Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
File:                     4cba7f8bd719e527c075d1975618d1234b50de72.cer (raw, json)
Hash identifier:          h1W2dTf8LrMj8GbYjSwO43tfq6qC1WIU01qoppAceGo=
Subject key identifier:   CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFEB98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:35 +0000
Certificate not after:    Fri 29 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 27826
                          IP: 200.16.120.0/21
                          IP: 2803:aa40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14674840 (0xdfeb98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:35 2017 GMT
            Not After : Mar 29 06:00:00 2024 GMT
        Subject: CN=4cba7f8bd719e527c075d1975618d1234b50de72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:8e:c2:96:98:aa:18:ab:7a:e1:8c:9e:79:
                    6e:c4:85:fe:59:03:bf:b5:3c:26:88:b5:83:ee:1f:
                    6e:30:ef:75:17:f8:ab:ac:34:4d:47:d9:b3:f4:b2:
                    1b:16:9e:51:d1:6b:2d:21:b1:9a:22:5e:9a:30:db:
                    d8:b8:1f:e0:e7:c1:91:39:05:df:26:d7:04:08:6e:
                    81:60:0f:03:89:0c:d0:c7:d0:b8:67:da:e8:d3:a3:
                    69:88:c8:da:00:ae:31:36:24:be:79:d6:81:27:1e:
                    d0:2a:6d:9f:e2:25:94:3c:2f:58:2c:ec:13:dd:c2:
                    41:df:e7:96:2a:0a:e3:bc:ff:cf:0f:d6:ea:d6:c4:
                    ba:3e:72:d8:f2:a3:c2:32:14:0e:7d:4e:d2:63:04:
                    45:47:c9:44:36:11:7f:bb:73:a2:0f:c5:33:fe:6f:
                    7e:61:e6:e5:c4:f5:40:07:48:04:b3:e0:08:46:4b:
                    82:a0:ea:3c:85:0c:f2:13:8e:8a:62:28:03:9d:aa:
                    c3:b6:3c:e3:b2:93:8e:ff:38:24:97:b4:96:58:7f:
                    7c:15:db:eb:41:b2:24:80:0f:c3:08:e1:13:ec:fd:
                    57:27:f6:4c:18:b2:9d:36:9e:c2:67:71:ea:04:fd:
                    05:a7:d9:e7:63:a0:55:f9:ed:36:1b:6e:d8:58:01:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.120.0/21
                IPv6:
                  2803:aa40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27826

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:74:4f:e1:8d:1c:5c:6b:ec:8f:83:ad:4e:2e:fb:d7:5b:
         cf:4f:b6:6a:ba:d2:16:45:2a:0e:e3:13:26:9c:72:ad:71:b5:
         7e:13:60:01:23:0d:10:05:f4:fc:6c:b2:56:ed:f0:fa:26:22:
         0c:51:a6:8f:37:f2:fd:59:c3:d7:73:11:19:ad:d6:4c:2e:67:
         b4:19:e6:9e:31:a9:a9:41:35:6d:71:14:bb:63:41:ec:73:86:
         bd:1b:96:30:9f:32:bf:74:4e:a4:f2:0f:cb:39:a6:bc:60:7e:
         22:8a:ac:01:5f:7a:55:55:84:15:ea:8b:ba:78:3e:e3:40:96:
         4b:da:39:47:cc:a3:87:49:fa:8c:9b:a4:ff:9a:86:a5:2d:7b:
         71:be:d6:86:c7:ad:cd:73:e8:d2:be:01:f3:26:b1:2c:d0:53:
         52:72:be:37:63:b1:5a:e2:ce:7f:4c:d4:51:a6:01:65:30:27:
         e6:62:88:22:61:f7:2d:50:0d:9d:81:f8:36:8b:fc:a7:6a:7a:
         56:e0:01:05:8c:9e:58:f6:1d:26:21:08:53:64:99:36:e6:02:
         06:1d:41:3a:e7:cc:ff:eb:e3:8d:f6:c3:e2:ed:98:ae:05:9d:
         7a:83:46:98:a7:6e:7c:56:04:a0:c4:2a:59:11:9a:57:2e:5c:
         65:f9:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----