Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a10a8b73fd213995d47d2eca2033b107bb07940a.cer
File:                     a10a8b73fd213995d47d2eca2033b107bb07940a.cer (raw, json)
Hash identifier:          Sj2dEQ8+s/SG94QhmKcQoxegFXZDAFr3OR0gnQvVicY=
Subject key identifier:   5F:8F:9C:50:2C:1D:D8:45:4D:A2:0D:26:21:D8:4C:7A:F7:50:2C:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE7B9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/a10a8b73fd213995d47d2eca2033b107bb07940a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:41 +0000
Certificate not after:    Sun 21 Jul 2024 15:54:16 +0000
Subordinate resources:    AS: 264781
                          IP: 168.197.44.0/22
                          IP: 2803:68c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15629210 (0xee7b9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:41 2017 GMT
            Not After : Jul 21 15:54:16 2024 GMT
        Subject: CN=a10a8b73fd213995d47d2eca2033b107bb07940a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:8b:11:ab:a1:a6:53:a9:a3:ef:02:5f:f1:
                    67:3e:48:86:83:c7:5b:9f:9b:fa:6c:f2:3e:83:5f:
                    5c:20:d2:12:aa:35:10:61:99:14:ed:0b:a7:52:d9:
                    2d:6a:f4:b1:28:59:82:68:56:7a:2d:2b:ed:6e:37:
                    7c:4b:3b:d9:af:79:db:70:89:7c:9f:6d:91:cf:f5:
                    f5:0a:f4:3a:bb:d7:5c:b8:7b:de:5d:fb:78:95:23:
                    a1:5f:df:f5:8f:83:e5:ac:af:bb:6b:6a:7e:7b:60:
                    e7:3b:da:a8:a7:5e:b9:06:9a:32:26:31:bd:60:ba:
                    0b:77:fd:1e:fb:93:d0:44:9b:10:40:ad:95:4a:0a:
                    25:2a:95:b6:2c:8f:fc:43:97:18:2e:2a:8b:8c:3b:
                    ef:f2:68:85:af:0d:d8:cb:e0:44:7e:1a:e0:35:f3:
                    00:67:4d:4b:c9:8b:9a:87:85:84:60:49:36:e9:f6:
                    d9:d9:81:5c:78:40:e3:13:d3:c6:89:f0:8f:01:fe:
                    f1:f6:e1:da:3f:0a:72:a0:e3:11:1f:f5:71:ab:94:
                    e6:2c:72:a0:15:84:24:32:b4:02:3b:18:f3:c7:9e:
                    16:9a:08:f0:c7:b7:f6:ca:62:23:c4:0c:ce:27:ef:
                    bf:50:b9:12:4a:9e:3a:14:93:9d:7b:5f:0d:d7:c4:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8F:9C:50:2C:1D:D8:45:4D:A2:0D:26:21:D8:4C:7A:F7:50:2C:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/a10a8b73fd213995d47d2eca2033b107bb07940a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.44.0/22
                IPv6:
                  2803:68c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264781

    Signature Algorithm: sha256WithRSAEncryption
         96:a6:6b:32:aa:7c:44:48:d8:08:e6:1c:7f:b5:da:31:dd:51:
         cd:5a:c3:db:96:28:5b:08:76:19:69:8f:a9:08:69:98:85:cf:
         37:17:33:59:1f:c2:df:9c:08:a1:2c:30:ed:33:8c:5f:53:f8:
         0f:57:22:b2:7f:01:76:e1:87:58:9a:70:a9:a6:b6:c5:fe:6e:
         e5:17:62:3f:59:f1:bc:77:b6:d9:8a:ae:3f:46:26:f3:33:3c:
         e4:29:7f:00:43:fb:49:3f:16:d1:0e:85:65:c1:71:de:a9:f8:
         29:2f:72:c2:95:47:11:a3:ee:cf:ed:b2:97:67:bf:45:1e:ec:
         ee:d4:98:c5:12:a9:19:47:b7:1e:f5:7e:87:96:20:b4:7c:f1:
         05:ed:3c:58:c9:b7:62:fb:d3:d0:6b:b1:69:c7:66:cc:e3:f0:
         ab:71:3a:d8:ee:4c:7c:26:87:f5:89:d9:1f:b8:7f:b1:e0:93:
         38:77:97:e3:75:e8:23:35:72:99:8b:34:ae:c5:82:f9:07:44:
         ce:0a:07:95:23:97:58:10:fa:e5:7e:4f:94:a2:3f:7c:45:f6:
         37:0b:98:66:48:8c:45:93:4e:70:29:95:96:24:88:1a:e4:31:
         bd:d1:cf:2b:15:15:68:4c:19:6a:02:8e:14:83:c3:5f:95:fc:
         f8:20:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----