Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
File:                     a5db578ddaaedcf4375740e85f5f51db4e193706.cer (raw, json)
Hash identifier:          I2StVlYzER3d/zSYgTe9kaVOwVDu5mv1ysa+jlHPnRU=
Subject key identifier:   77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1721B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Sun 11 Aug 2024 21:45:46 +0000
Subordinate resources:    AS: 263761
                          IP: 138.117.140.0/22
                          IP: 190.99.116.0/22
                          IP: 2803:5100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15823387 (0xf1721b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : Aug 11 21:45:46 2024 GMT
        Subject: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:24:4e:e6:93:63:4c:56:10:00:1e:4f:f1:
                    53:e6:79:87:60:de:f8:2a:c4:9f:99:05:29:25:c8:
                    b7:56:31:27:e7:55:ba:04:1f:b0:ea:22:59:06:47:
                    ad:db:5e:79:12:26:ba:22:7c:83:d8:57:b8:fb:d5:
                    09:22:ef:4c:aa:93:7d:98:69:78:eb:b9:40:b3:3b:
                    e0:45:16:e0:2a:4e:b3:e5:9e:f1:9b:0e:e3:9d:e3:
                    af:b6:49:69:ac:9b:9e:be:75:1b:37:ac:4e:f0:7e:
                    34:38:7c:a1:39:8a:2e:e9:97:0e:07:ff:8b:dc:21:
                    0d:ee:5e:b7:79:a8:46:4c:35:53:bc:fa:23:ea:56:
                    cc:a2:5f:f4:2a:58:12:5c:e3:26:d4:30:f7:49:cf:
                    23:0b:e1:f0:e0:1a:ea:f3:69:1a:a0:51:6c:73:55:
                    54:43:b4:86:e7:c8:e8:df:4f:9c:05:fd:1e:85:76:
                    86:d0:08:77:c5:30:57:de:70:f8:4e:c9:29:74:37:
                    d6:b8:e4:bb:c1:73:84:6d:1a:4c:d2:74:41:97:7c:
                    34:fb:4f:b2:12:b4:86:92:5c:61:1c:c1:84:a4:e2:
                    e3:ac:52:99:8d:c4:af:57:a5:d2:40:5d:92:f1:b2:
                    55:32:4e:d4:5a:fe:1c:19:ad:93:62:17:c6:f5:7b:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.140.0/22
                  190.99.116.0/22
                IPv6:
                  2803:5100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263761

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:7a:2e:e6:32:9f:bd:81:48:db:82:15:e8:13:5f:ff:2d:
         45:44:6f:e8:8c:2c:ca:54:79:00:1c:6b:37:8b:9c:ff:f6:fe:
         ad:8e:33:bc:9a:62:43:01:d7:a0:28:98:81:bc:90:bd:9a:fe:
         2f:04:25:17:bd:ae:a2:b4:6c:b3:20:f2:a7:4c:33:37:c0:86:
         ee:93:02:31:a9:8c:76:4c:97:6f:aa:dd:82:fa:9a:aa:2d:0f:
         5d:23:95:18:3e:41:9d:09:70:9a:54:43:e7:40:f5:9f:c3:ae:
         32:3b:6c:60:df:ec:80:36:7e:e7:0d:58:d7:6e:00:53:31:f5:
         2f:d6:8b:30:ed:20:c2:92:47:8d:40:e6:90:85:83:52:16:c9:
         9a:ea:92:0b:66:e3:45:f1:52:2c:39:73:c2:c2:78:e7:93:30:
         d6:e9:d2:d6:3b:e0:d4:3b:32:61:c4:27:d5:63:90:27:eb:aa:
         bb:da:2f:0d:9f:1c:46:2e:b7:fd:8f:3a:fe:44:c9:70:f1:f9:
         94:a4:54:4d:c0:c2:9c:ad:c7:4a:f9:0d:12:52:0b:c3:1c:e8:
         2d:4b:ea:ba:30:a6:b5:a2:b8:c3:67:49:f7:a1:07:cc:67:10:
         de:e9:e5:d3:08:2c:17:8b:6c:7c:7d:92:0a:35:e6:1e:1c:8a:
         fc:b4:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----