Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/697f7b62a9effacb2f280acd01e6e06384827e4d.cer
File:                     697f7b62a9effacb2f280acd01e6e06384827e4d.cer (raw, json)
Hash identifier:          34Y461nVex0BHtAg/z4YpA/8xdqb6kztYiRv2ww61J8=
Subject key identifier:   B4:2B:DF:40:82:FA:C1:81:C2:46:57:25:EE:17:B7:E7:E0:7A:06:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD5220
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/697f7b62a9effacb2f280acd01e6e06384827e4d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Mon 18 Nov 2024 17:29:01 +0000
Subordinate resources:    AS: 262212
                          IP: 190.96.104.0/21
                          IP: 192.188.57.0/24
                          IP: 2801:0:270::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16601632 (0xfd5220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Nov 18 17:29:01 2024 GMT
        Subject: CN=697f7b62a9effacb2f280acd01e6e06384827e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:d2:fd:20:a2:3b:2c:9f:ce:67:1e:21:a8:
                    b3:11:b1:50:c5:02:ff:0a:07:28:02:e1:1f:b9:c5:
                    6a:fc:d6:3d:b3:50:f7:67:a5:84:0a:a2:a1:f1:96:
                    11:bc:b8:1b:b6:fc:d0:2f:46:e8:84:e7:05:9e:2a:
                    11:c1:5e:e1:3a:9c:f4:ae:d9:fb:70:f9:40:da:a9:
                    e7:ae:35:9c:62:d4:28:6d:5a:12:53:2a:fb:60:61:
                    76:8a:e9:0d:92:81:5f:0a:e8:d5:51:df:65:26:76:
                    92:94:a9:d4:21:19:89:43:37:15:cf:72:94:f0:6b:
                    d7:f9:b3:a2:bf:92:cc:1c:a1:d9:1a:4b:33:7f:29:
                    71:3f:9a:b5:4e:94:f3:ca:a3:23:4c:98:fc:f3:4c:
                    f8:85:35:03:5a:01:f6:68:64:ba:ef:cb:8c:e9:00:
                    72:06:bb:32:3d:4f:3d:19:91:6b:21:36:ce:3a:8b:
                    eb:f8:30:61:26:1c:ca:65:91:3e:e8:5c:92:2e:5d:
                    f2:64:f0:19:20:9d:e7:f5:6a:33:57:b5:c1:69:8d:
                    0f:c7:8b:45:6d:08:ce:eb:10:81:f9:b2:1b:05:30:
                    18:22:71:d4:9e:e2:42:3a:2d:ba:9b:46:2d:56:df:
                    3e:50:46:4b:58:c8:55:d0:03:c3:96:8e:1e:43:41:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2B:DF:40:82:FA:C1:81:C2:46:57:25:EE:17:B7:E7:E0:7A:06:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/697f7b62a9effacb2f280acd01e6e06384827e4d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.104.0/21
                  192.188.57.0/24
                IPv6:
                  2801:0:270::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262212

    Signature Algorithm: sha256WithRSAEncryption
         95:df:eb:05:43:36:16:5e:85:6c:9f:15:8c:50:a1:98:3a:75:
         cc:5a:8e:9f:5a:34:1d:05:8c:2c:e9:be:62:74:dd:a0:b9:1a:
         b3:9d:45:48:11:c4:e4:92:19:9d:6c:50:dc:4c:85:dc:5b:3b:
         7d:aa:4d:c0:02:1d:82:ac:10:15:85:9c:bb:60:ea:b0:66:62:
         6c:65:44:b6:11:3e:58:de:db:e5:54:d7:b7:78:45:1a:0c:2f:
         be:7d:a8:44:84:39:7f:4f:b3:3e:c6:d9:5e:a0:35:f0:45:1e:
         0b:e6:7e:73:f3:9c:c3:fe:91:d0:ca:2d:6f:3a:4e:da:cc:89:
         e3:c6:16:eb:7a:ea:e1:99:a4:1c:d3:82:50:7b:bd:64:3c:0d:
         21:01:79:03:4b:18:23:e8:32:09:65:02:3a:f9:56:14:9d:1c:
         3d:ef:cf:38:cc:99:34:d6:44:85:f4:e6:88:0a:cc:fb:5c:3a:
         22:cf:cb:eb:76:8f:bd:51:74:38:1b:1c:a3:ef:33:99:a0:5d:
         cd:dd:b8:80:f5:f8:76:be:e0:dc:05:53:11:e2:3b:f4:ea:a4:
         02:fa:94:ba:65:d9:ee:3b:0f:3a:bf:6a:69:0c:ed:c9:92:be:
         69:49:ea:59:c8:b2:ff:87:67:5a:47:3c:c1:1d:4e:12:ec:23:
         be:bf:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----