Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86c528546bf53999041dc15403a09ad96a063d2a.cer
File:                     86c528546bf53999041dc15403a09ad96a063d2a.cer (raw, json)
Hash identifier:          9b+wVMCTMMkeZ8uCs05fjKwImIRzWFq2c1fxPiDsbaI=
Subject key identifier:   47:F2:74:9F:9D:94:1C:51:58:F9:20:F8:41:A7:A0:13:81:73:D6:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB71BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/86c528546bf53999041dc15403a09ad96a063d2a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Apr 2018 12:36:43 +0000
Certificate not after:    Tue 06 Feb 2024 18:52:56 +0000
Subordinate resources:    AS: 265699
                          IP: 162.12.196.0/22
                          IP: 2803:c9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14381499 (0xdb71bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 12:36:43 2018 GMT
            Not After : Feb  6 18:52:56 2024 GMT
        Subject: CN=86c528546bf53999041dc15403a09ad96a063d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:a2:81:a6:10:ca:96:97:8f:2a:06:b6:ce:
                    b1:fb:77:64:e0:5a:c2:4a:63:70:f3:31:45:40:61:
                    b7:3d:62:df:98:ca:5b:1c:fa:08:c1:18:36:93:81:
                    c3:48:d6:ed:21:d5:7e:c8:80:96:c5:0e:4c:a0:50:
                    32:84:14:2f:fd:05:cf:80:8f:5c:7b:95:c4:d6:fb:
                    79:5c:84:0a:3c:55:73:3a:40:a1:b0:1c:14:3c:8c:
                    1f:4e:57:9c:f2:bf:83:53:11:e4:79:bf:44:77:6b:
                    a0:75:d4:a2:db:42:2f:73:cb:7a:d1:96:72:9a:4c:
                    8b:7e:32:3e:88:4a:74:2a:83:ad:84:ec:23:c2:3c:
                    07:b7:5d:7e:4e:96:9d:56:36:50:f2:67:3e:24:cf:
                    4d:92:22:5f:4b:eb:09:da:6d:08:9f:d2:d9:04:03:
                    91:d1:f0:e5:4b:a1:22:cd:96:b3:3d:28:24:4c:e0:
                    c4:be:a0:68:f3:78:61:b6:f7:ae:f9:e4:fc:2b:a2:
                    15:88:70:43:f8:28:22:72:8a:17:ea:39:8d:f7:99:
                    28:21:b8:7c:a5:a9:b3:87:a2:24:a8:5b:18:29:e3:
                    2d:0f:ca:7b:d5:39:50:c5:fd:0e:5e:2c:13:fe:55:
                    f2:8d:02:a3:02:0b:a9:05:96:be:e5:84:52:98:1f:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F2:74:9F:9D:94:1C:51:58:F9:20:F8:41:A7:A0:13:81:73:D6:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b7b80272-4202-4b7f-ae27-d52e3f5261e3/86c528546bf53999041dc15403a09ad96a063d2a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.196.0/22
                IPv6:
                  2803:c9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265699

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:21:73:45:c3:aa:07:92:06:be:65:04:a9:a4:06:b0:42:
         3f:7a:6e:dc:c5:8a:61:8f:83:29:6b:0c:41:e6:ca:ad:1f:f2:
         ec:1d:d8:76:54:4a:c7:9d:a2:8f:eb:3d:3a:3a:c6:68:4a:cf:
         ba:bd:00:1e:e7:78:a3:31:b6:df:6b:9c:76:61:1e:04:00:e6:
         e0:3a:de:86:f0:96:b1:a1:01:73:c5:04:94:52:8c:37:46:79:
         0e:c9:55:e2:63:04:e9:01:36:1f:bf:c7:8d:b1:3a:51:e5:ad:
         ed:5d:c9:7d:8a:db:92:0f:f3:2c:60:e0:7c:fd:7e:3f:38:1f:
         6a:b3:6f:d3:3b:92:7a:22:ec:90:aa:66:df:16:2f:c2:c9:a5:
         95:79:eb:34:81:71:2f:ae:a2:43:5f:5d:18:25:67:6b:88:3a:
         f0:61:08:c4:b8:55:03:15:b9:00:6f:dc:51:39:62:31:c8:15:
         ae:4e:07:b4:d8:06:ca:ca:f4:95:02:ee:01:c0:97:08:2f:1b:
         36:21:47:54:cc:ec:23:2c:38:30:8b:2c:14:a0:b5:00:db:ff:
         98:30:5c:11:d5:17:29:4f:16:d3:bc:76:26:c3:0a:b7:27:7c:
         cc:db:19:a2:79:6b:59:b9:fe:8f:6c:33:37:71:56:41:6d:4a:
         f1:0d:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----