Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa6f3db8d0c6e7c34a090038461e357bad000ef.cer
File:                     7fa6f3db8d0c6e7c34a090038461e357bad000ef.cer (raw, json)
Hash identifier:          +RP8QAZY6+CyRRLoKlvfOdRN7hz63ftWE0o2rYWBxjM=
Subject key identifier:   A4:F7:B4:FA:AF:D4:B3:16:91:89:F1:56:B5:21:06:53:74:47:80:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F133CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:35 +0000
Certificate not after:    Fri 09 Aug 2024 18:58:13 +0000
Subordinate resources:    AS: 265836
                          IP: 45.71.152.0/22
                          IP: 2803:6220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15807436 (0xf133cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:35 2017 GMT
            Not After : Aug  9 18:58:13 2024 GMT
        Subject: CN=7fa6f3db8d0c6e7c34a090038461e357bad000ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:60:47:34:ca:60:13:aa:fa:9c:8e:f9:89:
                    0e:5c:66:82:6f:52:0a:60:50:e3:df:f9:a6:9a:16:
                    70:68:45:12:41:ed:80:fa:eb:31:43:54:be:7a:69:
                    3f:e5:3e:fb:08:6a:54:63:1c:72:3c:f0:3f:4f:87:
                    85:2b:9f:1c:6f:2c:f5:70:51:53:1a:2d:e7:08:89:
                    06:0a:06:42:65:fc:29:5b:69:6f:fe:b8:6b:df:76:
                    be:7a:c1:9a:40:e1:84:65:27:f4:82:fb:5c:ee:40:
                    3c:16:9c:91:b5:69:81:bd:eb:37:67:48:b3:ed:3b:
                    60:c8:36:4a:fb:29:51:af:24:99:cf:39:03:80:0b:
                    e5:ea:a3:61:ed:49:df:0f:1c:6d:b3:04:90:ce:c7:
                    85:34:43:be:a5:74:29:63:65:f7:82:21:54:23:25:
                    7a:da:fc:2b:1e:d9:8b:29:5e:72:e1:de:f2:a7:0c:
                    ef:be:4e:7c:fa:0f:cc:7c:75:e7:eb:95:d3:3f:78:
                    f4:27:f2:c8:7a:67:4c:b4:1d:e9:be:d8:84:ea:74:
                    6b:4d:b7:25:dd:08:a6:de:9c:f5:e5:a8:57:93:dd:
                    cf:65:72:a7:a9:f8:61:6a:cd:10:ec:31:94:50:02:
                    13:49:c2:00:bc:d9:b7:95:f4:7e:d2:47:2c:b8:c6:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:B4:FA:AF:D4:B3:16:91:89:F1:56:B5:21:06:53:74:47:80:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.152.0/22
                IPv6:
                  2803:6220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265836

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:fc:d4:56:3d:04:98:a7:38:3a:ea:eb:e4:fd:6f:4e:a0:
         03:4e:86:14:5a:1e:87:49:51:64:87:1e:a9:0e:f5:9b:de:40:
         34:81:9d:4e:9d:f6:c7:3d:7e:a9:b3:53:fc:43:e8:a1:54:89:
         e9:5e:e4:47:95:ae:51:1c:21:7c:35:fa:97:5f:e7:b0:f5:61:
         36:ab:28:0c:b9:de:95:f2:41:f3:1e:c0:91:14:21:a5:04:bd:
         20:35:e4:3e:d5:91:9d:e2:e2:8c:6f:3a:b7:f0:17:48:a9:3d:
         bf:1a:d6:2b:c0:85:97:39:0a:56:32:b6:93:1c:bb:2b:eb:e1:
         6e:1f:06:ea:5b:7b:9d:21:6c:f3:28:94:ce:47:05:2d:cb:1d:
         b6:23:7c:98:d4:44:c1:3e:ab:0e:7e:a1:0a:00:e0:ec:34:76:
         a5:6c:71:86:51:83:fe:bc:64:16:79:01:98:62:1d:a0:90:dd:
         47:98:6b:b8:09:f8:59:dd:0f:36:5d:a0:90:f5:f6:cb:0a:03:
         cb:c1:b8:df:17:63:cc:2e:bd:cc:c8:67:82:76:f2:04:0c:a2:
         10:58:c0:53:f6:e6:38:b2:76:df:a9:b0:f9:f0:7f:39:5e:ef:
         3d:46:c2:dc:e7:e1:f5:cb:35:5d:15:c6:5e:1c:94:c7:52:43:
         a6:3d:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----