Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9facf1e4ddef7682e26c289d5411679fcf8b7155.cer
File:                     9facf1e4ddef7682e26c289d5411679fcf8b7155.cer (raw, json)
Hash identifier:          L+RkqNfuipbxnmWFwYDF8/k64T8FIdws3UuvBAfkz1I=
Subject key identifier:   94:73:DB:DA:2A:63:D4:2F:8B:7C:C8:8A:9F:3C:7C:D6:0C:CA:E3:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8AFD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/9facf1e4ddef7682e26c289d5411679fcf8b7155.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2017 22:06:50 +0000
Certificate not after:    Tue 08 Oct 2024 19:45:51 +0000
Subordinate resources:    AS: 264829
                          IP: 170.80.96.0/22
                          IP: 2801:1f:5000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16297936 (0xf8afd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  8 22:06:50 2017 GMT
            Not After : Oct  8 19:45:51 2024 GMT
        Subject: CN=9facf1e4ddef7682e26c289d5411679fcf8b7155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:56:cd:99:2c:e5:09:81:a0:03:4c:06:2c:
                    4f:fc:d5:61:10:94:46:61:c1:11:f7:41:f7:db:a8:
                    e8:2a:c1:81:9e:11:87:73:83:a8:f3:c3:85:1c:c4:
                    4a:f9:c3:c0:a1:65:00:7b:a7:58:4d:84:3d:e6:d6:
                    1e:dd:05:45:8a:f6:b4:64:c1:18:be:eb:62:e3:36:
                    61:68:19:41:5a:50:e4:c0:99:93:a4:bd:08:e1:ea:
                    87:53:50:61:d2:79:14:f6:ff:99:3b:7f:88:aa:78:
                    84:0f:66:77:85:00:f4:82:4e:71:0f:34:24:f1:96:
                    7c:35:d4:39:6c:a6:33:24:97:d5:32:a8:86:7e:ae:
                    f9:b5:5f:12:87:24:a4:ed:e8:c1:23:57:92:f6:76:
                    27:70:90:0d:44:38:6b:63:e6:e6:fe:2a:66:58:a4:
                    c2:fb:4c:8d:df:05:a0:52:03:88:41:7a:af:e1:a4:
                    d0:d2:71:fc:e0:9d:85:74:3b:f8:86:2b:b0:0e:3d:
                    a6:8d:7a:b3:48:bf:22:bc:70:a3:e6:ff:94:83:bc:
                    83:a5:79:5a:eb:af:f8:44:51:17:5d:85:c6:2b:28:
                    bd:d6:cb:47:c4:b1:8d:d1:49:3b:c4:97:b8:38:91:
                    47:eb:e4:15:40:f6:a3:3d:c4:4d:8c:1f:2c:e4:68:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:73:DB:DA:2A:63:D4:2F:8B:7C:C8:8A:9F:3C:7C:D6:0C:CA:E3:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/9facf1e4ddef7682e26c289d5411679fcf8b7155.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.96.0/22
                IPv6:
                  2801:1f:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264829

    Signature Algorithm: sha256WithRSAEncryption
         7d:2e:fa:9a:fa:65:c6:48:0a:0a:db:9c:ca:2a:a2:a3:7d:f7:
         97:c2:91:25:09:de:44:97:61:04:27:ea:dd:39:9a:b4:1c:d8:
         f1:05:70:77:7f:c4:98:d7:14:1b:b4:19:b3:a4:ba:56:fa:ff:
         4e:ae:8d:0a:db:dd:5e:ce:db:fd:fc:26:89:24:35:db:e3:e6:
         1f:93:9a:68:30:5f:2a:f6:aa:b1:ab:cd:9c:2d:eb:d8:28:a8:
         f2:b7:d7:48:2f:4b:1b:7a:77:3a:e4:f7:59:b2:2f:ea:8b:bb:
         b3:82:1d:53:c9:7b:ce:f1:c9:b8:66:2a:b5:b7:1a:27:7e:e7:
         c3:84:2b:29:9f:a2:fe:95:fd:10:eb:66:ec:2a:55:69:75:29:
         7f:12:60:06:86:61:7f:44:fe:0f:fc:77:48:8d:8c:f8:bc:73:
         78:e0:a9:81:59:69:9d:cb:a7:7b:ed:69:04:aa:78:c5:60:32:
         e4:fd:e4:2e:4c:9d:c3:33:b1:e0:e0:4a:5a:b8:f2:93:21:d9:
         14:d5:f8:4c:7c:4f:65:aa:c8:b8:1b:72:21:8f:75:b4:ba:d5:
         9f:0d:d2:21:a5:a4:5f:e5:b1:48:6a:d6:78:d8:1e:9e:37:82:
         6a:e0:8f:f2:6d:fd:e8:7a:52:bf:34:c7:bc:69:2c:31:de:33:
         b1:e9:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----