Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a944a1bebdcc4368525b8611bdecb24f4839ab87.cer
File:                     a944a1bebdcc4368525b8611bdecb24f4839ab87.cer (raw, json)
Hash identifier:          bCYgNeThYnWdOSoqWMRxDGYW5MeNkLhxORWmBOlWYKw=
Subject key identifier:   BD:E1:0F:43:B7:76:2D:19:5D:EB:D7:87:9F:E7:27:6C:A2:7F:CA:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0B1BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a031b3da-f6f2-4821-94bc-0fdc3e090e61/a944a1bebdcc4368525b8611bdecb24f4839ab87.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a031b3da-f6f2-4821-94bc-0fdc3e090e61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:58 +0000
Certificate not after:    Sun 04 Aug 2024 21:12:48 +0000
Subordinate resources:    AS: 262245
                          IP: 201.221.122.0/24
                          IP: 2801:0:370::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15774139 (0xf0b1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:58 2017 GMT
            Not After : Aug  4 21:12:48 2024 GMT
        Subject: CN=a944a1bebdcc4368525b8611bdecb24f4839ab87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:8a:6f:91:53:48:42:a9:1d:3e:43:68:d1:
                    7d:66:e4:f5:31:0f:43:1d:9c:6b:af:28:df:8a:cd:
                    da:72:82:03:69:ff:22:e2:85:cb:96:0b:e0:cc:eb:
                    7c:3e:86:58:21:6f:90:dc:4a:82:12:67:63:1c:22:
                    83:0d:d5:f3:38:92:c3:bf:f4:b9:99:d0:8b:a3:d2:
                    09:18:f1:f2:8e:8c:d3:aa:24:3d:75:e9:7c:59:57:
                    6d:ab:9f:6f:1f:aa:c5:d9:d6:24:26:74:df:88:bc:
                    35:77:b5:af:89:ea:27:af:6b:22:30:51:04:9c:b0:
                    ab:7c:de:06:8f:b0:b8:a6:bc:b4:81:cb:85:5c:3f:
                    12:d0:27:89:5a:9a:ab:84:fe:78:7e:f8:7c:6a:bd:
                    97:cd:b3:23:77:70:16:78:a3:99:a8:ca:c9:a8:af:
                    4d:08:ea:66:17:f0:ff:a7:40:d4:4c:77:c9:45:c3:
                    99:43:eb:89:3e:c9:d5:e8:a6:dc:58:1e:9b:98:9b:
                    9f:ec:f7:49:5d:ad:18:d3:cf:aa:20:2c:e1:e2:75:
                    f1:2b:80:b7:ad:fc:ac:dd:28:b7:e1:a4:6c:ea:2b:
                    88:a2:b9:b3:69:17:36:57:af:d3:d5:b8:f8:85:0c:
                    60:11:18:79:e2:cb:38:8d:c1:1e:1a:6b:49:9b:ba:
                    15:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E1:0F:43:B7:76:2D:19:5D:EB:D7:87:9F:E7:27:6C:A2:7F:CA:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a031b3da-f6f2-4821-94bc-0fdc3e090e61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a031b3da-f6f2-4821-94bc-0fdc3e090e61/a944a1bebdcc4368525b8611bdecb24f4839ab87.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.122.0/24
                IPv6:
                  2801:0:370::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262245

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:c1:8b:b2:b7:70:b3:3b:6e:92:e8:e8:81:82:a1:b4:80:
         a0:bb:17:6b:1d:ab:6e:b6:6e:1f:d8:8d:82:72:fe:0d:fb:49:
         12:d0:7a:8f:8b:9b:24:90:a7:1a:9d:fa:37:8c:2b:5d:f6:90:
         42:ce:e3:fa:79:73:49:3a:23:76:ef:40:68:3e:48:d9:4d:21:
         20:c7:5e:9a:04:27:10:9b:57:9e:e5:28:3b:99:06:e3:63:25:
         ce:0d:49:dc:24:a9:ca:10:63:56:4f:45:79:bd:a4:46:6e:1f:
         5f:0d:10:d4:1f:60:bc:1c:df:91:ff:2d:ee:1f:90:8d:38:b5:
         b9:09:b2:29:ef:0b:24:cb:60:a1:d8:83:a1:87:e4:44:f8:8d:
         dc:9f:d7:7a:bf:84:b8:05:a9:e5:42:a1:c0:a9:a2:27:d3:30:
         c3:11:ba:1b:4c:a1:c3:03:9f:9e:2b:dd:c8:0a:9e:fd:f2:b4:
         19:2a:5e:ab:e7:58:51:14:27:08:b5:6f:7c:16:33:7e:a2:3a:
         49:63:e0:f8:17:69:0c:31:e0:e6:0f:7f:b9:6a:98:ad:e8:4e:
         19:7b:fa:21:f8:b0:86:dc:4e:33:6b:97:70:a6:f7:d7:1e:07:
         73:8a:61:fc:7c:68:b9:70:13:5d:8d:5a:83:b0:b2:a5:85:f0:
         d4:af:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----