Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6b0de68bf7eb11788ab04ccf76fd0089f6e7b57.cer
File:                     a6b0de68bf7eb11788ab04ccf76fd0089f6e7b57.cer (raw, json)
Hash identifier:          RX4Q8jWV2EhMsQykjsOuQ8aR+jC2ADUo7UVj7AFUcKc=
Subject key identifier:   FA:35:D8:D5:EC:5A:89:F5:96:C9:FC:E4:0D:E9:78:1D:70:27:9D:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DED35B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b0f5cfed-0749-4f61-bab7-22bdb5f8db10/a6b0de68bf7eb11788ab04ccf76fd0089f6e7b57.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b0f5cfed-0749-4f61-bab7-22bdb5f8db10/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:56 +0000
Certificate not after:    Sat 16 Mar 2024 20:53:49 +0000
Subordinate resources:    AS: 262236
                          IP: 200.115.178.0/24
                          IP: 2801:0:300::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14603099 (0xded35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:56 2017 GMT
            Not After : Mar 16 20:53:49 2024 GMT
        Subject: CN=a6b0de68bf7eb11788ab04ccf76fd0089f6e7b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:f9:e4:db:58:98:c4:f6:54:c3:f0:cf:ca:
                    b0:bf:71:41:90:ca:02:4a:2e:df:f3:b0:8d:ce:27:
                    b8:a5:8d:d1:c2:97:99:42:5c:dd:b3:49:a3:bb:6f:
                    11:2e:f6:d2:8d:a2:d8:a1:7a:86:79:31:1c:6c:58:
                    4d:17:be:cc:1c:34:c3:7d:28:1f:82:50:55:ae:4c:
                    ee:74:f1:93:b3:fe:ee:7d:80:8e:3d:16:e6:f5:09:
                    89:ab:0d:5d:6d:98:50:7d:16:74:6d:28:66:53:b5:
                    b4:3d:5f:fb:b6:9e:42:83:67:45:6e:94:20:85:fa:
                    1a:a0:2b:4d:d1:a8:3b:d2:b0:f7:06:0a:52:a6:42:
                    9a:21:e4:31:ea:6b:4c:aa:db:b5:8b:42:9c:45:7d:
                    41:67:07:7b:fd:44:fb:35:54:a8:3d:67:79:2a:20:
                    92:57:0a:a8:87:1b:7e:78:b4:00:10:c0:42:c7:72:
                    2e:f9:73:7e:1c:c4:0b:c0:56:84:c9:14:02:c2:e0:
                    6e:08:d1:d4:a8:38:79:fd:6c:04:2a:60:1f:e5:fc:
                    ac:70:f0:38:4c:ba:f5:0e:28:04:fc:58:8b:a6:97:
                    58:e6:50:34:ba:34:d0:a2:1e:e3:79:a5:e2:7b:3c:
                    b0:f6:81:47:df:13:6f:0e:55:90:e0:e3:ce:9c:9a:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:D8:D5:EC:5A:89:F5:96:C9:FC:E4:0D:E9:78:1D:70:27:9D:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b0f5cfed-0749-4f61-bab7-22bdb5f8db10/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b0f5cfed-0749-4f61-bab7-22bdb5f8db10/a6b0de68bf7eb11788ab04ccf76fd0089f6e7b57.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.178.0/24
                IPv6:
                  2801:0:300::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262236

    Signature Algorithm: sha256WithRSAEncryption
         1e:96:63:ac:e2:66:8d:af:08:9d:fb:01:ac:1b:b4:98:8d:17:
         b8:99:76:5e:1f:e1:31:03:4d:08:3f:eb:c8:dd:c0:6d:7d:c9:
         33:a2:5d:c2:f9:62:a9:fc:1b:e0:95:a8:7a:a6:1d:80:5b:a1:
         f8:e4:5d:89:72:02:00:d0:9e:6c:f3:a2:bb:86:a2:72:ba:8f:
         94:89:1b:73:35:f2:6a:12:c6:5e:c4:8a:e5:ce:73:54:c8:4a:
         7f:f8:e3:27:1a:69:c2:ef:24:30:92:a4:77:82:11:75:09:09:
         30:00:76:0a:64:4d:30:38:fc:88:9a:c6:af:83:4c:95:d6:0c:
         38:0a:0f:dd:17:84:d4:8b:86:57:1b:cb:07:88:9f:1e:c9:2c:
         7c:2f:82:09:90:f0:20:09:c8:34:c4:03:fe:71:0e:41:1e:66:
         37:fc:c9:f3:c1:03:aa:bd:ce:c1:13:9b:c6:4c:9e:e2:ca:72:
         41:d2:e5:84:53:c1:16:3b:e8:3a:ea:75:97:bd:93:c4:0e:59:
         20:65:ba:d8:49:29:25:16:6c:f0:54:30:c7:5b:b9:39:3b:ff:
         27:f7:94:61:1f:45:99:64:1c:36:2f:80:00:da:28:fc:50:39:
         9f:c7:25:fa:0d:b8:a9:e0:13:94:47:c2:57:49:d8:01:21:2c:
         d1:1e:85:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----