Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a17e16a16dcad72b297e376ab8c89b4770e59c66.cer
File:                     a17e16a16dcad72b297e376ab8c89b4770e59c66.cer (raw, json)
Hash identifier:          oyxdqVqAVtDa6pjkqRicfQaRBWsE7RYNGLj+iRfHsUY=
Subject key identifier:   BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE6AFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a17e16a16dcad72b297e376ab8c89b4770e59c66.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Tue 12 Mar 2024 18:55:28 +0000
Subordinate resources:    AS: 265689
                          IP: 160.238.204.0/22
                          IP: 2803:35c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14576383 (0xde6aff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Mar 12 18:55:28 2024 GMT
        Subject: CN=a17e16a16dcad72b297e376ab8c89b4770e59c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:04:c6:4a:66:6a:86:89:32:25:a0:f1:6f:
                    b2:ac:ef:e1:e6:57:e1:31:ea:94:b1:2e:43:22:9c:
                    13:15:3b:0e:e3:97:cb:96:b1:0c:32:5e:ce:fd:4b:
                    a9:ec:41:92:75:c4:2d:13:45:24:9f:3f:f3:d8:17:
                    b2:c8:17:79:d1:21:f6:dc:15:00:b0:4b:d0:08:d2:
                    f7:40:0c:a5:e5:c7:3a:db:1b:10:cf:63:68:e8:86:
                    64:e3:47:49:86:9e:f9:6a:9e:3d:5e:b6:36:b2:3c:
                    73:ab:b4:0a:f9:78:f5:48:79:f8:dc:cc:bf:26:e0:
                    18:2b:23:d7:83:57:e1:81:40:74:07:a6:e9:b4:a9:
                    b9:09:59:3c:2d:85:ef:9f:2f:3a:69:d4:ef:66:5c:
                    36:08:3a:c7:db:54:7d:65:37:dc:cf:05:b3:e4:87:
                    15:8b:36:e8:01:ed:03:74:b5:7f:3c:7f:21:58:f7:
                    1e:be:74:e3:88:f6:c3:df:af:bc:a5:0c:b6:b3:f3:
                    1b:70:03:15:b0:f0:23:46:d7:5e:9a:76:c9:43:cf:
                    20:b6:2e:10:43:8a:26:c1:d8:da:5f:d8:91:79:fd:
                    1d:71:df:28:36:58:de:f9:2f:90:79:e9:88:de:9b:
                    63:b8:78:8f:99:5e:31:4c:e6:a2:d0:fd:84:5f:3b:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a17e16a16dcad72b297e376ab8c89b4770e59c66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.204.0/22
                IPv6:
                  2803:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265689

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:1b:c4:6f:f1:43:7d:f7:3f:a0:ae:b8:ff:ea:b9:49:78:
         0f:49:38:4e:97:e6:77:3a:18:90:03:9b:f6:b4:00:e2:e8:4b:
         59:fa:eb:1c:45:d8:c2:db:9d:50:53:90:90:e5:ee:60:cc:95:
         2e:67:7f:d1:cc:02:2e:73:e6:9f:19:07:b6:cc:e0:7b:d1:6d:
         a7:5c:db:f3:bf:56:cd:80:4c:62:ab:2b:47:e8:bf:3c:6b:b7:
         1f:8c:c4:51:0d:86:cf:cb:d7:e6:17:af:4b:04:8b:21:77:94:
         b4:5d:e0:a5:5d:44:15:d6:cc:87:46:56:ae:cc:87:3c:47:a3:
         ca:b5:cd:b5:05:09:ad:00:df:72:81:0d:85:c8:a0:f3:92:a0:
         c3:dd:85:ad:74:61:2a:50:8d:f3:d2:62:20:1f:27:c6:0f:4c:
         be:3d:69:99:d5:eb:75:a7:15:a2:27:62:05:9b:37:aa:7d:a9:
         7b:ed:29:9e:f0:c1:75:03:40:5b:11:54:22:b7:61:f2:27:ea:
         79:a5:4c:5a:63:3f:4b:e5:b3:65:07:c8:69:6d:a9:7b:fb:97:
         50:38:e6:8d:eb:0d:31:fb:1a:e4:b4:90:ce:12:10:88:8b:0d:
         47:00:43:79:06:cf:a9:90:8b:9d:dd:f9:fa:55:49:dd:1c:9c:
         f4:32:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----