Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer
File:                     466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer (raw, json)
Hash identifier:          SFt4bZSc7xujwdbKyVpW7K0br84/LRxoJwOnslmUtZ0=
Subject key identifier:   44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA323A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/466e9c553c1e6136fda5fe5189aa28c81ce61dec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:39 +0000
Certificate not after:    Sun 20 Oct 2024 18:03:24 +0000
Subordinate resources:    AS: 264837
                          IP: 170.81.144.0/22
                          IP: 2803:22c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16396858 (0xfa323a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:39 2017 GMT
            Not After : Oct 20 18:03:24 2024 GMT
        Subject: CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:30:f7:6e:a8:23:9e:91:8a:eb:43:3b:82:
                    72:98:ef:60:72:98:ce:db:28:21:cc:c9:e8:d3:1a:
                    b2:aa:22:86:74:9b:56:15:4c:fa:9c:a3:df:44:ee:
                    d8:ca:37:44:8a:65:5f:7f:7d:6e:63:50:47:8d:f7:
                    51:72:2c:40:af:00:b8:3c:cd:ec:56:9c:11:a5:ff:
                    91:61:f1:c4:c9:6f:29:15:71:11:9b:9c:ab:a5:ef:
                    52:d9:0b:62:1f:54:c5:dc:e5:4e:1f:f0:46:64:ab:
                    7d:c9:5e:b8:c7:3a:09:dc:ff:82:43:9c:82:c8:1c:
                    39:69:31:5b:72:bb:bd:f9:fe:7b:24:ab:72:1b:71:
                    ae:e5:81:42:3a:bd:51:24:0b:78:c7:e0:d9:e6:f5:
                    ba:ff:33:36:14:f8:6e:fd:2a:8d:93:a2:99:60:4b:
                    fa:c1:ce:6b:38:68:c9:77:18:b8:ba:a0:f1:15:3b:
                    52:52:ba:b1:e8:ef:0d:08:6b:ba:35:3c:46:d9:ce:
                    4b:54:c5:cb:32:dc:cb:4a:35:28:41:c5:ce:3f:b1:
                    bf:6c:39:c1:8d:67:c1:18:df:b2:32:62:ae:8d:69:
                    7a:4b:14:00:f2:45:7b:10:db:97:66:14:69:01:71:
                    79:44:a4:22:ed:7a:89:fa:22:b5:f6:4e:87:c3:c9:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/466e9c553c1e6136fda5fe5189aa28c81ce61dec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.144.0/22
                IPv6:
                  2803:22c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264837

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:2a:d0:91:df:51:86:0c:a4:4a:94:6a:08:b4:d4:0b:1d:
         17:a6:95:1f:ab:db:1b:60:9a:f9:2e:89:ce:12:3f:70:f2:d7:
         e5:9f:14:43:8e:09:71:c2:2e:0b:9d:40:d2:53:00:4d:ff:eb:
         2a:1c:6f:7b:88:c3:86:87:9d:d1:d1:4d:e8:91:e6:03:60:c0:
         a7:68:c2:20:de:83:99:34:83:6a:9f:70:d3:b6:ea:89:99:67:
         b9:03:36:19:04:33:d0:96:e1:97:b7:de:aa:db:9d:6c:28:2a:
         a1:55:79:63:51:3f:a1:24:ad:64:01:55:f8:64:0f:c4:69:a2:
         24:d5:fb:0d:33:35:48:ab:bf:c6:14:7a:d3:a9:5c:b0:81:60:
         e9:20:af:bb:7e:37:2d:2b:2c:96:40:27:4c:ee:2f:db:38:86:
         78:ed:35:78:17:b1:64:b3:52:0f:94:e5:ac:ba:31:88:1e:5d:
         c1:76:7e:a3:ad:8d:18:95:bf:46:10:6c:57:ae:f6:a1:02:91:
         3a:69:88:4c:66:82:86:87:01:6f:15:e3:e2:40:3a:1d:5c:61:
         ba:ce:49:9b:f2:2f:9f:28:ad:a5:a8:d9:ac:44:e1:4f:52:96:
         a0:e8:11:5c:8b:6b:f5:00:72:e0:be:e2:19:38:5d:b9:58:10:
         ea:91:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----