Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85a74cdb6dca351741001ea3a0848fa05a709c38.cer
File:                     85a74cdb6dca351741001ea3a0848fa05a709c38.cer (raw, json)
Hash identifier:          AzMluc32UT3dYG2vh+c4vY0oTnDZvSKhlI3ILJhUm2A=
Subject key identifier:   9E:59:D7:6B:1F:EB:67:CB:74:B9:C1:36:07:9F:3A:13:4C:39:8D:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB6895
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1a9648b-2c3c-44b8-a2bb-efc86be085a4/85a74cdb6dca351741001ea3a0848fa05a709c38.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1a9648b-2c3c-44b8-a2bb-efc86be085a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:22 +0000
Certificate not after:    Wed 26 Jun 2024 16:09:32 +0000
Subordinate resources:    AS: 263827
                          IP: 138.186.252.0/22
                          IP: 2803:7a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15427733 (0xeb6895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:22 2017 GMT
            Not After : Jun 26 16:09:32 2024 GMT
        Subject: CN=85a74cdb6dca351741001ea3a0848fa05a709c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:83:9d:82:9c:26:d7:09:ec:30:1c:cb:8e:
                    af:15:50:8f:73:fd:62:7f:5d:86:f9:fd:c2:d3:a5:
                    86:5a:8e:74:49:26:dc:ff:c4:af:d1:3b:17:4d:db:
                    5c:dc:cc:8c:ae:a9:bb:d8:5d:3e:7b:05:80:5c:b9:
                    91:9f:b2:a4:18:08:33:e2:39:e8:ed:8b:39:64:5f:
                    ef:69:56:3b:bc:45:36:da:99:b9:4a:50:cc:d2:3d:
                    ee:cc:e2:fe:49:f6:17:cf:4d:f0:cb:a3:db:17:fb:
                    47:d6:cb:31:51:e7:ae:a0:83:74:c1:9e:99:08:d6:
                    a1:32:42:12:c0:a5:fe:ce:be:d8:60:08:bf:91:ff:
                    4e:cd:53:c2:e2:56:01:cc:d4:6e:b4:58:c9:b5:73:
                    d6:a8:7b:41:21:0c:b0:88:6d:1f:e2:42:af:72:65:
                    04:40:f6:4d:ba:4e:c9:f0:94:3a:1e:09:76:8a:29:
                    79:c9:05:ee:64:32:7a:fb:9f:26:7d:c6:43:ea:ea:
                    af:b0:e4:85:f6:31:3b:9c:d3:b7:49:eb:74:e4:c5:
                    70:37:29:a6:5c:f9:bd:d7:98:9c:d1:cf:62:ec:0c:
                    54:1a:c7:c8:7b:c3:14:70:b0:c9:24:05:36:6f:44:
                    9c:21:24:8e:e4:f2:39:94:f2:e8:6f:bf:52:07:7a:
                    6e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:59:D7:6B:1F:EB:67:CB:74:B9:C1:36:07:9F:3A:13:4C:39:8D:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1a9648b-2c3c-44b8-a2bb-efc86be085a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1a9648b-2c3c-44b8-a2bb-efc86be085a4/85a74cdb6dca351741001ea3a0848fa05a709c38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.252.0/22
                IPv6:
                  2803:7a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263827

    Signature Algorithm: sha256WithRSAEncryption
         b2:08:09:1a:a5:16:b8:e3:e9:7e:5b:81:15:ee:8e:bd:26:b2:
         d8:4d:6c:b3:d2:52:0d:ed:b1:8e:ba:23:a1:cb:01:30:71:4c:
         c2:d0:3c:90:18:82:e3:fb:6e:66:f4:57:1e:a0:41:57:7c:4a:
         0a:82:3f:fd:92:80:71:b9:25:b5:d7:a7:13:be:a3:b3:77:44:
         01:20:f8:12:b3:6a:18:d1:6a:74:7d:1f:6f:6b:71:2f:09:a0:
         16:0f:cf:14:1c:f6:98:35:7f:77:aa:c7:b6:5d:69:1c:1e:d3:
         9e:84:7e:e6:7b:4c:a1:60:c2:7f:49:72:01:89:fb:c6:49:d0:
         68:85:1c:58:7a:02:4a:f3:ed:53:1c:db:68:f6:13:a6:94:40:
         53:09:a3:6c:13:7b:1d:b7:03:dc:b7:b8:a5:55:19:7b:44:b7:
         92:80:cd:a2:89:0e:0f:00:85:8c:4b:2c:95:38:48:7b:d2:43:
         61:03:cb:4e:4e:ac:9a:62:4d:fe:a4:cb:fa:40:64:12:ca:b1:
         ca:e8:45:ea:a5:44:df:0e:64:c5:8f:16:ea:ee:63:38:04:b2:
         15:6c:ff:39:a8:bc:12:c7:30:48:36:7a:3f:1d:2a:4c:ae:bf:
         e4:41:8e:37:4c:c0:53:56:eb:37:61:5a:50:ea:77:2d:00:6d:
         fb:ad:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----