Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4336b29ec8bc0375f86cd82d7995cda551537ec.cer
File:                     a4336b29ec8bc0375f86cd82d7995cda551537ec.cer (raw, json)
Hash identifier:          Ihzxd+s80t4WWlTodJWOzvJZIMoXFcSFj2cy+pH9Tt8=
Subject key identifier:   05:3E:28:96:E1:1A:C6:10:5F:18:A3:0A:0B:D8:0F:93:5B:2C:60:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F087EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/a4336b29ec8bc0375f86cd82d7995cda551537ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:24 +0000
Certificate not after:    Sat 03 Aug 2024 17:52:47 +0000
Subordinate resources:    AS: 263690
                          IP: 131.221.8.0/22
                          IP: 2801:10:6000::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15763435 (0xf087eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:24 2017 GMT
            Not After : Aug  3 17:52:47 2024 GMT
        Subject: CN=a4336b29ec8bc0375f86cd82d7995cda551537ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:48:8a:d9:fc:c5:14:1d:27:79:8a:33:25:
                    aa:b9:cd:aa:bd:d1:26:61:1b:f5:b8:f3:79:9c:20:
                    29:6c:a7:52:69:b5:a2:4e:9b:bc:2c:fe:6e:b9:2a:
                    c3:d4:2b:b1:97:5e:28:0e:cc:f6:0b:4a:28:82:9a:
                    75:e2:b3:2d:8b:67:2e:5b:b0:ed:58:43:97:8c:ec:
                    49:92:81:75:73:30:43:fc:bc:71:dd:0d:2c:08:69:
                    f8:b6:1f:3f:d3:46:79:fc:d1:c5:16:b6:25:62:34:
                    e8:d1:47:46:d2:d7:48:54:a1:22:9e:f7:d5:af:1d:
                    2c:44:71:45:fb:28:f0:69:6c:a4:b8:50:2f:53:e6:
                    db:22:c0:ee:27:9a:ff:a6:40:e0:0f:c6:b7:cf:e7:
                    34:c2:ad:16:73:64:55:72:a2:11:fa:c8:73:d3:19:
                    fa:d8:05:43:db:61:3a:17:c1:30:c1:e9:7d:a2:26:
                    9d:5b:ba:64:7e:6d:fb:0a:5a:cd:03:56:85:6c:6d:
                    0b:90:50:d3:29:e1:d2:e7:32:59:71:d8:9a:91:8c:
                    88:18:db:32:bc:1f:49:74:5a:b8:3b:33:b5:a9:1b:
                    03:a9:53:1f:33:69:b5:f8:70:10:0b:2d:55:ec:35:
                    88:dd:c0:e8:7a:62:9f:7f:15:a0:59:66:0d:c5:42:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:28:96:E1:1A:C6:10:5F:18:A3:0A:0B:D8:0F:93:5B:2C:60:C5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/a4336b29ec8bc0375f86cd82d7995cda551537ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.8.0/22
                IPv6:
                  2801:10:6000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263690

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:d3:17:85:fd:c7:ff:98:64:4f:1c:c9:a9:e7:c7:92:79:
         f7:f9:9c:54:36:2a:52:58:fe:7b:02:ca:4e:5e:9a:3e:89:da:
         25:e3:40:e3:73:d8:66:f3:61:6e:d9:48:61:af:39:c9:92:3a:
         c6:13:ab:a6:15:4d:0e:96:27:a0:14:5e:36:16:14:17:27:b5:
         6f:4c:71:a3:64:d6:29:68:0d:fc:e6:e9:23:bc:01:f7:3c:07:
         3d:83:2d:16:60:a9:d4:aa:a3:80:96:c8:14:05:d9:f1:5e:6b:
         71:c3:b4:62:94:a0:2a:7f:64:85:31:06:f8:ee:e1:e1:3f:e8:
         35:7a:11:2b:84:d1:92:51:55:a7:92:81:6d:21:e5:77:1c:0c:
         0a:8a:df:d9:bc:76:2f:08:7e:b0:d8:3c:ce:01:ac:e1:93:2e:
         bf:a3:ad:71:83:76:bc:b8:ad:6b:47:7d:a2:e3:90:e7:7f:a8:
         6c:49:75:a0:39:41:41:be:71:b5:8c:dd:1c:f2:2e:b9:a9:77:
         64:63:61:3f:76:83:0e:95:62:a9:bf:d1:a1:df:8a:0f:2a:1c:
         b6:2d:83:93:ea:d6:7a:04:6a:ad:b1:8f:bf:9b:be:e1:ad:a3:
         2b:33:94:46:c3:9a:00:ea:73:fa:b6:a5:fa:60:23:0d:4a:89:
         90:c0:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----