Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/967ad948e81b47f5e461f955c58db8da221c1b8f.cer
File:                     967ad948e81b47f5e461f955c58db8da221c1b8f.cer (raw, json)
Hash identifier:          INi3azxFSWHEjuq9xwtMVczsle7t6fEh8ZhkGWQs94A=
Subject key identifier:   C3:ED:0C:B2:E4:DD:97:79:69:F8:9A:91:B1:C9:C5:68:4C:EA:26:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6D7CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/967ad948e81b47f5e461f955c58db8da221c1b8f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Thu 23 May 2024 22:55:56 +0000
Subordinate resources:    AS: 263804
                          IP: 200.9.94.0/24
                          IP: 2801:13:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15128522 (0xe6d7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : May 23 22:55:56 2024 GMT
        Subject: CN=967ad948e81b47f5e461f955c58db8da221c1b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:36:ce:c9:32:ac:f5:ed:ea:22:10:35:21:
                    74:a0:d7:37:7e:e6:1b:42:c9:ef:49:35:25:9b:3a:
                    7c:4d:87:9b:62:59:a3:3d:2d:fa:8a:3a:a1:07:1b:
                    10:4b:3e:45:d7:1f:52:c7:aa:9d:70:ed:64:32:f5:
                    71:ee:1b:1f:a5:94:f6:a2:ee:e2:ef:dc:95:90:10:
                    88:27:56:8c:83:c8:f8:d0:d7:93:d4:f8:54:e9:d4:
                    86:eb:a9:e4:7e:73:d9:ba:ed:82:6e:66:0f:39:a3:
                    71:6b:96:20:a8:98:ad:9d:6e:51:fb:e1:2a:cd:53:
                    de:c0:f9:8a:b5:ff:23:69:35:1d:a5:8e:a2:f3:f2:
                    c9:16:5c:aa:f3:6a:90:ed:1d:55:b6:0b:4c:1c:84:
                    3d:fe:b7:72:e7:e8:71:3c:8a:9d:f6:c1:aa:38:b7:
                    a7:91:ef:df:e6:19:98:9f:a3:40:55:bb:31:3f:f4:
                    5d:ac:d9:7a:b3:1a:96:1f:17:fb:0e:ad:22:31:c0:
                    3d:c7:93:c3:92:16:85:59:23:db:44:bd:fc:9d:01:
                    68:db:1c:c0:88:43:2a:ae:d4:29:a3:ca:dc:1e:4c:
                    58:2a:f9:6c:2e:b7:a4:3f:fd:c6:25:aa:f4:fc:46:
                    51:7b:d0:68:fe:f6:22:f7:f8:85:af:e0:86:20:fa:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:0C:B2:E4:DD:97:79:69:F8:9A:91:B1:C9:C5:68:4C:EA:26:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/967ad948e81b47f5e461f955c58db8da221c1b8f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.94.0/24
                IPv6:
                  2801:13:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263804

    Signature Algorithm: sha256WithRSAEncryption
         b1:9f:b2:8e:f2:66:5c:42:b4:6c:16:c6:89:c2:8f:22:db:9b:
         f3:cd:4a:9b:bf:b3:dd:e9:bc:24:17:94:bd:ae:f3:f0:92:f5:
         0e:c2:61:34:5c:a8:a1:00:22:b6:6c:a6:f0:3b:0c:fb:8f:71:
         d6:c0:34:8a:1f:26:7c:80:28:d9:01:e0:0c:75:53:43:79:73:
         df:3d:70:98:2f:46:6c:eb:9d:38:63:52:86:72:6d:c6:58:f5:
         da:4e:e5:2b:55:d8:29:01:41:d9:93:bd:26:cc:38:97:ee:2e:
         59:82:3c:3c:f3:63:c6:c0:59:5d:df:51:ce:64:2a:2e:17:05:
         18:9f:20:15:87:79:04:b5:19:40:5d:f4:5b:b8:d0:10:ca:dd:
         ef:97:4c:08:32:8b:87:26:74:47:2f:57:17:80:80:ec:2a:80:
         2e:d5:cc:7d:f2:17:cf:56:ac:60:18:04:c1:4d:64:1d:3d:0a:
         90:ef:c6:f2:6b:a9:17:c0:d4:61:01:22:c5:35:19:4e:ae:a5:
         f2:ec:ba:47:81:66:aa:91:2c:88:1f:69:d7:df:97:9d:dc:98:
         85:1e:a0:d5:14:5e:d8:90:ed:1e:0b:7f:ed:1f:68:2b:71:92:
         a7:45:7b:61:21:ce:31:46:50:90:1d:f5:71:d4:46:df:75:3d:
         7a:4a:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----