Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8053b5dc9c407397fc83c7d140d443fa90615517.cer
File:                     8053b5dc9c407397fc83c7d140d443fa90615517.cer (raw, json)
Hash identifier:          sNIg+7pYhrq1Hb6OphP4gnwjLv7rsJE6vT9nFzFsjxo=
Subject key identifier:   FC:46:EE:C8:5F:FA:1B:17:B9:DD:C7:B7:DB:51:3C:B1:11:0C:34:81
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F490DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c05f9582-d766-4b59-87bc-95db6d3d37bc/8053b5dc9c407397fc83c7d140d443fa90615517.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c05f9582-d766-4b59-87bc-95db6d3d37bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Tue 10 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 27663
                          IP: 200.0.201.0/24
                          IP: 2801:1a::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16027868 (0xf490dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Sep 10 15:00:00 2024 GMT
        Subject: CN=8053b5dc9c407397fc83c7d140d443fa90615517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:7e:60:17:24:83:c2:e9:08:05:0e:2d:04:
                    b0:be:42:30:0d:9a:45:ce:fb:8f:53:f4:49:5d:93:
                    4d:9e:f2:1d:8a:5a:0b:57:31:d0:9d:65:d1:d8:45:
                    71:e0:52:e3:eb:81:56:60:7c:8a:a5:99:09:eb:a9:
                    ea:82:90:5c:56:89:db:19:7d:e4:cc:16:29:65:aa:
                    fc:19:c8:5b:6f:87:d0:78:33:da:88:62:7a:e9:4c:
                    61:c8:59:d8:15:8e:02:4d:1d:45:24:3a:01:e1:14:
                    b2:0b:81:30:21:dc:5a:b7:31:d5:e4:6b:7f:f2:18:
                    bd:bf:6c:9a:c3:49:5a:f2:63:0d:4b:5e:69:c7:c8:
                    7b:18:90:8b:1e:12:47:90:82:5e:c4:72:e3:c7:9a:
                    5c:b9:32:df:13:59:0b:3d:ba:75:f3:14:2a:d6:14:
                    72:f7:84:66:f3:f4:0c:ba:0e:39:bd:29:f0:d8:19:
                    c8:95:38:78:4a:b2:d6:15:4a:d7:2c:d1:36:2b:06:
                    b4:09:bf:ce:67:6c:9a:ab:d8:46:bb:eb:68:ed:ad:
                    9d:ea:d5:ee:13:91:47:70:41:23:3a:a6:59:74:44:
                    0f:fd:02:ef:31:65:82:14:e4:84:6b:58:4e:f0:fb:
                    31:0a:3d:f1:13:4f:74:f1:ff:27:cf:d9:1e:c3:a7:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:46:EE:C8:5F:FA:1B:17:B9:DD:C7:B7:DB:51:3C:B1:11:0C:34:81
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c05f9582-d766-4b59-87bc-95db6d3d37bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c05f9582-d766-4b59-87bc-95db6d3d37bc/8053b5dc9c407397fc83c7d140d443fa90615517.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.201.0/24
                IPv6:
                  2801:1a::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27663

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:5d:a8:ed:96:9b:94:8f:d1:e8:aa:12:70:25:eb:ef:71:
         7e:c5:52:d7:c5:45:80:6d:29:92:c7:5b:35:84:a0:5e:40:b0:
         b2:c6:d5:25:8c:9d:8b:1b:13:69:64:12:51:4b:d5:f9:94:a6:
         b9:67:4a:ad:82:a1:3b:a7:5d:20:b8:6e:8d:fc:b5:d2:ac:cc:
         27:4d:82:35:66:96:c6:3a:3e:66:53:4e:97:ea:c7:e4:53:2a:
         51:5b:79:94:c8:47:67:2a:47:34:7c:15:6e:d7:d1:b7:36:52:
         30:f0:8c:ba:49:40:3a:45:97:ae:63:06:d7:71:a9:17:f3:c0:
         93:78:e6:91:54:70:14:73:74:a2:05:cf:8d:5d:02:1d:e6:cf:
         0c:13:00:bf:48:61:5c:f0:b7:61:4a:9e:7b:c3:a8:29:3d:21:
         41:3e:ae:a9:b5:8c:75:97:c7:b6:a3:f3:53:f2:c5:37:91:7c:
         cd:86:62:87:77:7f:b7:ba:d5:93:fb:d3:64:9c:94:55:8c:41:
         0c:24:73:3f:b2:67:7e:4f:32:aa:98:67:fd:fd:55:89:54:95:
         b4:75:66:6c:b9:88:64:86:6a:be:77:a8:69:13:c4:4d:45:06:
         5d:24:1b:d7:b0:7c:9b:34:c1:08:0e:a4:62:b5:b7:28:bf:fe:
         dc:dd:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----