Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80d72f48d6b0182b3a2564057915f41342232c28.cer
File:                     80d72f48d6b0182b3a2564057915f41342232c28.cer (raw, json)
Hash identifier:          XU8K/f50xdWJo90nkllz11YAsOM8F8qcgAKkvmO6qx8=
Subject key identifier:   02:06:C7:58:4B:2F:F2:14:F2:6C:75:8B:93:CA:E7:A2:BC:C6:BB:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5D553
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/80d72f48d6b0182b3a2564057915f41342232c28.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:23 +0000
Certificate not after:    Mon 27 Nov 2023 04:00:00 +0000
Subordinate resources:    AS: 265653
                          IP: 170.246.36.0/22
                          IP: 2803:bac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14013779 (0xd5d553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:23 2017 GMT
            Not After : Nov 27 04:00:00 2023 GMT
        Subject: CN=80d72f48d6b0182b3a2564057915f41342232c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:07:35:eb:cc:b6:d6:2a:32:a3:e0:ad:f6:
                    ab:0e:0d:37:14:85:e1:87:24:9e:d5:d8:ba:27:2b:
                    56:5d:7a:24:d0:ed:e9:b0:5c:a8:d2:dc:44:5b:fa:
                    0a:5b:0b:78:e8:ff:97:72:b2:2e:b6:fe:4b:3d:89:
                    74:3e:27:24:3c:ff:e7:5f:aa:c4:3c:dd:e5:af:34:
                    08:fd:75:c9:45:ba:a8:37:e0:3c:1d:56:fd:22:17:
                    66:2c:6f:cd:43:f4:82:25:5b:65:51:6c:1d:27:ca:
                    ca:75:04:8c:75:b5:d2:04:c2:6e:06:2c:91:3f:05:
                    97:2b:e0:ac:3d:ad:12:f4:58:9c:0f:2d:a3:ff:e7:
                    a2:dc:65:6a:46:6b:64:84:48:a6:af:73:9b:7a:3e:
                    62:cf:b4:81:84:44:31:05:cc:90:79:e5:9d:ed:8d:
                    e6:e8:62:15:96:0f:d9:10:36:30:70:0f:9c:82:3a:
                    4d:cb:37:1b:b4:36:e4:53:e3:5b:54:23:14:aa:3b:
                    fa:f8:d7:0e:b4:c7:19:1c:0c:4e:d9:d5:5c:05:09:
                    27:c1:fe:52:54:4f:b7:38:61:9d:1d:79:20:bc:ba:
                    4e:e9:a7:c5:41:40:81:c4:1f:49:5c:bd:d9:94:05:
                    3b:78:3a:b1:12:aa:4b:2e:af:cf:92:00:16:90:13:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:06:C7:58:4B:2F:F2:14:F2:6C:75:8B:93:CA:E7:A2:BC:C6:BB:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/80d72f48d6b0182b3a2564057915f41342232c28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.36.0/22
                IPv6:
                  2803:bac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265653

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:ad:7f:97:13:9e:43:0e:7b:90:bd:22:86:ca:03:86:38:
         f0:8a:e3:90:41:1a:49:20:1c:71:f3:b4:bf:ed:8b:fb:3f:7a:
         d4:15:c6:45:21:e3:55:05:7d:10:a3:78:62:b0:7a:85:81:ae:
         e8:8a:54:e1:41:55:53:8c:21:a2:b2:61:88:a7:6c:68:6b:d7:
         c4:fe:7b:66:a3:76:00:81:27:99:e1:a1:75:19:83:d0:ac:47:
         5c:2f:a7:21:73:db:7e:38:71:96:ee:71:bf:73:fe:f7:37:d2:
         39:a0:ad:25:5d:0a:66:76:b7:b2:16:9e:fd:3c:c4:bb:3a:3b:
         1f:4b:cf:5b:76:dc:71:3a:fa:4f:9f:bf:49:e6:37:b6:1e:6e:
         fc:95:dc:b5:e3:c3:17:48:2a:a4:46:26:1b:69:c4:b7:72:bd:
         6e:cc:fa:32:34:d1:47:36:17:fc:b1:6a:35:13:59:2b:bc:e9:
         c4:84:5b:09:58:74:6e:7d:62:7e:99:6f:e3:02:fb:f3:e4:45:
         28:e5:36:e3:6a:d9:aa:ba:fa:b2:23:42:a6:c3:0f:1e:de:85:
         84:e1:8e:67:64:b8:25:16:95:c2:3c:3f:eb:9e:68:08:c3:62:
         ce:fd:b6:d8:4f:02:72:85:80:e9:22:4c:99:e5:a6:c5:03:73:
         66:4b:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----