Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/457cfb45d8f3fe402bf47955d0dbd1109e072f12.cer
File:                     457cfb45d8f3fe402bf47955d0dbd1109e072f12.cer (raw, json)
Hash identifier:          1TN3iR2CMfKnohVhpveOgSenZxTx11zw77dVgQpFKNM=
Subject key identifier:   5C:E6:2F:26:51:B8:11:C8:2E:0A:81:FE:80:79:D0:AB:E9:36:6B:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC7ADB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/457cfb45d8f3fe402bf47955d0dbd1109e072f12.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:30 +0000
Certificate not after:    Sun 18 Feb 2024 21:31:02 +0000
Subordinate resources:    AS: 262230
                          IP: 190.106.40.0/21
                          IP: 2803:c00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14449371 (0xdc7adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:30 2017 GMT
            Not After : Feb 18 21:31:02 2024 GMT
        Subject: CN=457cfb45d8f3fe402bf47955d0dbd1109e072f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:7e:c4:84:dc:26:e5:b0:a5:fe:82:17:72:
                    3d:f6:4c:1c:12:29:dc:92:86:44:b4:db:24:e5:4e:
                    c5:a6:40:fb:a7:29:ee:7e:d2:d3:2b:e3:1e:f9:9e:
                    cc:4a:30:a7:53:1d:0a:ca:05:d6:89:d8:46:dd:b2:
                    3f:e6:4b:ce:34:25:89:f0:d7:6e:66:99:0f:9a:84:
                    aa:02:2e:85:a5:4f:26:5b:ee:69:68:74:3c:25:27:
                    1b:32:13:e6:92:27:d0:98:e3:df:a3:a5:3c:5a:6d:
                    a6:90:b5:1b:51:96:34:fb:64:4e:e2:bf:73:19:af:
                    e3:b6:49:06:08:19:6f:58:81:8f:3e:9b:d5:43:c6:
                    b2:56:55:65:dd:10:6d:45:b3:51:87:81:25:21:83:
                    eb:94:af:04:11:a5:d3:52:42:2c:a0:00:fe:97:f5:
                    de:3e:20:50:ef:c5:b7:b6:1f:e8:66:1c:a3:68:e8:
                    9e:b0:f5:b7:de:ac:bd:58:ba:b4:ec:c3:ef:30:ce:
                    b9:a4:38:b8:9c:75:44:f0:d0:a0:60:cb:0f:9d:28:
                    22:2a:94:f9:8e:1e:16:1c:33:e5:7a:9f:b5:cc:ed:
                    77:94:73:65:f1:e4:1f:38:7b:fa:df:ad:01:fc:f0:
                    2c:82:db:04:71:65:2c:b0:43:86:55:b6:73:f0:7f:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E6:2F:26:51:B8:11:C8:2E:0A:81:FE:80:79:D0:AB:E9:36:6B:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/457cfb45d8f3fe402bf47955d0dbd1109e072f12.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.40.0/21
                IPv6:
                  2803:c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262230

    Signature Algorithm: sha256WithRSAEncryption
         b4:6d:7d:20:6e:b6:6b:62:ca:d7:b1:7f:7d:fd:f5:c7:6b:3e:
         40:28:84:1c:c3:80:42:1b:f0:5d:53:a9:17:bc:30:50:99:ae:
         8d:0b:1e:89:0b:2e:cf:93:07:4d:18:3d:b1:6e:5e:b0:c4:67:
         cb:18:9e:3a:51:ee:08:80:3c:62:06:27:0f:09:be:cd:d6:fd:
         de:d2:6e:56:4f:e3:b0:77:6d:f7:67:6f:82:56:6b:32:46:53:
         4e:91:42:0e:c3:35:e5:60:a9:9c:ea:e0:80:7f:27:f5:55:7e:
         c4:89:7c:5c:09:63:7f:1a:cb:4c:1a:b8:aa:93:12:b1:0c:16:
         df:7b:d7:10:fd:ee:9a:c1:b5:3e:8e:a7:34:e3:b3:4a:78:ed:
         5f:03:e2:6f:04:63:b4:a8:dd:6f:d8:47:9c:c8:5b:5a:a6:f7:
         54:a0:6e:0b:3c:a9:1f:8c:71:24:cd:81:1b:f4:27:ae:b3:d8:
         4c:4c:6f:49:15:79:8d:d9:ac:0c:f0:d6:9e:33:28:25:08:b5:
         da:a9:52:75:10:3c:b4:6d:80:62:f1:5e:9a:ef:c0:01:f4:3c:
         1e:5c:ee:4c:4d:0b:f4:36:ea:71:cd:fd:0c:25:86:4f:7d:b9:
         c4:46:37:ca:95:28:eb:33:60:9c:a9:af:69:54:56:a2:53:e1:
         74:70:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----