Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a6602739ebc28779e863aba6a5a8d143dfb033.cer
File:                     84a6602739ebc28779e863aba6a5a8d143dfb033.cer (raw, json)
Hash identifier:          GYakdLLV3Z2eM3scLFRS9b1do4OEplvmkET66DKzOWw=
Subject key identifier:   00:7A:5B:4C:54:B9:69:3D:E2:02:03:8F:64:BE:28:42:6D:CA:0C:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E52FBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/be40ac0f-dd4c-4094-b997-e0adb89057bf/84a6602739ebc28779e863aba6a5a8d143dfb033.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/be40ac0f-dd4c-4094-b997-e0adb89057bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:17 +0000
Certificate not after:    Sat 09 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 263205
                          IP: 191.97.24.0/22
                          IP: 200.12.200.0/21
                          IP: 2803:fc80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15019967 (0xe52fbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:17 2017 GMT
            Not After : Nov  9 04:00:00 2024 GMT
        Subject: CN=84a6602739ebc28779e863aba6a5a8d143dfb033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:d5:64:6b:96:94:9b:1b:45:96:81:65:4b:
                    24:7f:db:3c:85:49:46:d6:4f:20:47:37:1e:f0:36:
                    3e:59:18:dd:83:e9:8d:2f:f8:e9:5f:65:84:aa:73:
                    73:36:b0:76:19:04:64:75:8a:8e:70:16:34:22:84:
                    b5:76:02:98:b1:9f:05:a9:85:c6:58:6d:c0:ef:76:
                    aa:6d:a3:f2:41:c1:1a:ec:d1:9a:a1:b8:ac:5b:ab:
                    7c:f6:4c:6c:e9:1b:98:f0:00:b1:09:90:d0:41:53:
                    23:e9:9c:b3:0d:5d:d1:fa:8f:48:0f:b6:be:30:80:
                    55:73:04:b3:cf:e7:4c:83:42:1c:52:e0:dc:be:79:
                    94:9e:bf:78:da:d8:d0:b4:6b:fc:de:3e:bc:f7:9e:
                    94:a0:9c:61:8a:04:ff:a4:74:20:ce:08:65:0d:e9:
                    42:dc:07:79:eb:4d:c1:16:f8:91:0d:96:88:17:13:
                    e7:89:1b:66:da:47:66:32:9d:32:9d:19:2b:6e:0f:
                    a7:d3:c2:f3:9d:7c:e6:60:d4:f4:b5:78:57:df:aa:
                    39:66:07:36:9b:b0:9b:3d:63:69:01:72:4f:e1:3a:
                    80:9d:4f:a4:a6:97:a6:e2:48:19:1d:6c:d3:49:9d:
                    61:ec:9b:88:1b:fb:d2:c7:9a:60:6c:7a:6a:90:7a:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:5B:4C:54:B9:69:3D:E2:02:03:8F:64:BE:28:42:6D:CA:0C:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/be40ac0f-dd4c-4094-b997-e0adb89057bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/be40ac0f-dd4c-4094-b997-e0adb89057bf/84a6602739ebc28779e863aba6a5a8d143dfb033.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.24.0/22
                  200.12.200.0/21
                IPv6:
                  2803:fc80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263205

    Signature Algorithm: sha256WithRSAEncryption
         9d:c3:5f:9c:c4:cb:1e:b3:ed:35:b9:b8:80:32:0f:e0:02:31:
         67:95:2c:ab:0b:9a:89:af:70:36:35:7b:2c:01:8d:bc:20:54:
         e4:52:2d:8c:49:f6:f5:23:0c:f1:0c:ee:7b:6b:8d:6f:ce:6c:
         11:b1:7f:c5:e1:8d:b8:c4:e5:48:02:b4:04:f8:67:a9:a6:7e:
         10:2f:d5:55:86:3b:31:2f:c8:d6:a7:cc:75:b6:37:30:7a:70:
         d2:19:33:5e:f5:46:fd:7b:af:64:79:73:a0:7f:9a:14:17:bb:
         73:8b:56:0e:69:eb:ad:62:f1:94:f7:17:17:79:96:4f:e8:e8:
         e6:3f:57:68:c9:c4:22:e5:32:8f:7c:b2:29:71:71:6d:85:43:
         4f:50:96:7a:20:80:19:1d:09:d6:85:aa:c4:c4:e4:ca:77:d2:
         17:49:60:a7:b1:3b:67:fc:c9:18:58:62:e8:57:9a:37:10:2b:
         2c:a0:72:e4:2d:ce:c7:ef:09:fa:8d:4c:0e:3e:88:ab:3f:b9:
         da:f1:f8:6a:4a:82:11:12:d5:f9:85:97:10:ea:d5:b7:60:00:
         ba:a4:62:e3:0b:27:ab:38:94:49:e8:42:da:a6:68:0b:06:4c:
         26:1c:45:38:a4:7c:81:3f:d4:df:6d:a0:bb:39:58:7d:13:7c:
         4a:52:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----