Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59c955c1161be465b45b3d4a971f6ab16f08a7c8.cer
File:                     59c955c1161be465b45b3d4a971f6ab16f08a7c8.cer (raw, json)
Hash identifier:          zQiZkBALZmo5PWI0xTvrgGhbXQxpO8qf0ahpFRkpUBY=
Subject key identifier:   0A:D4:A5:C6:7A:18:A0:9D:90:23:43:E6:30:66:67:73:0E:26:E4:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9E7EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/94caf78d-e8f0-4fbb-8cfc-0be4fceaa45a/59c955c1161be465b45b3d4a971f6ab16f08a7c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/94caf78d-e8f0-4fbb-8cfc-0be4fceaa45a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Fri 18 Oct 2024 21:01:48 +0000
Subordinate resources:    AS: 61485
                          IP: 168.0.12.0/22
                          IP: 2803:b940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16377838 (0xf9e7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Oct 18 21:01:48 2024 GMT
        Subject: CN=59c955c1161be465b45b3d4a971f6ab16f08a7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7b:8a:5f:c0:f0:e4:c6:16:86:7b:78:bd:af:
                    a3:96:30:61:81:bb:9b:14:36:95:20:67:12:95:9e:
                    46:ed:70:50:49:39:33:91:cd:dd:e9:3f:a6:cd:3c:
                    99:1c:1f:18:4b:a8:7c:b9:47:58:84:98:d7:3c:a3:
                    51:1d:44:dd:9e:f4:45:ed:af:76:b0:a9:9e:b6:43:
                    cf:c1:f4:1b:7d:f7:7a:7e:fc:04:24:c1:e4:d1:d6:
                    ec:25:ef:84:fc:b5:7a:82:19:aa:0d:52:6d:e6:24:
                    72:3a:b2:a5:5c:b4:49:9e:d3:2d:e0:82:81:6c:25:
                    f8:2b:1c:d7:66:e6:c0:50:6f:ff:f9:c8:12:a5:5e:
                    17:b3:0a:89:1a:a9:54:3f:3d:c6:43:e0:c7:af:3a:
                    61:a0:0d:33:c2:9f:db:56:d2:b0:1e:4d:37:24:36:
                    5b:8f:05:df:9a:9e:4c:0c:2e:25:23:34:fe:a2:5e:
                    76:a7:d6:3a:96:88:18:ba:37:a3:3b:27:4e:04:2a:
                    88:ca:1c:fb:ff:01:75:98:03:d7:56:f1:0b:b1:26:
                    a8:cf:89:19:1a:3d:c0:8b:4b:80:f2:f2:13:1e:1c:
                    62:87:a3:ce:fb:cd:1a:47:d8:8e:c5:bd:05:25:b5:
                    0e:ca:67:09:f7:cf:ca:03:71:69:d0:cd:a7:3c:da:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:A5:C6:7A:18:A0:9D:90:23:43:E6:30:66:67:73:0E:26:E4:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94caf78d-e8f0-4fbb-8cfc-0be4fceaa45a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94caf78d-e8f0-4fbb-8cfc-0be4fceaa45a/59c955c1161be465b45b3d4a971f6ab16f08a7c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.12.0/22
                IPv6:
                  2803:b940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61485

    Signature Algorithm: sha256WithRSAEncryption
         7d:9b:d2:c7:a0:dd:e0:cf:b7:63:53:b6:51:b2:95:cc:5a:04:
         a5:08:80:14:c4:b1:7f:d3:2e:89:69:9d:4d:bf:a7:f7:13:1c:
         02:8f:19:ff:4d:1f:aa:87:dc:ec:ae:50:ab:c9:08:59:be:ef:
         d1:62:c1:41:3a:69:85:30:3d:66:8d:8d:e9:ab:06:fa:8d:ee:
         ff:d0:3e:82:89:d6:10:cb:41:f4:bd:e4:4f:7b:c4:a0:7c:f9:
         69:55:18:8d:98:80:1a:fa:04:bf:59:55:9c:d4:ce:c5:9e:5d:
         85:fb:c4:6a:ee:79:ab:44:b4:10:29:95:22:da:cc:a3:a3:51:
         d8:75:a8:c7:da:9d:38:41:c2:9e:54:f1:10:d3:08:75:00:4c:
         07:4e:3b:8b:d3:aa:3b:ce:97:a8:32:ec:99:70:7c:17:ca:fd:
         f3:4b:ce:9d:12:4e:a4:e0:ed:73:ec:04:97:c0:10:df:fa:01:
         48:21:d7:ef:d3:37:e7:ec:e0:5c:a2:4c:1b:4d:7a:50:43:6a:
         0a:fe:6f:83:b5:08:38:a4:01:e6:53:86:8d:e6:5f:cd:bc:18:
         5d:16:9f:cb:14:e7:e8:7c:0e:23:f6:04:a4:98:c8:f5:1f:9c:
         90:8e:24:75:08:bd:ca:88:52:47:48:80:14:0a:cf:48:9c:c5:
         53:a9:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----