Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47e3dd0bed737f9d8626e504eca46267a679fc8d.cer
File:                     47e3dd0bed737f9d8626e504eca46267a679fc8d.cer (raw, json)
Hash identifier:          Ymgb0pSp1Xr+R0+g/EEAAzZQSxUtNL74WoU5w3SFnWc=
Subject key identifier:   53:18:6C:01:C2:A4:43:AB:BD:CA:51:C8:CE:F6:21:89:E4:86:BE:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F90193
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/47e3dd0bed737f9d8626e504eca46267a679fc8d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:20 +0000
Certificate not after:    Fri 11 Oct 2024 15:21:25 +0000
Subordinate resources:    AS: 263714
                          IP: 201.131.73.0/24
                          IP: 2801:13:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16318867 (0xf90193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:20 2017 GMT
            Not After : Oct 11 15:21:25 2024 GMT
        Subject: CN=47e3dd0bed737f9d8626e504eca46267a679fc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:cf:6c:16:56:34:de:48:9c:9f:9d:4b:cc:
                    71:98:d5:ae:38:3a:35:ce:90:9e:44:41:be:d1:f4:
                    34:0b:5b:52:df:f9:2d:bb:54:e7:86:f2:08:a1:95:
                    03:40:ec:00:d5:fa:c4:3e:ae:20:a5:b2:98:1c:35:
                    1e:23:d9:a2:09:6e:ac:72:0c:19:c5:3d:d1:33:dc:
                    64:dc:8d:cb:c1:3d:d9:4b:44:e4:f1:4d:0a:c3:1d:
                    a4:a6:ff:18:4d:82:ca:cb:78:57:7a:16:8b:ff:ee:
                    3d:17:04:a0:ec:0a:48:f8:4d:c0:9c:01:f4:14:f5:
                    a0:c5:5f:c7:24:33:25:cf:8f:2f:ab:f3:e4:15:e9:
                    ea:9d:bb:41:f0:bc:2f:4b:22:b8:9c:7e:73:18:37:
                    4e:29:2c:f2:ef:ec:99:bd:a6:ee:3e:86:f6:53:b0:
                    ce:da:41:e8:8b:5b:2c:27:b1:4f:9b:1e:d5:fd:20:
                    e4:fe:14:dc:08:3f:ae:93:da:e9:a4:85:90:c0:73:
                    4e:19:77:5c:4e:1c:fb:90:32:88:9c:a8:3d:de:97:
                    a6:b6:48:e2:59:24:bb:30:65:f2:84:e5:77:a8:4f:
                    4a:5a:bc:1c:9d:04:11:97:b5:fd:14:b6:06:d9:37:
                    95:13:b1:13:ae:c6:a3:df:61:e5:6f:61:1f:1c:f8:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:6C:01:C2:A4:43:AB:BD:CA:51:C8:CE:F6:21:89:E4:86:BE:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/47e3dd0bed737f9d8626e504eca46267a679fc8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.73.0/24
                IPv6:
                  2801:13:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263714

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:80:b9:a4:b6:de:8a:18:6f:04:c3:22:cf:43:fa:87:d3:
         76:39:24:d3:dd:95:80:7f:c9:26:47:9f:a8:1f:67:8c:a7:f0:
         60:90:15:10:05:aa:50:41:41:fe:e2:be:69:dc:b6:ed:cc:8d:
         12:d1:0c:61:b0:2b:7d:77:33:94:e9:f8:a2:48:ec:43:d9:97:
         7a:d9:9c:0e:0e:1e:18:6f:e5:0d:09:50:b8:2e:4e:2e:48:64:
         a7:29:8c:5d:09:9d:5a:1f:d1:66:20:36:19:6f:e8:61:e4:b9:
         49:7a:1f:15:b9:fc:8a:30:00:12:89:90:4d:94:9e:1d:54:aa:
         df:f7:cb:a8:b2:3f:25:9e:8a:10:d6:f1:9e:e6:16:be:64:6a:
         ca:ea:49:da:b7:d2:06:7e:bf:69:5a:d1:5c:56:8a:61:ef:86:
         2c:ed:fb:53:fc:e9:9c:41:fd:63:e7:4c:03:4f:57:f7:57:29:
         27:40:89:1c:f4:a0:cb:c9:fb:d0:f0:77:2d:59:98:77:ed:1f:
         00:39:53:1c:86:60:39:3d:33:19:f9:a4:42:0f:40:1d:cd:1f:
         49:24:b2:c1:73:fd:63:ae:dc:1d:2e:25:64:61:53:af:e2:30:
         0f:7e:91:6b:ed:f4:ca:3d:ab:c9:99:e4:27:f8:53:75:58:d6:
         4a:e0:84:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----