Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6693e93c486e730f1cfef8fe615bcbd143f57d5b.cer
File:                     6693e93c486e730f1cfef8fe615bcbd143f57d5b.cer (raw, json)
Hash identifier:          3R23azPJzNhFkZUOsurvz5dbTmEbPMCplCKz7C5zgHc=
Subject key identifier:   49:62:A9:0E:30:8E:BE:64:FF:3D:3E:20:BE:19:38:A4:2D:D1:89:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2E5F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/6693e93c486e730f1cfef8fe615bcbd143f57d5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Sun 25 Aug 2024 18:38:05 +0000
Subordinate resources:    AS: 264800
                          IP: 170.79.180.0/22
                          IP: 2803:64c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15918580 (0xf2e5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Aug 25 18:38:05 2024 GMT
        Subject: CN=6693e93c486e730f1cfef8fe615bcbd143f57d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:0c:2b:d9:e7:48:6c:d8:2a:75:da:02:5d:
                    c8:ad:27:5c:21:a9:c0:62:26:a5:f6:b8:eb:29:05:
                    58:11:5b:6b:6b:3f:12:f2:82:fd:42:c2:30:0d:f2:
                    10:5a:b1:30:96:59:dc:91:59:c2:b6:96:61:26:17:
                    34:ca:63:6d:9f:e9:3e:57:1f:63:11:9d:7c:ca:70:
                    07:73:b0:27:b6:27:37:b6:84:bd:34:e1:08:c9:5c:
                    e0:e4:00:15:a8:47:09:a8:9d:92:31:cc:2b:b5:2d:
                    0e:72:66:ce:8b:2d:b5:b7:d5:5e:19:6a:52:4a:97:
                    b2:b8:2a:17:19:8b:f2:0f:fb:57:c6:b0:2e:15:c1:
                    0e:ce:3e:d6:34:e8:ec:65:1e:25:9b:20:1a:38:6f:
                    dc:65:ae:5e:20:a5:e9:59:ec:ea:f4:2a:0c:d6:b6:
                    9f:b0:a8:93:7e:6c:bb:3f:6c:eb:cf:cc:33:af:c6:
                    45:f4:7c:a4:86:62:2f:77:c5:3f:8a:a6:60:54:12:
                    fd:10:cf:f5:c5:19:45:60:5a:93:f6:6b:4e:3f:0b:
                    b7:10:f2:a2:8f:b7:fe:15:16:94:16:76:25:af:90:
                    d0:53:52:dd:b4:b6:76:4a:e9:d9:3f:99:e7:ea:45:
                    1f:90:35:62:e7:3a:63:8d:dd:fe:d7:5f:5f:3b:7a:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:62:A9:0E:30:8E:BE:64:FF:3D:3E:20:BE:19:38:A4:2D:D1:89:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/6693e93c486e730f1cfef8fe615bcbd143f57d5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.180.0/22
                IPv6:
                  2803:64c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264800

    Signature Algorithm: sha256WithRSAEncryption
         92:4f:9f:8a:04:5a:5c:ee:46:3c:e1:8d:00:87:14:29:1a:7c:
         8e:22:75:6c:af:0d:9a:6a:5a:1e:06:ea:2d:08:d6:e2:63:d0:
         71:b8:d0:db:71:ac:3b:b2:50:b2:57:91:35:58:71:05:0b:86:
         b9:78:58:bf:26:ea:2f:b8:b2:ae:1f:3d:8b:7e:29:7e:8b:07:
         fd:cc:61:6a:5d:a9:ea:be:04:3e:8c:3b:56:95:5e:4c:53:3e:
         44:b0:3c:a3:d3:05:b5:74:0c:aa:ff:a6:8e:0a:c7:13:ad:50:
         98:c9:d2:19:f0:1d:53:73:60:21:bf:67:7e:8a:96:45:72:7e:
         98:72:87:ed:52:85:ee:fe:3b:32:42:a7:35:6d:84:0c:4e:ae:
         88:74:41:e4:3e:8a:4c:d3:f4:92:cb:8e:bb:25:5d:e0:67:0e:
         7c:da:71:6e:8b:ad:a5:ad:6c:2e:4e:17:c2:6c:b9:46:53:a5:
         1e:b2:b7:67:fc:20:db:3e:64:7f:85:1e:74:7d:d7:fc:95:65:
         76:41:77:d8:11:8d:12:1e:67:12:8b:e0:a4:93:83:d9:92:a9:
         ce:c6:a4:db:02:90:16:a8:fb:15:9c:4d:50:9f:b4:30:a6:c7:
         5b:ff:6b:a5:9e:cb:c0:aa:2f:b8:dd:53:29:3e:52:5e:7c:c7:
         22:bd:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----