Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bba824531e9ca479de15a44d5f7974cbb2531e9.cer
File:                     7bba824531e9ca479de15a44d5f7974cbb2531e9.cer (raw, json)
Hash identifier:          laxFXvuJIikE6NeSBGh6JUZCCA7unYNoof0HoiS5HDg=
Subject key identifier:   E2:13:28:0E:3F:93:86:5D:F1:6D:24:C4:8B:89:DC:6F:77:86:AD:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F92733
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/7bba824531e9ca479de15a44d5f7974cbb2531e9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2017 18:46:29 +0000
Certificate not after:    Sat 12 Oct 2024 17:55:25 +0000
Subordinate resources:    AS: 266673
                          IP: 45.228.136.0/22
                          IP: 2803:8920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16328499 (0xf92733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 12 18:46:29 2017 GMT
            Not After : Oct 12 17:55:25 2024 GMT
        Subject: CN=7bba824531e9ca479de15a44d5f7974cbb2531e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:8d:03:8a:20:40:1f:6c:f4:c1:cc:7f:9a:
                    a7:61:69:ce:1d:b0:85:b4:12:0e:72:7a:3f:28:f5:
                    22:61:63:80:0c:fd:55:b2:df:7e:8e:00:60:5e:16:
                    04:e0:3f:b3:87:ab:36:ff:86:79:b0:14:7f:23:a8:
                    e4:29:12:71:e9:fd:73:fc:49:70:c1:49:5d:8c:7b:
                    c4:96:d0:f3:5e:61:75:54:d9:eb:c1:a9:e1:c8:54:
                    af:c4:cc:4b:7f:3f:90:8e:99:0a:3a:a1:de:79:77:
                    b9:4e:97:d9:dc:6a:fd:22:bc:f8:37:db:39:d8:62:
                    17:a3:1c:de:3b:cc:22:ac:24:6d:22:1f:0f:b8:a8:
                    69:c7:e1:df:6d:65:65:cb:d4:ce:c9:77:34:50:d0:
                    92:c0:37:75:a5:11:4f:4a:de:5a:2f:2e:5d:61:4c:
                    b7:1f:61:72:a8:53:cf:07:30:c2:71:c6:68:c5:4f:
                    ec:ca:99:71:38:21:10:8c:13:15:8e:35:6e:ea:1a:
                    f0:98:53:9d:0e:aa:95:cb:02:5a:3c:e1:34:86:45:
                    e7:1a:e0:d9:64:04:3e:66:33:55:15:46:f4:25:24:
                    27:b1:78:f4:06:c9:b3:ba:06:bd:7e:8b:27:4b:e9:
                    71:0c:94:b4:1f:db:7b:53:ad:79:e1:6b:5d:d7:ac:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:28:0E:3F:93:86:5D:F1:6D:24:C4:8B:89:DC:6F:77:86:AD:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/7bba824531e9ca479de15a44d5f7974cbb2531e9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.136.0/22
                IPv6:
                  2803:8920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266673

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:d9:76:ce:c5:ca:85:7c:28:ea:02:63:81:cf:fb:66:50:
         cf:38:35:b9:42:bb:2f:8c:ff:c0:6f:2e:51:df:da:37:1f:fb:
         92:83:ec:6b:93:4d:4b:be:f8:0a:6a:30:98:3f:b3:97:7e:0d:
         8a:92:7a:fb:76:08:ab:b9:c8:61:8b:74:06:66:57:fe:5d:a6:
         49:ac:cd:19:0e:86:2e:78:1b:9e:48:73:c4:50:bf:e8:58:42:
         bc:f0:ac:3c:36:ac:81:40:94:2f:77:92:8c:c2:90:e1:86:3f:
         a9:00:02:0f:e3:c7:5a:5a:d9:27:ed:7c:c1:a6:25:50:70:6e:
         19:84:89:7e:85:0d:53:9a:81:c8:a9:16:01:35:8c:d4:1b:80:
         1c:87:3a:b0:1c:e7:93:b5:e2:6a:37:be:43:b5:d0:1b:c8:94:
         7c:cb:fd:b0:85:75:d7:8a:5e:d8:8a:77:69:a3:58:60:8f:c6:
         db:e0:fe:59:b0:67:b8:af:cb:c7:be:1c:69:b1:29:bb:18:e5:
         73:89:e9:6b:8d:55:e4:67:bc:0d:d4:c6:dc:c8:50:00:5f:19:
         bb:24:5b:77:da:8c:ab:1b:59:6c:cb:fb:1a:3f:99:3c:05:fa:
         31:b8:38:76:3f:4d:a8:7f:da:8e:37:c8:43:1e:f9:a6:69:1c:
         91:b2:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----