Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6be393e45115b660820b61ac8c4ad69627b29fa3.cer
File:                     6be393e45115b660820b61ac8c4ad69627b29fa3.cer (raw, json)
Hash identifier:          wGHr3NYHk8aGpZRWMHTrWTHffeVZRdPYG6YfsvI5kJA=
Subject key identifier:   EB:44:B3:06:5B:A6:C4:B7:C1:C3:F9:3B:F7:75:8E:B5:09:ED:3F:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2A55C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/6be393e45115b660820b61ac8c4ad69627b29fa3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Thu 22 Aug 2024 17:03:10 +0000
Subordinate resources:    AS: 264625
                          IP: 143.208.36.0/22
                          IP: 2803:2140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15902044 (0xf2a55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Aug 22 17:03:10 2024 GMT
        Subject: CN=6be393e45115b660820b61ac8c4ad69627b29fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6e:bf:9f:26:68:39:5a:9b:67:18:ec:8e:56:
                    b6:b1:68:ad:8f:38:a5:af:9f:d2:75:f5:4c:c5:a2:
                    0e:e7:69:af:bd:c3:d7:88:7c:95:59:4f:ab:d9:49:
                    fc:25:56:3d:63:ab:08:de:e7:16:61:a0:3d:a2:cf:
                    26:aa:04:a4:7b:16:9f:e9:b4:8d:a6:9c:53:89:79:
                    a1:64:0e:9a:59:81:58:dd:98:20:16:23:15:76:3c:
                    1d:f5:6c:8f:bc:24:c8:e8:8b:02:c4:a7:aa:95:eb:
                    9c:dc:dc:2e:59:d1:e1:cd:db:4c:54:f6:8b:6d:02:
                    73:11:8b:46:49:19:5f:2d:3e:01:45:76:fa:9a:e6:
                    3c:6b:18:94:6d:be:bb:84:27:20:a0:d0:fd:dd:b9:
                    69:b8:37:be:3c:5b:5d:54:cb:7c:12:85:40:19:df:
                    5e:72:12:3b:db:53:4c:54:08:0b:53:f6:e9:14:ad:
                    b6:96:16:22:21:27:af:76:b9:b9:e7:c2:90:84:90:
                    ef:3c:e4:92:a2:be:2c:56:a9:1f:6e:6a:18:40:a4:
                    98:af:89:f8:65:f8:8e:6c:4d:1c:06:c3:ce:00:af:
                    bd:f6:b5:df:ba:61:68:26:e3:b0:2f:18:ac:9c:6d:
                    62:93:9b:5f:5e:d3:4a:e4:1b:a5:53:37:f9:98:11:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:B3:06:5B:A6:C4:B7:C1:C3:F9:3B:F7:75:8E:B5:09:ED:3F:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/6be393e45115b660820b61ac8c4ad69627b29fa3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.36.0/22
                IPv6:
                  2803:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264625

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:e0:7a:8e:85:24:91:ff:f9:63:9d:df:c2:e3:4d:2f:37:
         8e:49:95:9d:7c:0b:b7:0f:73:0e:c3:2a:30:2a:c6:89:b4:bc:
         90:d6:41:8d:72:26:ae:c6:ed:f9:57:66:86:58:c7:17:03:09:
         40:6d:b2:36:06:03:de:7e:6f:e5:d0:68:e4:98:8b:37:66:74:
         5a:e6:39:ba:bd:b1:77:c8:1f:7a:27:65:9b:22:e1:fa:c0:2d:
         b9:9e:16:6f:41:ad:f0:c5:6f:13:77:a9:85:2b:10:f9:c8:22:
         18:ae:0d:b6:bf:fd:ce:a9:82:f7:74:da:99:e8:89:7e:1b:0d:
         b4:95:15:28:ef:50:1b:dd:37:4d:f1:31:d6:eb:fc:21:1b:63:
         22:b7:af:c8:ab:4f:e2:6d:50:c3:14:f1:07:d8:8d:38:6f:fa:
         bb:61:b8:ec:01:9a:06:70:b4:89:8b:cc:2c:9c:e1:88:c8:12:
         2b:0c:e8:a8:cd:17:db:73:3d:60:08:ed:93:36:7e:ae:68:f4:
         f0:0b:f4:31:fb:ed:1a:fc:7d:38:a3:13:f4:fa:c8:27:9c:d3:
         8b:58:3a:ec:0c:b2:d4:a5:bf:00:72:e9:7f:a2:0f:85:2c:36:
         67:f6:63:47:f8:13:e8:a5:44:4f:3c:4d:9a:53:f7:b6:d8:2b:
         87:18:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----