Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer
File:                     42479c80014a47a7803e1ff86f78d4c83197ce2d.cer (raw, json)
Hash identifier:          0xPBab48qkVXKTxbXcTTlfFQvWVT6u9KUR7mX6yrPVc=
Subject key identifier:   CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFAB84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/42479c80014a47a7803e1ff86f78d4c83197ce2d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Tue 26 Mar 2024 19:20:01 +0000
Subordinate resources:    AS: 265728
                          IP: 160.238.184.0/22
                          IP: 2803:3c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14658436 (0xdfab84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Mar 26 19:20:01 2024 GMT
        Subject: CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:b1:79:8d:2b:21:25:0f:c9:8e:d6:3c:4a:
                    3c:25:00:ff:44:6d:98:5a:18:e0:84:cc:2b:57:9e:
                    40:3c:93:fa:a6:f6:ef:1e:56:5d:5f:4b:4a:44:a0:
                    68:dd:1f:ed:2b:e5:d6:b8:eb:b6:d7:92:e6:d7:5c:
                    c7:47:64:2c:2e:ab:be:6f:1b:ad:dc:0a:ba:65:05:
                    71:89:3a:60:8e:2d:9a:98:d3:ab:a5:6c:1f:5c:f8:
                    af:7a:f7:5d:4f:d4:3c:d7:10:ca:0d:dd:a1:b9:ff:
                    8d:68:02:90:da:76:4b:6e:79:ac:18:fb:21:91:cb:
                    7b:43:50:a3:cd:06:94:34:0d:81:58:00:b6:56:74:
                    eb:b7:c5:8f:71:bc:34:72:11:87:92:d0:e3:74:b8:
                    7c:b1:17:da:ff:d8:0d:78:ef:a1:a6:c5:fe:e1:5d:
                    16:38:23:3f:cc:f9:69:e3:8d:56:c1:5e:21:14:4b:
                    55:06:e4:5d:89:96:32:83:8c:26:31:d9:95:61:64:
                    65:d5:6c:37:20:1e:71:a2:a7:ad:d5:fe:b4:f3:a6:
                    c5:50:89:b1:b1:83:8c:e1:14:d8:79:d5:43:f5:73:
                    f2:6a:25:6f:80:8e:12:5e:20:b3:73:5e:82:22:58:
                    e6:6d:59:98:51:d2:99:d1:b6:31:63:f5:91:c7:c1:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/42479c80014a47a7803e1ff86f78d4c83197ce2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.184.0/22
                IPv6:
                  2803:3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265728

    Signature Algorithm: sha256WithRSAEncryption
         7b:34:96:a4:dd:86:ad:91:89:9a:75:30:10:db:77:1a:6c:a8:
         76:12:f9:d0:3b:6f:e2:6d:67:b6:73:8e:0e:bb:1e:cd:73:76:
         4d:08:4d:c0:8f:cb:f7:20:2e:3d:f4:b6:0c:9b:8f:63:fc:09:
         14:2a:0b:b6:7e:1d:97:49:df:48:0b:d3:45:bd:58:36:e7:b2:
         4b:23:89:d7:a6:3b:11:0d:74:74:e3:23:33:64:03:11:5c:d9:
         20:f6:9a:31:40:55:76:59:57:1f:18:82:e5:98:3f:75:35:df:
         f2:7b:db:f8:73:ba:eb:23:25:52:70:e3:dd:ca:88:8a:98:b3:
         d8:e9:4c:8e:68:3d:fa:11:86:7c:ac:ce:45:be:0d:d7:67:be:
         20:19:ff:12:cb:9a:21:f5:2c:8b:04:c6:36:bd:ad:6a:67:3d:
         19:20:d5:7e:51:63:d7:47:1f:1a:87:af:99:9a:5a:1d:ed:19:
         82:3e:e6:16:0a:c8:dd:ec:ad:e6:00:c1:45:6d:2e:5d:22:16:
         97:75:73:25:91:2f:e3:00:7d:0d:04:76:de:e1:59:52:05:dd:
         6d:e8:ab:76:15:ad:10:fb:86:61:57:30:d7:38:2c:58:a6:64:
         57:8f:4b:5f:48:f1:fd:e7:c2:01:aa:40:30:0a:94:31:00:d9:
         09:75:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----