6f:64:e8:9a:de:45:6e:cd:b7:62:d6:8d:21:dd:
         97:63:47:a3:9e:74:fe:54:1a:cf:c2:9f:a6:88:8a:24:41:63:
         8c:60:d3:df:66:96:dd:5f:73:ad:44:f4:c2:fb:b0:2b:81:89:
         24:d2:32:cb:d4:1d:f8:d9:18:b0:f6:d8:e6:ff:a6:b6:8f:bb:
         8d:2f:dd:54:4e:ba:3b:e8:0a:7a:0f:25:4c:63:31:c3:e7:a9:
         f1:bd:d4:72:39:ec:50:9c:1b:6f:74:3e:c0:08:b0:61:51:54:
         72:0e:bc:c3:b8:e1:7c:87:c0:de:46:6f:6a:53:1f:66:4a:14:
         12:3c:2e:4b:73:11:25:76:45:39:62:93:e3:5a:b5:7f:3c:e0:
         1d:a1:e7:51:7b:c3:42:f9:3d:31:ef:0c:5a:91:34:e9:8b:7c:
         58:22:fa:9a:50:12:4d:20:43:88:0b:47:2a:b7:ea:97:b3:fb:
         d6:69:93:33:01:2d:03:69:d2:2a:5c:f5:9b:ab:4c:e7:8d:62:
         9e:3e:81:31:36:bb:3a:b8:34:8c:b7:d9:a2:da:48:c4:5d:33:
         4d:27:9d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----