Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7ecece57be40d2d7acbf686245f6860d943ed3.cer
File:                     5b7ecece57be40d2d7acbf686245f6860d943ed3.cer (raw, json)
Hash identifier:          xN+myv9b787LVgV7eNWSrQxR7EeTFdJWOoF+/cjRfnk=
Subject key identifier:   11:17:AD:16:CC:FE:8E:9D:9D:24:74:36:4F:2B:44:9A:6D:21:E3:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCADE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/5b7ecece57be40d2d7acbf686245f6860d943ed3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Wed 21 Feb 2024 00:48:11 +0000
Subordinate resources:    AS: 264694
                          IP: 168.232.144.0/22
                          IP: 2803:e340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14462440 (0xdcade8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Feb 21 00:48:11 2024 GMT
        Subject: CN=5b7ecece57be40d2d7acbf686245f6860d943ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:b2:b8:9d:96:17:04:d5:4e:f8:62:99:49:
                    57:df:b6:46:fc:38:20:b7:d8:51:0a:a5:38:c1:28:
                    c2:1b:41:a9:ab:4a:14:6b:f4:2b:5b:5b:ae:7d:63:
                    db:c1:2a:bf:98:f3:d7:68:43:76:18:a2:f1:f2:ed:
                    56:2a:c2:96:13:4b:b9:cc:08:95:89:5a:5c:67:49:
                    e7:0f:6a:6e:f8:13:80:76:db:51:bb:de:58:a2:06:
                    ec:33:05:6c:bd:fe:02:98:b1:be:2c:3d:61:d7:9e:
                    dc:0d:49:3b:32:ff:6b:de:73:6f:db:c7:52:1b:61:
                    37:7b:be:bb:28:57:cb:e9:6f:00:32:6c:a7:65:56:
                    14:9a:49:a4:86:18:b5:5f:63:63:db:d5:40:3e:cd:
                    ca:1c:e5:f4:c9:b7:cd:ef:98:3e:3a:10:a0:c2:28:
                    2c:4d:c9:f1:42:97:23:bf:6d:b8:cd:b3:22:8b:99:
                    a3:5d:be:b2:33:e5:f1:da:97:67:11:c8:71:f4:58:
                    cb:7d:0f:0b:6c:fe:1f:7d:40:e5:96:3e:9f:e3:ef:
                    0c:3e:66:68:e9:20:fd:12:ad:8c:86:b4:d1:bf:96:
                    8f:e7:9f:3f:4e:0b:f3:80:7e:d0:5a:dd:86:1e:f7:
                    a3:fb:f5:2b:45:9f:18:bf:c7:2f:97:50:5d:69:1e:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:AD:16:CC:FE:8E:9D:9D:24:74:36:4F:2B:44:9A:6D:21:E3:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/5b7ecece57be40d2d7acbf686245f6860d943ed3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.144.0/22
                IPv6:
                  2803:e340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264694

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:82:ec:83:a1:8f:ec:05:d2:95:2e:ac:05:a2:c5:8c:40:
         f0:d0:c9:e9:64:a7:ec:82:26:12:0b:84:bc:56:c5:52:b3:d0:
         d5:1f:01:71:66:85:41:0d:57:6e:d4:ea:4c:cf:ef:29:cc:5c:
         5d:d0:9d:32:90:4d:ba:da:21:e3:24:d9:5d:61:bb:df:54:c5:
         04:26:19:d3:a9:d9:71:83:cf:41:d6:7b:7f:38:ab:25:8e:0d:
         90:23:da:10:37:1d:79:58:e5:62:c4:5e:00:9d:aa:bd:f6:da:
         ae:54:fa:6a:11:42:04:91:34:54:31:d2:77:78:90:22:e1:1e:
         75:62:15:5e:09:7b:6a:f0:d8:00:9e:54:89:e3:e9:3b:c9:80:
         24:a7:b1:7f:2e:31:44:8b:b1:5f:07:5a:a1:fe:70:74:5b:13:
         be:1a:3c:86:fa:de:d2:e3:df:69:04:59:04:95:be:6e:68:e2:
         bf:3d:03:d9:a7:c0:90:c5:e5:ef:22:af:db:a0:7c:a9:be:17:
         d3:f8:a0:c2:a9:c6:5d:25:cc:c2:d3:41:d1:47:41:5d:2d:17:
         b0:fc:67:0f:d2:16:ce:e2:21:7f:b7:bb:2b:d2:f9:6d:fb:b6:
         ef:df:fd:18:18:a9:99:30:24:ea:28:7c:0d:79:5c:20:ad:d9:
         65:f9:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----