Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69dbd374c2a561eac76283ef20e457a087a19243.cer
File:                     69dbd374c2a561eac76283ef20e457a087a19243.cer (raw, json)
Hash identifier:          DhDas5lXQzY3S7MBpQpEi2ORWQhuX6Fzu1/kHqPUUDY=
Subject key identifier:   0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1B7EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/69dbd374c2a561eac76283ef20e457a087a19243.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Tue 16 Apr 2024 21:40:08 +0000
Subordinate resources:    AS: 263784
                          IP: 138.121.96.0/22
                          IP: 170.247.92.0/22
                          IP: 2803:3440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14792682 (0xe1b7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : Apr 16 21:40:08 2024 GMT
        Subject: CN=69dbd374c2a561eac76283ef20e457a087a19243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:50:23:27:0e:25:e7:73:68:50:4a:ba:d3:
                    79:bd:07:30:30:55:79:bf:a8:34:97:49:43:f7:49:
                    17:5f:46:c1:cb:e1:1d:f2:7c:8c:81:98:d6:50:a8:
                    f8:53:3e:07:6f:0a:4b:06:b8:f2:62:f0:02:db:75:
                    16:15:03:ae:06:6c:87:e9:19:99:75:ed:79:36:31:
                    e6:0f:2a:39:04:d7:dc:85:09:44:4f:06:78:9b:42:
                    7d:42:78:87:c0:97:ae:25:11:d6:39:23:50:37:ff:
                    de:97:11:e7:c0:fc:f8:cc:4e:ac:cd:0c:b0:24:5c:
                    c4:d1:b1:a6:dc:66:7f:59:4d:83:5c:55:48:3b:50:
                    86:f6:7c:7a:ed:6b:cf:60:58:62:9f:3b:bd:4d:59:
                    a6:c5:b3:02:88:5b:70:99:b9:09:01:e0:b1:96:5f:
                    83:03:67:1b:25:0a:78:9d:a7:6e:92:76:fb:33:6b:
                    65:35:0d:aa:ba:1b:cd:28:ca:a9:e9:ca:cc:85:02:
                    65:97:9a:01:4f:03:eb:68:8f:90:07:d1:0f:3c:3a:
                    34:f6:b4:3b:17:48:76:66:95:48:74:14:99:08:5c:
                    17:74:7e:c4:5a:24:d5:bb:ad:50:99:84:6d:7d:b9:
                    70:b3:31:3e:69:51:84:c3:81:4d:26:67:9a:2b:7f:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/69dbd374c2a561eac76283ef20e457a087a19243.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.96.0/22
                  170.247.92.0/22
                IPv6:
                  2803:3440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263784

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:c0:c2:f2:5f:1b:00:80:ca:67:00:4a:6c:7e:05:89:d6:
         da:88:56:98:ce:81:7c:18:d4:05:25:62:ad:5f:9d:e3:d6:62:
         16:a8:d7:29:46:88:f9:57:da:63:1b:6f:36:c0:4a:2a:e6:92:
         c2:10:bf:a6:9d:11:a0:be:4b:52:52:3c:7a:f8:e0:62:ac:e8:
         79:34:1b:2e:91:ee:9e:2f:5a:3f:83:c2:80:0f:57:60:26:f8:
         b1:b6:56:9f:bf:c8:af:39:b0:82:32:c2:ef:26:c6:10:ca:7a:
         64:3f:15:f7:64:a9:ba:a4:fc:01:e6:89:7b:45:5b:c3:fc:4a:
         7e:17:fd:59:8b:f0:50:10:1c:c1:fa:e7:12:68:fa:da:30:fc:
         f4:08:2b:29:09:52:60:97:fd:2a:59:1a:53:ac:d0:b9:f9:30:
         86:e8:ca:48:f1:41:6b:70:6d:7c:78:89:30:78:84:b6:57:c5:
         5a:a3:08:e3:0b:4e:75:b7:71:7a:44:77:fb:da:cd:e3:f3:8e:
         2b:a2:e7:7e:db:a4:32:72:65:47:0a:04:57:cb:29:1d:f3:7c:
         2e:5a:a0:5d:ad:f7:75:96:52:08:c7:33:b7:eb:92:2b:a6:a8:
         6b:b4:58:bf:68:16:59:70:39:bf:2f:73:b8:30:30:66:b6:4a:
         ce:a7:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----