Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
File:                     4d6514d89948e6d41988b60c1228765a24fd7536.cer (raw, json)
Hash identifier:          QG3mDEtFHgiA9rdL9JUN6vKLqbqaKZYD+XptLjaHcx4=
Subject key identifier:   BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E01352
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Sat 30 Mar 2024 17:11:24 +0000
Subordinate resources:    AS: 263242
                          IP: 200.12.248.0/21
                          IP: 2803:1180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14685010 (0xe01352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Mar 30 17:11:24 2024 GMT
        Subject: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:94:6e:da:3f:f4:59:e7:14:33:2a:58:13:
                    11:2f:33:51:2c:e6:c0:4a:f2:cf:5e:57:cb:f5:dc:
                    84:d5:70:ab:f6:e4:5c:e8:36:93:f1:be:94:7b:6b:
                    4e:35:70:6e:61:0e:13:13:2d:46:2e:f8:a4:34:a1:
                    7c:6e:e8:5f:a1:c2:54:8b:dd:2a:3b:22:bd:23:a4:
                    35:bb:f9:70:f0:62:98:f7:60:6b:13:03:e8:29:fc:
                    36:08:0d:a4:bc:aa:af:ee:6f:7f:42:09:78:44:34:
                    40:f0:38:c0:80:d2:f4:d3:55:70:6c:db:10:f5:54:
                    20:1d:a7:66:70:44:b4:e8:aa:70:61:9d:bf:11:fe:
                    95:cd:d0:e2:e1:f3:eb:69:1c:97:8f:62:e5:3e:1b:
                    07:42:ec:b7:be:50:07:4d:e5:da:b0:7f:6a:43:e4:
                    2e:d6:cf:99:ae:49:15:f9:7b:5d:48:17:1c:95:e8:
                    9d:94:48:da:70:de:bd:d6:a7:a5:19:b4:04:8b:4b:
                    ec:53:b7:26:3d:34:5b:ce:47:29:c3:54:0f:fd:03:
                    94:04:99:79:ed:d4:bb:25:bb:e2:fa:2f:d9:fc:58:
                    10:46:fc:0e:57:ca:c0:e3:b2:92:19:f5:73:07:25:
                    fd:27:b0:74:61:db:7b:62:a5:17:1a:d5:01:23:cb:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.248.0/21
                IPv6:
                  2803:1180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263242

    Signature Algorithm: sha256WithRSAEncryption
         21:75:36:b4:97:69:17:0f:11:65:a4:e1:24:01:e8:cf:23:55:
         4c:55:2f:a7:40:80:e5:9d:a1:12:e7:40:5e:31:84:d5:e0:74:
         03:a0:77:31:e7:85:6c:2a:50:99:bb:c2:60:58:59:b3:a2:80:
         59:70:4b:6b:18:81:27:ac:f8:df:18:99:6a:0a:ff:8c:bf:3c:
         54:08:b8:41:c4:83:88:c6:4d:0e:e2:17:f1:64:2e:81:b2:b4:
         12:4b:6b:69:44:34:f2:c0:bf:38:0c:be:28:f6:fd:39:2f:31:
         d6:67:72:ac:e2:22:27:b9:6a:bd:31:9e:69:21:12:fb:ff:97:
         31:27:30:6e:41:94:ef:78:22:22:e9:2a:eb:cd:93:75:d9:82:
         86:eb:27:4b:b7:d2:12:74:b5:c3:aa:8a:ac:d1:16:ea:b4:c9:
         01:dd:c9:df:db:35:50:24:c8:bb:5c:c3:a5:33:14:98:12:21:
         89:d2:10:5b:e6:64:08:9b:c2:d2:e8:bb:a7:ab:14:a3:c1:1c:
         fa:a0:c5:c5:fe:95:e0:5b:c5:9a:c4:99:60:61:c9:9c:26:dd:
         b5:8b:e8:11:73:43:f7:e1:92:00:32:1c:c4:21:26:4d:b7:f0:
         d1:2e:0f:25:25:d4:ad:d5:97:82:fd:bc:64:73:ac:59:e0:a3:
         66:c5:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----