Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64d629547d0c8d03b0d7b2d292af5ac919873ff2.cer
File:                     64d629547d0c8d03b0d7b2d292af5ac919873ff2.cer (raw, json)
Hash identifier:          RTCuSAsDS0738iHpgYP6zsm4UItyCkDcpTpJzB4v83M=
Subject key identifier:   C8:80:DF:C7:9D:0A:2E:6A:07:9C:1C:FD:43:38:DE:3A:0A:DA:04:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6AF40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09b63514-f264-4c61-9d52-1f161aa60623/64d629547d0c8d03b0d7b2d292af5ac919873ff2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09b63514-f264-4c61-9d52-1f161aa60623/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Wed 22 May 2024 18:06:23 +0000
Subordinate resources:    AS: 263802
                          IP: 138.186.188.0/22
                          IP: 2803:240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15118144 (0xe6af40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : May 22 18:06:23 2024 GMT
        Subject: CN=64d629547d0c8d03b0d7b2d292af5ac919873ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:67:fc:92:5f:a8:a5:90:83:90:bd:65:0b:
                    22:56:ab:6d:f9:91:78:67:9e:68:7e:77:bb:80:85:
                    7a:58:13:56:83:6c:a6:e7:8a:73:91:c3:31:80:21:
                    e3:03:6d:f3:17:65:62:1b:31:a3:dc:53:0e:b3:03:
                    ee:fe:8b:e3:84:a6:86:28:88:8e:47:b2:7f:9a:68:
                    05:08:39:20:22:95:80:8b:05:1e:97:a6:bf:36:9f:
                    98:dc:95:f7:f4:a8:56:b0:2a:d6:2e:21:4f:e8:dc:
                    3d:6b:09:bf:e0:bc:4f:e5:45:62:39:f9:9d:0f:28:
                    02:1a:09:bf:58:df:98:22:00:2a:56:7e:70:47:19:
                    f5:ad:18:16:26:ef:6b:44:8f:74:29:3e:3c:a5:e7:
                    a6:21:37:70:70:16:64:8c:2e:5e:e2:2e:51:bb:14:
                    14:a0:40:b8:8a:18:7b:7d:98:57:b1:61:51:0a:5e:
                    3a:8d:6f:b4:ac:95:90:98:af:62:70:4e:a1:c3:48:
                    1c:92:a9:2e:89:b7:36:8d:9a:c4:17:66:e0:7f:ea:
                    f7:20:e1:18:77:5a:14:0d:28:f7:1c:80:c3:d4:37:
                    1a:a0:a3:53:ff:f7:32:25:be:97:89:07:d1:dc:ff:
                    a3:55:5d:b0:6b:2c:d2:22:7f:8b:f8:8b:03:50:d7:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:80:DF:C7:9D:0A:2E:6A:07:9C:1C:FD:43:38:DE:3A:0A:DA:04:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09b63514-f264-4c61-9d52-1f161aa60623/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09b63514-f264-4c61-9d52-1f161aa60623/64d629547d0c8d03b0d7b2d292af5ac919873ff2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.188.0/22
                IPv6:
                  2803:240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263802

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:df:fc:92:bf:35:01:37:52:f4:71:f7:cc:ad:b4:3c:66:
         37:55:20:4b:6d:be:f1:b3:2f:47:e0:16:2b:6e:3f:6c:b4:23:
         3e:55:98:8c:8c:bc:fd:65:73:6f:f9:fc:b9:fb:bd:38:50:47:
         55:ba:b9:22:eb:7e:62:33:d0:5d:64:95:4b:ad:54:f7:20:db:
         ad:82:90:cd:3b:b9:9b:ac:35:90:d9:5b:47:98:8a:c8:7f:61:
         21:b7:ad:72:12:33:bf:e5:ec:7a:6f:ec:3a:0f:b0:95:11:7a:
         4d:fe:1d:a4:f2:c6:2f:9d:e5:13:12:f8:97:94:b1:4d:5b:db:
         d6:26:0e:18:df:7e:7e:4b:25:fe:e5:1c:44:e6:86:cc:e6:43:
         d6:dc:27:16:d7:4a:f5:02:65:eb:61:82:2b:4b:e5:d6:16:71:
         6e:13:eb:24:dd:d9:c0:8b:e3:8d:0c:22:89:b8:93:7c:6e:c0:
         b2:aa:0f:fc:67:95:24:d1:68:af:c1:c4:fa:1f:9f:0f:bb:50:
         4f:d2:0e:87:d6:13:cc:5f:de:bd:ea:9b:d9:f5:88:18:4a:47:
         00:69:52:05:e4:08:d5:c7:92:ca:a1:97:05:30:1d:e1:3b:41:
         89:73:e8:7c:dc:cd:eb:3b:95:10:67:f6:67:86:de:52:46:33:
         ef:cd:da:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----