Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cb42c8f6d6731d93e137b62963133b0a6c2c089.cer
File:                     5cb42c8f6d6731d93e137b62963133b0a6c2c089.cer (raw, json)
Hash identifier:          MI0jZnMx4c2LTim32kPvQvQsto9ypBsw+LGiNvqOQZ8=
Subject key identifier:   AE:3A:EC:72:DF:99:B3:36:7F:32:25:0C:92:26:BD:1E:36:C2:64:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E13A22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/5cb42c8f6d6731d93e137b62963133b0a6c2c089.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Thu 11 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 27908
                          IP: 190.7.160.0/20
                          IP: 2803:d880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14760482 (0xe13a22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Apr 11 06:00:00 2024 GMT
        Subject: CN=5cb42c8f6d6731d93e137b62963133b0a6c2c089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:25:cf:46:db:bd:18:27:ab:59:df:90:5b:
                    5d:b3:c1:41:e9:cf:b2:a6:3c:1d:df:f7:07:98:81:
                    7e:60:27:06:b5:00:b4:ae:b0:e0:1d:72:4f:0c:7e:
                    e1:40:4d:16:88:cf:fe:50:cc:96:db:f0:2b:ce:df:
                    ca:6a:59:b5:66:58:d5:aa:bb:10:a6:63:10:be:6f:
                    64:dc:32:86:2f:34:01:b1:7b:0a:02:09:7f:d1:57:
                    6b:d5:61:2d:f8:56:d4:e7:86:2d:d5:5c:f7:66:ab:
                    5e:e2:f4:48:5a:47:c2:78:2d:1f:1b:61:81:38:6d:
                    cf:15:44:a5:51:1e:96:23:d3:87:59:68:f6:fb:ae:
                    f8:06:b4:cc:94:73:9f:76:63:a6:8e:c6:dd:4f:04:
                    b0:4c:78:3f:75:82:96:16:7b:2a:b0:a1:bf:8b:84:
                    8a:21:4f:07:ad:cb:d8:e1:ab:40:4f:54:22:f5:9a:
                    37:98:b5:c2:e2:66:3c:60:e7:be:58:99:51:9a:63:
                    3f:d0:6e:91:58:80:80:15:50:32:c9:ef:f8:6e:17:
                    6d:b1:60:3a:87:a3:4e:48:82:e3:50:0e:3b:7c:38:
                    4f:a9:f4:10:46:d5:65:50:01:2e:28:50:bb:b4:0e:
                    f3:3d:ea:93:c5:00:5d:46:75:a2:28:58:72:22:cd:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:EC:72:DF:99:B3:36:7F:32:25:0C:92:26:BD:1E:36:C2:64:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/5cb42c8f6d6731d93e137b62963133b0a6c2c089.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.160.0/20
                IPv6:
                  2803:d880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27908

    Signature Algorithm: sha256WithRSAEncryption
         00:67:07:87:ec:bb:86:68:22:ca:3a:9b:65:93:90:ba:81:54:
         d3:66:e7:b6:07:1e:4b:a6:5a:76:34:56:f9:88:58:15:98:04:
         f3:77:58:f2:d8:c6:28:47:80:4e:a3:e2:69:4b:5e:69:e0:47:
         87:bd:6b:f7:43:66:ad:88:67:63:3c:70:ae:0a:c2:39:60:7a:
         3d:19:c5:d7:92:cb:4b:ad:26:a9:f2:55:a7:21:dd:e0:7a:0a:
         76:81:ba:43:58:71:29:2f:c1:69:4f:5d:06:dd:62:18:05:6b:
         b4:47:73:df:90:c7:dd:c6:0b:3e:c6:da:fd:59:84:cd:dd:eb:
         b9:22:34:ed:c6:1b:aa:25:47:01:62:af:2d:d1:c0:7a:d8:10:
         2c:66:84:11:1a:11:dd:2b:58:21:74:18:83:ec:05:69:18:dc:
         b8:67:4c:f0:bf:13:04:6b:65:d1:35:05:a5:02:46:41:d8:53:
         7f:00:87:08:2f:c3:30:38:d7:18:20:31:5e:5a:a9:b4:c7:8b:
         05:64:56:74:95:04:3b:61:91:2a:95:d3:a8:5a:49:fa:cb:70:
         25:34:c6:59:ec:9f:22:e9:a5:9a:78:a6:95:89:c5:63:42:4e:
         e3:04:e2:70:54:19:52:5b:99:40:19:83:58:2b:24:a8:29:2f:
         7e:5c:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----