Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595bee2139f920457eeb30e74206d9d6ec7aab29.cer
File:                     595bee2139f920457eeb30e74206d9d6ec7aab29.cer (raw, json)
Hash identifier:          dBN6iMyRUtPT+G/KnNy9T53WwlWiNTy0Q2HIfNgI/dk=
Subject key identifier:   FF:99:2D:0F:D6:C6:D8:C4:B1:ED:D0:58:1E:C3:FF:2A:F7:9F:63:A5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0D4EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/595bee2139f920457eeb30e74206d9d6ec7aab29.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Sun 07 Apr 2024 18:00:22 +0000
Subordinate resources:    AS: 265745
                          IP: 128.201.88.0/22
                          IP: 2803:53c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14734571 (0xe0d4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : Apr  7 18:00:22 2024 GMT
        Subject: CN=595bee2139f920457eeb30e74206d9d6ec7aab29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:1f:25:6e:37:92:57:c4:5b:5e:ac:a1:05:
                    5b:2d:50:f8:16:b4:51:61:88:8c:6d:a6:b2:84:73:
                    ab:e5:b7:11:57:06:57:a6:a4:a4:ac:3d:cc:4c:a9:
                    76:06:4b:0f:5b:90:fd:ee:d7:15:0b:e9:4e:57:e8:
                    92:80:29:97:a6:e8:c7:75:a9:2c:e5:e1:43:de:7f:
                    29:5e:aa:b2:9e:59:b8:23:6e:8b:ae:35:51:0e:30:
                    ad:da:fe:53:e9:34:e5:3d:e9:37:1a:a8:b9:99:d9:
                    ec:31:fc:f6:94:f1:11:fd:0b:b7:ae:b9:68:dc:66:
                    59:a3:bb:3f:81:38:ab:dd:4f:cb:cf:57:83:33:54:
                    39:50:3e:3c:4f:0e:ce:29:8b:18:ea:b6:cb:15:43:
                    3c:ad:04:22:53:67:6f:f8:82:9b:a5:fa:33:84:d8:
                    f9:d4:39:15:65:0a:47:92:91:b8:42:61:58:c9:72:
                    e9:c7:1f:2e:73:7a:18:e7:83:11:87:7f:3d:6d:b1:
                    40:bf:15:b6:69:11:9c:dc:fb:d9:61:30:9d:b2:ae:
                    18:d0:b2:6d:94:00:14:59:02:9c:20:51:b7:71:82:
                    0b:a3:59:ff:66:1e:e9:f5:1f:93:7d:cf:6a:e1:d3:
                    f2:e2:88:41:0e:ac:2a:46:09:23:cc:57:26:07:ff:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:99:2D:0F:D6:C6:D8:C4:B1:ED:D0:58:1E:C3:FF:2A:F7:9F:63:A5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/595bee2139f920457eeb30e74206d9d6ec7aab29.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.88.0/22
                IPv6:
                  2803:53c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265745

    Signature Algorithm: sha256WithRSAEncryption
         20:95:cf:9c:8d:38:c8:12:bc:c6:7c:b1:17:c3:b2:22:f3:a7:
         1f:64:d3:77:61:d1:cd:e4:db:d6:5b:fa:6c:ed:f5:4b:59:79:
         68:f1:a2:02:ac:c3:42:08:37:a5:89:25:0c:68:f5:c9:9e:91:
         93:49:c3:50:21:e2:11:10:e2:32:a6:fa:63:4b:a0:16:74:65:
         06:e1:20:42:9d:db:d8:0d:9d:fb:88:0d:5f:3b:e0:7c:91:6b:
         6f:60:7d:ba:f4:d3:b2:97:2f:53:67:14:ef:0c:50:36:e7:05:
         a0:5a:23:f1:ad:e5:75:01:4c:7b:c2:ad:92:99:c2:10:2a:64:
         4b:09:fd:ff:af:1a:df:45:4a:f3:76:97:f9:7f:74:e8:ea:53:
         c7:4e:56:a3:2c:1d:e1:02:68:c8:76:72:a2:05:b0:70:6b:9b:
         b8:6f:76:27:a9:01:e7:8f:eb:62:1c:1e:ab:e8:7c:be:65:95:
         39:e3:c5:24:b4:a7:69:77:1e:f7:ea:9c:8b:36:36:04:2d:71:
         c6:95:bb:3b:a4:3e:a7:26:bc:9c:4a:54:05:ee:e4:34:12:a6:
         b1:8c:6b:3f:76:bf:8b:fa:ad:e2:cc:ee:83:34:67:d9:2c:01:
         47:78:5a:d9:ec:a1:a6:3b:96:40:82:ec:ae:8a:30:50:0c:0f:
         de:05:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----