Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f2a0ca8267dbf08de8a3e999ed1c95b72cc9849.cer
File:                     3f2a0ca8267dbf08de8a3e999ed1c95b72cc9849.cer (raw, json)
Hash identifier:          92WfnoulhQRaia/PazKbSIC8CGEPyEIm0AXJWycR93k=
Subject key identifier:   C7:5F:F8:45:5D:67:60:AD:EE:70:04:B7:8B:0C:CD:1E:39:B4:DE:F0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBBADB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ff29c32b-65f6-490a-af32-7c2ba2d0adfb/3f2a0ca8267dbf08de8a3e999ed1c95b72cc9849.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ff29c32b-65f6-490a-af32-7c2ba2d0adfb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Sat 02 Nov 2024 20:23:49 +0000
Subordinate resources:    AS: 263202
                          IP: 138.121.156.0/22
                          IP: 179.61.112.0/20
                          IP: 2803:bc80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16497371 (0xfbbadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Nov  2 20:23:49 2024 GMT
        Subject: CN=3f2a0ca8267dbf08de8a3e999ed1c95b72cc9849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:d0:7b:15:4c:87:d0:62:98:d9:e4:34:11:
                    d9:32:1d:67:96:b0:5f:d6:fb:a8:06:78:d3:97:6a:
                    f2:77:7a:09:78:b1:8a:0c:b0:01:7c:f3:23:24:55:
                    8a:62:11:cb:d9:15:27:fa:79:90:a1:79:e8:98:4f:
                    ed:0f:a4:0a:40:b5:1a:de:82:b5:ec:7d:d9:96:a2:
                    c6:fe:eb:a2:98:87:52:0c:d6:93:1f:ce:be:8a:93:
                    b1:94:95:54:22:64:d1:d7:42:37:f2:ac:f7:e7:97:
                    30:19:2f:02:01:98:fc:d5:1b:58:5b:57:c2:ef:d1:
                    30:9b:1a:f8:6e:29:b1:86:89:59:f2:23:80:ef:52:
                    2d:0a:3c:45:36:05:71:e1:9e:20:c6:02:d2:2a:dd:
                    ba:3c:bd:c3:c7:38:31:6f:f3:80:56:6c:91:07:55:
                    f2:99:6e:9d:6f:80:bd:b6:1d:9b:f5:b7:b5:4c:64:
                    9d:ed:f0:9a:f3:de:ca:09:9c:23:bd:6c:f7:3f:29:
                    c2:0f:fb:ef:f5:2e:2d:28:0a:72:7d:d5:89:5d:fa:
                    97:06:b1:2a:ef:90:a9:ae:66:05:8a:ac:a7:24:89:
                    34:69:8f:57:80:56:2d:42:c8:74:b5:12:d6:50:5a:
                    d9:0c:89:90:89:2a:5c:9e:3a:f8:37:5f:ff:a6:12:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5F:F8:45:5D:67:60:AD:EE:70:04:B7:8B:0C:CD:1E:39:B4:DE:F0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ff29c32b-65f6-490a-af32-7c2ba2d0adfb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ff29c32b-65f6-490a-af32-7c2ba2d0adfb/3f2a0ca8267dbf08de8a3e999ed1c95b72cc9849.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.156.0/22
                  179.61.112.0/20
                IPv6:
                  2803:bc80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263202

    Signature Algorithm: sha256WithRSAEncryption
         67:7a:35:fb:fd:50:5c:6f:1c:29:ee:5d:68:09:b6:53:24:79:
         bf:21:63:d7:6f:3e:06:8d:f5:d6:33:c2:8b:00:6c:59:1a:c8:
         06:30:b3:10:5d:ed:4f:e1:26:64:21:0b:c8:37:2b:85:71:c2:
         59:93:42:42:26:59:b6:01:45:5a:1f:c0:06:78:e7:28:b3:1b:
         0d:24:f2:33:04:61:b2:9c:e7:67:f9:0a:b4:bf:96:0c:8a:6b:
         75:68:89:ad:bb:fc:ed:30:36:fe:a8:d6:8e:8c:bd:35:6b:fb:
         08:6e:c7:7b:21:e9:82:b5:3e:eb:76:de:8d:01:a8:54:2a:f0:
         ea:6d:36:e7:68:0d:49:ab:53:45:09:ea:67:97:2e:92:06:21:
         1d:1f:35:a7:f5:58:82:20:3a:5c:e9:fb:5e:8d:2a:f4:67:54:
         a7:90:5c:20:ed:79:5c:e2:7f:1a:bb:63:b2:16:b8:84:14:d9:
         d1:60:f6:8c:0e:69:21:fc:f7:77:a3:e1:2c:fa:53:d7:77:dd:
         88:09:ba:b5:35:7e:af:5a:b9:cd:97:39:67:ed:5e:57:7e:fb:
         d0:9a:67:61:7c:dc:67:08:06:cb:7e:b5:82:47:7c:bd:70:82:
         01:7f:de:42:2f:b4:a9:d5:10:8f:2b:39:fd:a0:fb:d1:0c:a7:
         2e:63:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----