Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
File:                     6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer (raw, json)
Hash identifier:          xkWnJ/nEqQAKJPcWBT3oG4ZMw3DRaaeKNPkI6DtJr6w=
Subject key identifier:   09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3123C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Thu 02 May 2024 06:00:00 +0000
Subordinate resources:    AS: 61449
                          IP: 138.186.160.0/22
                          IP: 201.139.80.0/22
                          IP: 2803:580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14881340 (0xe3123c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : May  2 06:00:00 2024 GMT
        Subject: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:46:e2:31:b9:77:1a:1a:8c:6d:0c:36:4e:
                    b1:50:94:e1:82:f8:20:56:7f:cf:1f:9f:13:5b:6c:
                    09:c6:ac:e4:31:f4:d0:56:9d:75:84:ea:55:19:35:
                    01:20:ea:71:cc:fe:18:26:a0:6b:ab:61:cb:b0:50:
                    15:21:05:26:0a:77:a7:26:03:6f:be:1e:06:5a:51:
                    b1:42:18:cb:1f:28:0d:67:64:ab:d9:aa:a2:85:bc:
                    e3:9f:b2:a7:2a:05:9b:75:be:3b:c6:d7:7b:9c:a1:
                    65:8e:e8:96:24:67:c8:62:39:df:f5:39:ff:f5:b2:
                    be:6c:fc:42:dd:55:27:31:98:60:a2:76:36:64:d0:
                    72:1d:1d:3e:9d:e7:10:68:1f:33:a2:ce:fe:f6:64:
                    90:fb:a0:db:a9:5f:cf:ef:3e:d6:0e:5e:67:63:07:
                    be:bc:46:49:3e:89:81:41:6c:c9:e3:bd:e6:f1:48:
                    7c:6b:04:c5:7b:1f:ac:44:6f:4a:92:23:ca:c6:48:
                    d0:c1:e2:5e:e1:e7:cd:74:67:53:6c:63:2f:ac:ed:
                    2f:5d:c7:5a:36:2c:c5:ca:65:8f:5c:14:c0:1e:97:
                    32:ed:29:df:1f:6c:6e:a6:18:5f:98:63:07:96:dc:
                    d5:9a:50:df:0f:c5:71:37:6a:ae:5d:77:df:12:ef:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.160.0/22
                  201.139.80.0/22
                IPv6:
                  2803:580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61449

    Signature Algorithm: sha256WithRSAEncryption
         67:a6:76:84:6a:14:d4:07:32:eb:f0:da:a6:da:f1:0d:6f:bc:
         cd:5b:29:ff:62:b8:b0:e8:a6:57:ad:e6:77:ef:99:6f:15:27:
         97:77:4c:5f:07:bd:41:fb:ad:aa:65:ba:da:25:e7:77:d7:51:
         9a:c3:e7:97:b1:0c:cb:78:3e:95:2f:7d:3a:3f:bb:5f:3d:4d:
         84:50:10:64:62:b2:9a:dc:93:f7:2d:ed:a0:40:cc:03:c8:73:
         03:49:3e:30:75:7d:a5:e0:f7:88:77:2f:31:38:4e:52:9e:63:
         02:53:aa:b5:81:21:9a:5c:c9:ce:49:00:1e:db:73:d2:fe:62:
         cd:c3:c6:b4:a5:ce:50:87:2a:c5:d5:6e:db:3d:8f:25:2f:bb:
         af:10:fd:c6:ef:2d:cf:73:72:f9:14:03:13:a7:16:1a:66:6a:
         67:be:63:5d:a8:1a:17:54:a4:ef:a4:17:ed:c9:56:fc:53:11:
         77:e5:ed:49:81:2b:02:2c:ea:41:f3:49:1e:26:a2:e8:72:fb:
         65:2f:1f:7c:f1:e3:43:2c:d4:bd:6d:bb:91:f9:43:59:a6:1a:
         d4:09:a6:6b:54:b2:bc:e5:ad:e9:56:c3:c6:f3:df:5d:4b:e6:
         6e:97:58:24:3d:65:4d:61:e4:55:70:ff:dc:d3:18:d6:10:bd:
         d0:68:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----