Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/731610640063561b294840cbdb7b67bb5e4dba3d.cer
File:                     731610640063561b294840cbdb7b67bb5e4dba3d.cer (raw, json)
Hash identifier:          Gjq5cnJChfDTmmrxUdfeYsZwaslKbGlmWIRKStCccDw=
Subject key identifier:   59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DAE9F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/731610640063561b294840cbdb7b67bb5e4dba3d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:32 +0000
Certificate not after:    Mon 29 Jan 2024 18:33:36 +0000
Subordinate resources:    AS: 265691
                          IP: 45.5.68.0/22
                          IP: 2803:f1c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14346736 (0xdae9f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:32 2017 GMT
            Not After : Jan 29 18:33:36 2024 GMT
        Subject: CN=731610640063561b294840cbdb7b67bb5e4dba3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:68:3f:59:41:d7:96:94:f5:4b:3d:84:9e:
                    c7:83:61:4e:e3:66:4a:36:60:5d:ae:d1:37:00:ac:
                    e4:6c:32:ef:fe:7c:fe:c2:36:61:97:41:0e:f1:4a:
                    d4:70:c0:c4:2f:96:1c:fc:fb:fb:f5:d7:79:f6:be:
                    97:76:af:a2:e6:c2:61:63:d0:92:13:41:33:2a:ba:
                    c8:0e:64:6e:ff:af:73:85:ed:da:52:91:05:d2:9f:
                    fa:a8:22:9f:74:08:92:c5:67:c3:9e:94:f4:f7:ca:
                    3c:9d:e7:24:d3:ca:0c:40:76:a7:d3:71:c9:f0:84:
                    46:eb:c6:04:a5:43:1d:0a:89:d3:8f:33:44:d3:86:
                    2b:37:1e:90:c1:ce:cf:fa:b1:2e:6e:51:c6:be:7c:
                    05:88:12:2b:ba:0a:ff:e4:07:34:8b:84:e5:b6:cf:
                    23:10:0c:76:8d:db:93:af:8a:59:f9:df:22:db:c1:
                    97:95:49:e8:2f:d0:e4:5e:79:d9:a2:e2:1d:cb:38:
                    73:8c:6a:fd:e2:fd:cb:fb:be:0b:af:6e:fb:cf:c7:
                    bd:a7:fe:41:e1:40:75:81:85:1d:b9:c8:7c:66:ce:
                    11:a9:cd:49:94:52:78:df:fc:9b:27:bf:7c:94:c3:
                    62:ca:b0:37:6c:80:78:53:31:e2:4c:0b:75:a3:21:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/731610640063561b294840cbdb7b67bb5e4dba3d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.68.0/22
                IPv6:
                  2803:f1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265691

    Signature Algorithm: sha256WithRSAEncryption
         b9:2f:9f:dc:af:26:51:4b:86:8e:3d:1e:1a:b0:25:2f:1a:64:
         0e:95:36:63:54:73:0a:b9:0f:e2:b9:78:d3:00:27:80:2b:e6:
         b8:f8:0e:97:28:5d:61:1a:7c:18:4c:85:87:01:7e:3c:90:76:
         ae:b5:0b:81:9f:c0:85:cc:26:9a:03:fd:f9:dc:cc:f0:82:fc:
         d6:3f:92:12:c3:e8:e9:84:11:50:13:66:2e:81:34:fd:15:25:
         e0:9c:7f:29:bd:1f:e3:a2:0b:a4:5b:fd:39:a4:89:92:e1:89:
         a0:62:79:d5:e2:54:c3:6a:44:08:77:10:b3:03:b7:69:5d:2b:
         f7:47:8f:5a:7f:96:66:3f:a5:39:ec:ff:cb:79:c9:2d:5c:66:
         b8:fb:31:e6:a0:9a:cb:d8:77:1a:ee:5d:4c:78:5d:4e:84:20:
         ee:9a:0b:9c:bc:84:92:60:f9:fe:3e:e8:89:d1:d4:ec:f8:99:
         0e:1d:c0:45:cf:75:41:39:30:dd:31:e8:04:22:26:31:8d:f5:
         d9:77:ff:ca:72:0f:6b:fb:8f:dd:c9:6b:d8:27:d6:7d:ed:d9:
         f1:fb:01:dc:c7:59:48:8b:6d:fa:f4:58:22:4e:4a:9b:c6:b6:
         dd:fb:85:76:b9:ed:f9:cb:f1:e4:a3:df:0d:77:28:a7:14:c2:
         94:c0:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----