Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a2800da3c2361f810415d86028cea596de29de4.cer
File:                     4a2800da3c2361f810415d86028cea596de29de4.cer (raw, json)
Hash identifier:          2bHWeTiaSjnvFx0sd0kAT/haxGYuKWT0Ax1XavV5m9w=
Subject key identifier:   C7:A3:33:62:41:BC:CB:71:9C:33:3B:5F:8D:52:0F:62:B9:D1:49:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB1278
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c5e588d9-ab4f-4a41-8aa0-caf67a232247/4a2800da3c2361f810415d86028cea596de29de4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c5e588d9-ab4f-4a41-8aa0-caf67a232247/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:57 +0000
Certificate not after:    Mon 24 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 264653
                          IP: 200.9.158.0/23
                          IP: 2801:10:c000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15405688 (0xeb1278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:57 2017 GMT
            Not After : Jun 24 06:00:00 2024 GMT
        Subject: CN=4a2800da3c2361f810415d86028cea596de29de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:5a:be:b3:c1:7c:59:2a:9b:50:8e:40:81:
                    91:55:f4:2a:fb:50:b9:06:7d:d9:0c:83:9b:a7:bc:
                    bc:9f:1a:04:e2:67:f4:23:7c:3b:cb:61:54:a3:7c:
                    93:fc:c1:49:d0:ef:30:d7:1a:76:1d:0d:b3:58:71:
                    a4:22:95:db:2c:a4:c0:70:52:d6:45:f6:4a:60:b1:
                    a0:bb:2d:60:fb:0d:35:c6:59:5b:77:ac:30:20:dc:
                    82:98:67:ee:16:98:8e:52:dd:7a:76:7c:b8:4d:23:
                    b6:ec:ef:af:45:89:f2:60:3e:e7:a8:7e:08:9a:c5:
                    08:cb:61:d7:1f:ea:6f:db:28:28:a3:24:85:93:b5:
                    12:3e:06:a0:77:20:62:4d:d7:db:d1:8d:ce:dc:a4:
                    e6:a8:06:ea:75:fa:64:b5:f5:13:ae:ef:32:77:f9:
                    2f:d6:18:66:64:9d:b1:df:81:09:ad:3b:8b:72:65:
                    86:32:08:f5:02:90:eb:4f:fd:7d:3f:9e:c0:00:46:
                    81:46:3c:6e:c0:ee:42:97:48:9f:48:d3:75:a4:62:
                    75:81:1e:72:15:63:30:25:ea:4d:84:1d:ae:76:10:
                    02:f6:a5:46:5c:f4:14:30:3b:58:57:e1:6c:42:cb:
                    ee:b5:64:26:63:e9:9a:6d:89:96:0d:6f:2a:5a:31:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A3:33:62:41:BC:CB:71:9C:33:3B:5F:8D:52:0F:62:B9:D1:49:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c5e588d9-ab4f-4a41-8aa0-caf67a232247/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c5e588d9-ab4f-4a41-8aa0-caf67a232247/4a2800da3c2361f810415d86028cea596de29de4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.158.0/23
                IPv6:
                  2801:10:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264653

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:a2:90:9c:78:83:97:af:c0:d8:b7:6d:ab:12:65:5c:d2:
         e0:2a:16:c7:86:b7:7b:67:fc:e2:f0:62:e4:b2:d2:8f:af:4f:
         61:45:6c:d6:1d:3a:25:50:8c:92:2f:3f:a2:0c:a1:00:cc:98:
         f1:e2:3d:e0:9c:3c:28:73:76:51:26:23:2b:a2:6e:6b:e2:b0:
         e9:aa:b8:6b:87:56:ee:39:ae:1f:ea:e5:64:81:65:ff:fe:ac:
         bb:bd:c4:86:cc:9f:ce:9a:ba:3b:7f:df:a3:f4:3e:c5:ae:f5:
         8e:1c:97:2a:bc:ca:18:02:99:85:24:26:6a:b2:36:d1:d6:4f:
         b9:90:f3:d2:b5:01:5b:d0:66:6a:9c:4e:54:82:c2:cc:7c:1e:
         21:43:fd:39:10:a9:79:74:3e:46:72:66:28:d7:aa:be:5d:c5:
         84:e8:ef:09:6a:4f:66:f8:33:0e:9e:b6:63:93:27:4a:44:22:
         2a:d1:f7:1b:dd:a8:f1:f6:e7:59:c3:a0:55:0b:d7:76:1d:bb:
         8c:cf:0b:11:b8:96:98:09:cf:19:5a:fa:61:36:c6:36:79:4c:
         fb:4b:dc:3b:ea:53:a3:79:72:d2:59:2a:68:f2:be:3f:95:27:
         89:7f:b5:55:92:a5:84:60:c7:f1:eb:de:ca:be:34:53:d8:86:
         6f:89:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----