Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39d529ec40051895e84b93f60d61a5f8c943d1f1.cer
File:                     39d529ec40051895e84b93f60d61a5f8c943d1f1.cer (raw, json)
Hash identifier:          elGVK7F+uJCerDXOw/ZrMEwS/0HlUgYVFJCoCeL5SaM=
Subject key identifier:   6A:AC:76:35:C4:65:7D:E4:BC:EA:2C:76:7B:AD:53:8E:06:1A:C7:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6E9D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/14485751-363b-4853-987e-63acb4ba04d8/39d529ec40051895e84b93f60d61a5f8c943d1f1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/14485751-363b-4853-987e-63acb4ba04d8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Sun 10 Dec 2023 19:54:31 +0000
Subordinate resources:    AS: 265776
                          IP: 190.124.56.0/21
                          IP: 2803:fec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14084568 (0xd6e9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Dec 10 19:54:31 2023 GMT
        Subject: CN=39d529ec40051895e84b93f60d61a5f8c943d1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:23:c6:fd:77:32:11:49:ce:54:7d:17:c5:
                    56:40:85:84:9e:3b:93:4f:a6:14:46:f1:1a:de:bc:
                    59:0f:b1:c2:34:33:51:94:8e:16:2c:a7:73:d7:01:
                    c2:44:5a:eb:88:57:bf:87:22:0a:aa:7c:68:ec:6a:
                    95:21:b3:21:48:6c:2f:62:16:e1:42:5f:d0:80:31:
                    1c:75:57:28:3a:58:87:53:c2:b8:9b:81:d2:0a:26:
                    1b:56:1f:7e:52:05:37:13:12:3d:51:ac:64:a1:e2:
                    fa:bb:de:50:1f:48:0a:87:27:0a:e3:7c:0b:a1:1f:
                    a3:98:c8:bb:e1:48:49:1c:c0:f4:2b:52:a9:31:b5:
                    99:a1:26:4c:54:24:3f:67:87:35:ef:60:40:f8:da:
                    71:60:90:55:b1:1b:61:29:cf:ab:2f:07:57:df:10:
                    fb:ea:70:b4:66:eb:92:4d:dc:dd:10:d0:c4:10:f1:
                    95:f5:c5:29:60:98:c9:a7:29:a6:97:01:74:74:35:
                    e5:da:f0:91:f2:0b:3d:70:71:4d:3d:e4:eb:99:c6:
                    99:ea:84:ad:8c:dc:c7:6b:64:c2:9c:37:b8:db:d9:
                    cf:0f:e3:6e:da:e9:96:ac:d2:8d:e0:86:e1:2b:b4:
                    c1:3f:87:75:bc:1c:27:7a:5b:25:1d:5c:2f:27:73:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:76:35:C4:65:7D:E4:BC:EA:2C:76:7B:AD:53:8E:06:1A:C7:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/14485751-363b-4853-987e-63acb4ba04d8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/14485751-363b-4853-987e-63acb4ba04d8/39d529ec40051895e84b93f60d61a5f8c943d1f1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.56.0/21
                IPv6:
                  2803:fec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265776

    Signature Algorithm: sha256WithRSAEncryption
         43:14:19:4b:c7:02:62:6e:43:33:2d:73:3b:98:16:5e:53:ce:
         58:ff:c8:f0:09:6a:c0:eb:37:a2:80:1d:43:5d:25:5e:58:49:
         80:26:1c:a4:98:7b:18:a0:5b:8f:01:5a:e1:91:e5:3b:04:ca:
         60:7a:f2:66:4d:61:8c:70:e9:31:a6:08:7c:d3:64:ad:51:6b:
         8a:8b:24:d4:2b:e4:4f:07:35:31:50:1f:4d:5b:d1:9e:26:46:
         4d:27:9b:fc:2d:0a:7d:42:39:15:8c:54:df:67:18:6a:56:9a:
         8e:89:bb:e2:95:f2:61:97:33:80:d5:fa:26:42:1a:3d:ed:1c:
         b2:e0:39:16:e9:71:34:24:ef:e2:1b:3c:d1:df:17:bd:69:5a:
         da:1f:56:9a:6e:2e:3d:24:31:8c:9a:76:c8:81:a8:29:ee:40:
         1a:c5:f3:7e:6b:31:cf:5d:a9:bd:50:3e:b3:d9:69:fb:e4:3c:
         b3:0c:a2:9f:ee:17:d8:8f:52:01:92:6e:fa:6f:96:90:de:5f:
         db:0e:33:97:a0:bf:7d:df:72:45:30:1a:9c:b3:22:38:29:4f:
         0d:46:da:23:e9:f2:8c:0b:28:ef:bf:3a:ac:f2:fc:f0:ef:cc:
         90:31:4e:50:f3:4b:9b:c0:7f:48:8c:6a:4d:06:fd:18:df:3a:
         9a:16:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----