Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/721190b3dd89257de2cbce56635d0b5c1cd94a6e.cer
File:                     721190b3dd89257de2cbce56635d0b5c1cd94a6e.cer (raw, json)
Hash identifier:          dNCPILpaEWTtrA5tGg8cCctDcu2+qwVW6tfkQUHrzDg=
Subject key identifier:   45:38:C6:F4:AB:34:02:56:4D:DC:AF:98:FC:5E:80:06:3D:5E:FB:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5CD72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/483823ee-4ad5-4666-a177-a1a0159c6dc3/721190b3dd89257de2cbce56635d0b5c1cd94a6e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/483823ee-4ad5-4666-a177-a1a0159c6dc3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Thu 16 May 2024 22:07:00 +0000
Subordinate resources:    AS: 266882
                          IP: 201.148.232.0/22
                          IP: 2803:5580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15060338 (0xe5cd72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : May 16 22:07:00 2024 GMT
        Subject: CN=721190b3dd89257de2cbce56635d0b5c1cd94a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:ac:85:c1:2b:ae:fc:20:62:6d:1f:4b:14:
                    8d:ea:92:cd:42:31:c6:b9:96:6f:0e:c0:29:b3:7d:
                    86:8d:da:8e:b6:48:b3:36:e6:d6:1a:b6:6d:15:7a:
                    34:71:6a:a3:da:80:0e:df:bb:9f:a1:68:94:64:c2:
                    7a:20:bc:d2:8e:f1:7b:b6:b2:59:4b:06:31:f7:69:
                    3c:40:9b:1a:8c:ec:0c:23:aa:43:8b:27:16:c0:a2:
                    21:8f:27:0d:7a:99:22:b2:ef:20:b7:96:70:aa:19:
                    f2:ef:67:8f:a2:d2:0f:fc:cd:86:71:2a:12:b2:18:
                    ea:fd:1b:13:06:83:3f:7c:cd:91:bc:27:5f:9d:87:
                    35:29:3c:b4:10:83:37:4f:a9:2a:6c:90:7f:11:14:
                    4a:eb:21:77:4b:62:9a:07:d3:15:54:4c:19:83:5c:
                    8d:b1:43:19:05:b0:bf:d0:75:54:ac:14:eb:fa:4a:
                    cc:ce:64:22:11:b2:40:af:57:f9:bb:48:14:30:75:
                    f6:1a:2a:61:37:4b:c2:0a:3f:ad:20:89:bf:11:52:
                    e5:6b:c5:5c:7a:0d:a6:f6:50:d9:5e:a3:ae:bf:99:
                    81:97:e8:e6:00:dd:f1:af:85:bc:e7:43:45:0f:36:
                    28:e0:42:b9:30:74:0f:04:4d:82:cf:ed:e8:7d:e3:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:C6:F4:AB:34:02:56:4D:DC:AF:98:FC:5E:80:06:3D:5E:FB:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/483823ee-4ad5-4666-a177-a1a0159c6dc3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/483823ee-4ad5-4666-a177-a1a0159c6dc3/721190b3dd89257de2cbce56635d0b5c1cd94a6e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.232.0/22
                IPv6:
                  2803:5580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266882

    Signature Algorithm: sha256WithRSAEncryption
         43:63:39:8f:93:c9:a2:28:c6:b8:5e:5e:dc:bb:f9:c4:17:53:
         07:59:64:d4:53:cd:39:6c:a6:ea:df:b0:a5:0d:e6:4c:5d:53:
         73:a9:ff:d0:bb:1a:32:d6:a4:d1:e2:a3:53:fb:07:e3:e3:c9:
         02:b9:81:a6:c7:f0:42:a9:5e:21:85:b9:03:2d:28:5d:15:98:
         1b:b5:34:be:fd:ae:9c:3b:ea:35:f6:b6:7f:f4:0f:15:60:82:
         97:53:cc:2e:01:25:c2:9d:d5:bd:df:4e:cd:61:6f:5f:3f:8f:
         4d:1d:b6:da:b1:8d:66:dc:d9:bc:f1:19:91:70:21:c2:e9:c0:
         1f:04:e1:72:ff:e6:04:7d:13:0e:cc:33:f5:5f:36:ef:42:08:
         21:45:eb:1b:94:e5:69:4d:4a:b6:f1:97:4c:9d:9b:88:86:e9:
         dd:1e:0e:26:61:7e:cd:86:de:69:66:be:0c:42:09:4f:88:6f:
         b1:d7:1c:e8:f7:72:d5:ad:30:0a:e7:8a:a5:7f:cd:e5:be:20:
         d9:4b:83:21:44:7b:06:f9:11:91:6f:57:40:94:49:de:76:16:
         4f:0a:02:d0:ce:ed:78:bb:8e:29:63:47:82:ce:7f:59:c6:9e:
         c3:fd:cb:3b:c3:ec:d0:58:39:75:d7:02:30:a0:0d:49:63:46:
         81:0c:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----