Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/770081b05d4f26fbe37e5b4b03f13da1e17e69ab.cer
File:                     770081b05d4f26fbe37e5b4b03f13da1e17e69ab.cer (raw, json)
Hash identifier:          oQ6s9h280GRD6yiznzVcCHE7TKSwu9pmAidtH89HW1w=
Subject key identifier:   FE:45:71:10:41:6D:F4:44:99:6F:81:A6:8B:98:17:7B:F4:8D:BA:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB6B71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bfe183f7-b931-43b8-bb2d-a8cd7c8f5ed1/770081b05d4f26fbe37e5b4b03f13da1e17e69ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bfe183f7-b931-43b8-bb2d-a8cd7c8f5ed1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Tue 06 Feb 2024 17:10:21 +0000
Subordinate resources:    AS: 263750
                          IP: 138.99.100.0/22
                          IP: 2803:a040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14379889 (0xdb6b71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Feb  6 17:10:21 2024 GMT
        Subject: CN=770081b05d4f26fbe37e5b4b03f13da1e17e69ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:c4:bc:66:7f:6e:63:03:d2:5a:c7:99:54:
                    5e:86:ce:13:c4:ae:99:aa:92:99:ac:6f:1d:fc:9b:
                    32:96:dd:af:d2:05:c4:47:57:00:f6:09:db:99:56:
                    be:0a:31:bd:7c:82:78:00:bb:6c:8d:54:68:9e:82:
                    f7:67:38:8c:af:f6:4d:05:53:24:35:e2:e1:61:97:
                    66:3f:7c:5d:b7:52:23:80:1f:0f:6b:3e:7e:2d:53:
                    1e:d5:6d:a4:1f:bd:e5:3c:19:84:a6:bc:e1:c1:14:
                    2d:bd:cb:c3:23:0b:82:c5:a1:20:96:ad:ff:88:a5:
                    c5:8a:8e:be:4d:0b:b0:69:41:67:f4:c9:3f:90:a2:
                    ef:06:6d:e5:44:42:68:0b:9e:e7:6e:5a:71:4c:15:
                    28:17:c8:cc:0d:4e:2c:e5:b7:74:d0:9f:3f:30:79:
                    d0:a8:2f:24:a8:b2:31:19:f7:a7:de:eb:a8:61:64:
                    9b:1c:76:ef:6b:6d:e3:4f:90:36:cc:af:37:82:e5:
                    d8:15:fc:ca:df:e9:ad:dc:bd:b9:97:63:11:1f:87:
                    12:e5:95:fd:08:74:b2:0c:b2:fb:8f:63:ad:d0:54:
                    72:cd:ec:9d:98:b8:e2:65:de:36:83:c5:14:ae:f8:
                    52:f7:71:59:61:f6:29:84:18:b8:ac:81:ed:d1:12:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:45:71:10:41:6D:F4:44:99:6F:81:A6:8B:98:17:7B:F4:8D:BA:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bfe183f7-b931-43b8-bb2d-a8cd7c8f5ed1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bfe183f7-b931-43b8-bb2d-a8cd7c8f5ed1/770081b05d4f26fbe37e5b4b03f13da1e17e69ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.100.0/22
                IPv6:
                  2803:a040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263750

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:21:ad:ec:01:93:42:00:88:e3:66:00:5a:52:26:df:18:
         70:e3:55:aa:e0:15:b0:02:da:4a:a0:da:71:42:2c:59:63:62:
         8f:8d:ba:ac:7e:57:78:ec:00:87:d1:5a:04:ee:9b:3c:e6:0b:
         d0:1c:ad:93:85:17:3c:14:69:df:f1:eb:4b:8b:fa:61:35:04:
         23:23:0f:15:c4:4b:2f:e4:76:b5:2b:73:40:28:88:4f:85:cb:
         97:be:3c:34:55:56:76:43:e7:0b:29:64:40:65:e0:db:57:50:
         70:ce:c8:7e:27:88:83:7d:4d:d7:90:81:7a:ce:8c:66:f2:5f:
         82:cb:2c:50:0c:d9:0b:53:b9:a6:c7:88:b9:c2:2a:ec:b9:8a:
         13:ee:8a:dc:39:3c:39:9f:be:69:ef:5a:8f:fc:70:b7:5f:eb:
         3f:3c:b7:4e:7b:7b:a1:e7:f2:16:14:9b:65:de:15:d4:5f:9f:
         c6:8b:17:fb:72:3d:d7:a6:9f:3f:eb:8b:4c:b4:8f:4a:e7:bc:
         fb:77:f1:68:53:a0:13:d6:e6:d6:94:e2:31:c2:db:68:92:96:
         71:aa:be:92:48:af:56:5b:22:91:1d:48:8d:5a:e5:b3:83:ad:
         51:86:14:45:9f:33:42:d2:ed:e7:f8:b4:86:56:b8:ac:94:8f:
         9c:ea:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----