Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer
File:                     8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer (raw, json)
Hash identifier:          Nqhe8rgV7A5P48Z5LouqkbimNtET1Mp/AQnzl6nSQKg=
Subject key identifier:   6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7A932
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/8999a5bb1c665f3c628fb53842304cdf432ef4d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Wed 20 Dec 2023 17:20:53 +0000
Subordinate resources:    AS: 266736
                          IP: 201.131.90.0/23
                          IP: 2801:0:4c0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14133554 (0xd7a932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Dec 20 17:20:53 2023 GMT
        Subject: CN=8999a5bb1c665f3c628fb53842304cdf432ef4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:91:5f:a9:da:26:4e:d9:20:61:a0:60:49:
                    bd:4c:13:09:e5:9a:02:6d:0d:76:95:c7:98:b6:94:
                    7f:fb:1b:36:d6:dd:34:07:ad:93:3f:f6:73:26:4b:
                    88:6d:00:65:88:73:88:0f:09:c0:4a:7f:b7:94:d5:
                    aa:3f:2a:f1:fb:bf:f2:7b:34:ed:3a:9b:08:a0:19:
                    42:f8:c7:cc:fe:81:e4:f7:49:4f:26:ce:d3:d2:7a:
                    2d:f7:46:50:67:95:5e:bc:90:97:78:e6:96:23:f6:
                    93:43:52:79:64:04:0a:52:6c:32:25:0b:64:2a:ed:
                    e4:0d:ac:9d:62:e3:52:10:59:be:45:1d:80:6c:b1:
                    af:91:71:7a:5c:16:b3:b6:62:cd:8c:2c:30:c5:de:
                    37:2c:b3:ec:ff:07:24:68:a9:f7:3a:8c:67:8c:73:
                    73:f0:df:c9:e4:25:5c:d1:47:75:e6:33:ee:38:a0:
                    3c:95:6b:8b:65:2e:4c:02:83:57:e6:0a:42:ab:d2:
                    49:58:0c:16:cf:32:47:e7:99:25:73:c0:9d:31:59:
                    63:db:fb:b7:03:a8:c9:bd:3a:1b:30:a2:a9:4a:d3:
                    55:86:28:36:53:7d:1b:be:37:18:35:41:52:f2:dc:
                    6c:8e:51:1f:9b:21:ad:1e:e8:54:a6:63:a4:27:63:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/8999a5bb1c665f3c628fb53842304cdf432ef4d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.90.0/23
                IPv6:
                  2801:0:4c0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266736

    Signature Algorithm: sha256WithRSAEncryption
         b0:32:3e:25:55:6a:75:4d:c1:8b:53:e1:72:7a:88:9d:3e:d4:
         cd:15:8c:95:4f:de:5e:e7:4c:3f:15:96:e0:50:bc:83:e1:ca:
         e8:6e:51:02:e7:50:e6:75:a5:9d:00:95:63:ed:96:01:9e:d7:
         50:c7:e4:ef:dd:3c:c2:69:83:39:50:1c:e7:50:7b:7b:6e:82:
         ec:aa:c0:ee:82:29:5e:b6:a8:31:e1:26:ec:e0:8e:1f:aa:96:
         43:b1:46:ba:73:4d:db:47:d5:ef:3c:e1:41:37:b8:2e:04:51:
         ff:ef:60:c9:8f:25:9f:f3:1b:a0:b3:38:c2:ac:59:0a:a9:6f:
         15:b7:22:d7:3d:57:10:e2:9e:4f:14:bb:28:02:a5:20:41:e4:
         2a:73:cd:d3:0e:d8:60:5e:70:56:6e:90:7e:4f:1d:41:4d:93:
         8a:99:f3:fe:7f:5a:63:f3:20:9f:44:98:f2:12:13:56:79:7a:
         37:81:d6:b8:2c:fd:ab:75:c1:b4:2f:f3:b8:ae:02:c1:f4:f1:
         5d:f7:ee:38:37:8c:82:21:b3:a3:71:ee:d5:f9:e7:63:34:4e:
         fd:e3:81:dd:4b:10:cc:d7:e7:2b:52:a6:1f:11:4c:20:c9:55:
         5c:24:87:b6:83:10:fb:5c:58:89:d1:97:0d:7a:ff:4c:23:76:
         53:63:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----