Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer
File:                     6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer (raw, json)
Hash identifier:          s2RnLPQwKrtxSXGy0Q4zMz5gi73p9Di3FSskzq87Wwk=
Subject key identifier:   00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2BF9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/6930ea902e7534388d28d0e3ac75b7e3026edd6c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Sun 28 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 6568
                          IP: 168.205.96.0/22
                          IP: 181.115.128.0/17
                          IP: 190.129.0.0/16
                          IP: 200.87.0.0/16
                          IP: 2800:cd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14860189 (0xe2bf9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Apr 28 06:00:00 2024 GMT
        Subject: CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:9c:b2:65:c0:fd:0e:e4:d3:7f:95:f0:4a:
                    84:53:e1:18:99:8b:2a:9e:b6:c0:47:dc:43:1e:b8:
                    dc:48:10:f6:55:31:02:23:d8:48:1f:b9:b9:e6:a8:
                    ae:b3:3a:2f:50:03:a8:bd:a5:2f:1d:68:42:9f:b5:
                    01:61:f6:6d:5c:79:b2:4b:86:3a:e5:89:77:f5:65:
                    aa:38:6e:53:91:2a:aa:de:90:23:dd:96:dd:6e:98:
                    6a:d1:bf:c9:6a:bc:a4:09:af:7c:b3:f3:43:c0:cc:
                    0f:09:b6:8a:d0:95:ad:98:7f:9b:ba:0e:b8:41:5a:
                    6b:50:2d:95:8e:bb:71:4c:6d:c1:4d:0d:d3:be:f3:
                    34:2c:49:4f:e2:7f:aa:50:f6:76:de:13:69:f5:b7:
                    27:33:d1:7e:2f:5f:19:22:48:25:96:c5:fa:14:22:
                    c7:8d:14:29:11:21:f3:07:83:87:d2:ed:e2:08:39:
                    88:ef:dc:e5:2b:96:15:ef:98:37:29:87:4b:e5:f0:
                    7e:63:f7:b7:22:d3:e5:ad:50:6c:9c:72:bb:97:2b:
                    2f:64:14:be:ca:09:f0:ce:56:75:9b:8b:08:62:48:
                    31:13:fd:d4:3c:62:0f:e6:4c:bc:e0:7f:e8:8d:39:
                    53:91:e2:84:41:25:e1:a0:8c:90:42:54:ea:d0:0a:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/6930ea902e7534388d28d0e3ac75b7e3026edd6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.96.0/22
                  181.115.128.0/17
                  190.129.0.0/16
                  200.87.0.0/16
                IPv6:
                  2800:cd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6568

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:a1:1c:dd:19:08:25:f2:cd:92:6e:82:68:0a:4e:05:b3:
         45:7f:06:f6:c9:15:6a:78:58:84:7d:e5:77:9b:c3:78:cd:cf:
         7e:28:38:b1:99:90:7b:41:63:4f:d8:26:d8:4a:c7:93:ba:87:
         fe:ab:a6:4c:12:f1:85:17:3c:63:61:ab:a0:c8:a3:e3:51:bb:
         72:25:06:28:49:85:46:65:38:1f:2c:47:8a:00:10:c5:f2:5d:
         a0:2b:f6:f4:91:21:10:b1:79:d6:87:df:12:f1:77:f4:c3:a4:
         68:d6:62:19:91:69:c5:7d:23:61:76:3c:c1:f6:a2:99:54:8a:
         d4:9d:1f:02:f4:8e:21:66:31:b2:46:7e:38:d9:fa:62:dc:5b:
         41:50:80:d6:08:6d:14:fa:24:1c:e1:b4:cd:70:12:2b:ba:cb:
         bc:e4:07:44:51:e9:aa:86:b6:df:89:b5:ea:56:b3:70:54:15:
         b0:49:14:a7:26:26:cc:68:dc:ac:ab:c0:b6:0a:02:de:e9:00:
         52:35:78:a4:29:8b:8d:a5:9b:f3:17:a9:04:ee:1d:13:7a:3d:
         64:54:e4:a2:d2:0f:20:c2:9c:f3:24:dc:67:c8:fd:f8:4f:89:
         97:d6:53:5f:c9:a2:28:a7:df:2a:1b:37:87:ec:88:73:85:4a:
         ab:73:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----