Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
File:                     450e05696920146d80a6cffd7e47b4df43d2b64a.cer (raw, json)
Hash identifier:          WUMnH9oeSzuMbLkYd4wet+I29DVN3XR5U03yADzm38g=
Subject key identifier:   14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE44DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:34 +0000
Certificate not after:    Sun 10 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 12127
                          AS: 263783
                          IP: 190.57.0.0/19
                          IP: 190.57.56.0 -- 190.57.127.255
                          IP: 2803:1000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14566620 (0xde44dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:34 2017 GMT
            Not After : Mar 10 15:00:00 2024 GMT
        Subject: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:b5:c9:fb:be:b3:3a:5b:cb:ac:e7:2e:3c:
                    15:ae:1e:d3:f7:2a:c2:ef:13:b9:51:b8:48:f4:13:
                    1d:65:ee:61:45:91:f5:7b:4e:8d:19:fc:7e:b3:21:
                    b2:86:b2:c9:4e:e3:bd:2a:a2:f5:b3:8e:c9:f9:41:
                    cf:1b:f6:d2:f9:90:b8:33:cf:b0:5b:d5:5b:30:11:
                    fc:14:58:5f:12:c2:fb:ef:85:79:81:15:44:26:7d:
                    11:de:3f:60:01:8f:66:86:7f:04:36:7e:c5:36:49:
                    85:37:b5:54:ad:05:c9:91:a7:b9:66:3b:4f:d6:44:
                    60:e3:2e:ec:0d:9e:be:0b:67:e3:72:1e:1a:04:3b:
                    94:28:e7:58:7b:fa:ba:56:4f:46:41:43:37:13:2a:
                    e5:c5:a1:ca:2e:88:32:e3:70:60:11:a8:ed:9f:83:
                    65:74:2f:e6:35:5b:a1:a8:41:d1:90:d6:0d:68:dd:
                    a9:e4:b4:9f:08:1c:33:3a:96:4c:26:1a:31:6b:5c:
                    7e:ed:67:eb:e0:1a:ad:03:ae:f2:02:db:09:3f:af:
                    0e:47:cb:51:58:66:dd:b7:10:7a:8b:75:de:f9:a0:
                    e7:e3:09:3c:01:14:e8:54:ad:f0:cd:52:08:c0:02:
                    b1:90:66:06:ac:f5:60:2b:15:34:c0:e5:5e:4f:26:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.0.0/19
                  190.57.56.0-190.57.127.255
                IPv6:
                  2803:1000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12127
                  263783

    Signature Algorithm: sha256WithRSAEncryption
         11:17:7f:eb:e1:6c:80:74:a6:cd:d0:e6:78:fa:ba:06:12:6f:
         65:65:70:08:9a:c7:81:9a:a2:0a:2c:5f:7c:5a:e0:9b:61:3e:
         e1:c0:ae:c1:fa:0a:64:54:22:a3:84:2f:c6:ae:c4:50:8c:7b:
         a2:5d:d6:93:3c:af:e3:55:73:4d:7b:d0:52:a4:5d:4a:5c:51:
         b5:02:0a:48:66:e8:60:61:dd:2a:65:6d:fb:51:82:11:f2:56:
         5d:b4:40:a7:c8:20:2a:e1:81:b3:9d:16:15:7d:12:e3:d5:44:
         53:8e:ae:ba:fa:52:c6:88:98:2b:dc:9b:1f:42:cd:cb:ff:f0:
         d3:d2:01:e8:c1:32:4a:f0:2a:73:68:9f:77:67:4f:2f:8c:ba:
         61:07:00:63:22:53:3a:c7:37:a1:bf:8c:f2:95:68:56:d4:7d:
         54:54:6d:0c:c1:e3:88:f9:c2:72:91:6e:b2:f9:83:78:af:31:
         90:5b:9e:97:f2:5d:4a:48:98:ae:ec:82:01:55:a8:48:21:f6:
         91:c5:e9:8f:65:da:06:5c:b0:c4:8b:c0:74:99:3d:5a:e7:ee:
         0d:bd:f6:18:86:35:07:96:94:ed:77:8e:0c:1c:a2:22:0f:ca:
         76:cd:5c:bb:51:23:d5:ff:be:48:2b:5b:f8:e1:6d:c3:9c:2b:
         ef:38:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----