Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf2f8bdf63fefc207c62a198746368b3d6991d1.cer
File:                     acf2f8bdf63fefc207c62a198746368b3d6991d1.cer (raw, json)
Hash identifier:          45tBW+p2jLZJGFhTfX9IUyW5/Wn4mPiAXVQlRLp46X4=
Subject key identifier:   19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6B27B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/acf2f8bdf63fefc207c62a198746368b3d6991d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:28 +0000
Certificate not after:    Thu 07 Dec 2023 15:55:18 +0000
Subordinate resources:    AS: 262194
                          IP: 190.109.32.0/19
                          IP: 2803:9000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14070395 (0xd6b27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:28 2017 GMT
            Not After : Dec  7 15:55:18 2023 GMT
        Subject: CN=acf2f8bdf63fefc207c62a198746368b3d6991d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:9f:32:e8:07:60:a9:fa:c1:2a:28:92:a3:
                    24:b1:f4:55:df:55:4a:5f:80:ee:b3:12:ed:98:12:
                    91:f1:0b:b3:d1:9c:b8:03:c8:5c:fd:57:00:d0:97:
                    35:64:3b:ca:ef:9c:13:ec:70:55:9f:e2:48:91:86:
                    3f:1c:3c:b0:0a:ad:ce:08:3a:21:34:67:5f:b7:0b:
                    2d:de:86:f6:29:cb:56:0d:8d:3c:5c:2c:2b:ae:98:
                    c4:1c:9d:af:dd:2c:b3:6f:e8:b6:9a:dd:27:eb:84:
                    fb:23:44:0f:12:c8:e8:63:cf:0e:3c:9a:24:01:26:
                    ad:f3:2d:cb:8e:05:1b:5f:ec:84:ab:44:1b:62:e3:
                    ad:e9:e3:20:62:ae:40:f9:f5:c4:90:f7:76:21:78:
                    88:1a:d6:e2:d6:9b:d7:e6:e7:02:10:6d:62:bb:ea:
                    de:87:54:ee:82:80:1e:37:bf:73:1f:2b:3d:db:9f:
                    aa:6a:97:65:db:20:a5:95:23:50:cc:9e:8d:68:e1:
                    d9:45:fc:c0:4c:df:be:99:f2:c2:5b:21:f3:9e:b9:
                    64:16:5a:1b:95:af:6d:7a:f7:97:b7:6d:6a:62:f9:
                    22:46:16:93:95:68:68:9e:87:6a:9e:4c:03:9c:a1:
                    63:06:c2:6e:f5:12:2c:71:65:47:d3:38:ef:37:a3:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/acf2f8bdf63fefc207c62a198746368b3d6991d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.32.0/19
                IPv6:
                  2803:9000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262194

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:ba:48:9c:92:ce:95:b8:e4:df:dc:55:97:4a:cf:98:0c:
         0d:62:2a:70:27:a4:43:ad:6f:61:42:09:d8:3c:47:31:39:35:
         22:80:a4:75:ce:51:4c:52:d1:c7:e6:6a:e8:cd:b3:2e:03:18:
         6b:2c:85:3a:b1:70:98:25:67:db:74:11:82:a7:4d:5e:cc:da:
         b1:51:60:93:73:91:c7:98:d6:5e:3f:71:d0:93:94:4b:4b:19:
         49:9f:08:2e:13:a9:c0:bd:c8:0d:7a:93:91:eb:79:84:47:e9:
         26:c9:85:f6:6d:cb:72:6e:81:52:f6:dd:c3:d2:f2:d8:68:43:
         d7:a3:78:ed:38:3a:4e:58:70:61:06:36:8a:e2:8b:50:23:72:
         0a:1a:46:86:5a:2c:96:78:41:89:d8:0c:2b:71:e9:2c:78:93:
         fa:8a:2e:4b:85:b1:5d:92:7d:45:da:6c:d7:e1:74:53:1f:a1:
         c4:01:02:5a:29:dc:a2:ec:92:31:97:00:c4:88:af:21:6a:b6:
         1c:32:31:9d:eb:ad:eb:3a:e4:17:9e:16:80:17:d5:c7:4c:33:
         85:da:42:9e:a3:af:e6:c9:43:0e:22:6a:c9:97:a0:8f:24:df:
         8c:8e:fb:aa:52:25:81:f0:36:5d:4b:fe:7a:96:ca:e2:44:f3:
         c2:63:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----