Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3df344441b276a4625cddb05e287e9dd06da42.cer
File:                     5a3df344441b276a4625cddb05e287e9dd06da42.cer (raw, json)
Hash identifier:          zqtKomhnrrnmSSLZqgPgaCattDs0WLkCIhRLTFGVlNw=
Subject key identifier:   C4:CA:E7:84:95:AD:65:2A:72:DA:4B:0F:4E:C6:1D:E3:79:FC:75:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D79E92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/5a3df344441b276a4625cddb05e287e9dd06da42.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Tue 19 Dec 2023 20:31:48 +0000
Subordinate resources:    AS: 263731
                          IP: 201.131.78.0/24
                          IP: 2801:1c:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14130834 (0xd79e92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Dec 19 20:31:48 2023 GMT
        Subject: CN=5a3df344441b276a4625cddb05e287e9dd06da42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:85:5e:06:47:88:d6:02:20:cb:d2:bf:5f:
                    9a:c8:cf:e3:6a:b9:58:9b:8f:88:f3:fc:6a:1f:c2:
                    4d:69:54:86:60:4e:54:49:74:1b:02:8b:cb:e8:fd:
                    c4:0f:02:e9:a4:cd:14:4a:ac:39:b4:d3:16:04:05:
                    dd:2b:00:ac:cd:80:e5:09:c9:22:db:5f:60:54:27:
                    5a:19:59:7e:ff:e2:4d:ca:38:ee:82:6c:80:e2:a7:
                    ca:43:25:67:2c:fc:9e:6a:d5:a7:75:2c:c0:e9:44:
                    dd:32:40:17:5e:c7:19:57:97:7c:8f:1c:fd:7b:21:
                    2b:c4:08:e1:07:f3:06:4b:2d:bc:54:9b:89:7a:d8:
                    99:f5:04:18:bd:57:68:81:48:d7:c0:29:1e:94:5b:
                    2e:d7:4b:d8:f8:58:99:db:3f:39:7b:53:ab:ef:da:
                    92:fa:31:d4:76:68:de:64:86:5c:c6:bc:08:10:b2:
                    c2:22:6c:21:48:22:6b:21:48:74:27:e6:eb:4c:f8:
                    a1:72:b7:c9:ca:df:94:84:a2:b4:c3:5d:de:9d:de:
                    30:7d:c0:75:6e:70:88:c5:9c:09:6b:1b:32:3d:56:
                    6c:7e:b0:ff:ed:5e:73:b6:c8:cb:a3:4e:aa:be:ba:
                    48:20:23:4e:ba:10:95:95:e4:6d:67:66:74:ab:09:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CA:E7:84:95:AD:65:2A:72:DA:4B:0F:4E:C6:1D:E3:79:FC:75:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/5a3df344441b276a4625cddb05e287e9dd06da42.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.78.0/24
                IPv6:
                  2801:1c:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263731

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:b6:d8:16:21:64:d5:68:57:fc:c4:75:49:3a:47:89:a9:
         12:37:84:34:53:92:f5:f7:3c:d2:77:43:8e:ad:8c:83:26:06:
         d8:e2:49:09:63:95:d4:b2:6c:88:d6:ea:38:40:bc:41:de:76:
         3b:94:23:d6:34:c8:b4:7f:0f:56:f0:7f:b1:29:7e:95:15:f0:
         23:70:ec:30:81:cc:47:f9:e4:be:59:bd:72:e0:c9:a2:70:d6:
         61:7c:1e:20:56:af:a1:be:85:fd:6e:12:1e:9d:19:58:d7:0a:
         59:a8:c9:e6:a2:77:be:9a:41:99:89:26:77:89:04:1a:1d:af:
         81:f8:fd:62:3b:36:56:4f:a5:1f:12:5f:16:ec:1f:8b:1f:4d:
         39:cb:90:aa:d8:be:e9:25:a4:23:18:f5:22:20:34:91:79:c7:
         d5:bb:5b:a4:52:da:f8:cc:82:c5:22:2d:26:7e:e8:c5:fe:2a:
         3a:20:a4:9d:d5:01:ff:e2:b6:90:0d:f5:26:6b:9a:5b:d6:28:
         21:b3:e5:fc:28:f4:00:b2:f6:b5:f5:44:2e:58:45:d8:bc:ed:
         60:ec:03:18:db:c2:9c:80:ba:4b:e2:3c:dc:78:b3:5d:97:78:
         9e:2f:ff:f9:42:a8:8f:21:4f:59:3c:3d:11:f9:fe:3f:cd:37:
         7c:99:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----