Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1217369a1db2b0d3b1274c0764bd1969d76b23.cer
File:                     ad1217369a1db2b0d3b1274c0764bd1969d76b23.cer (raw, json)
Hash identifier:          oQdwJj4hLToc+veEYr8BRXnq9FAzUA7CrftkZQEywfM=
Subject key identifier:   B4:45:EB:E7:76:78:C9:61:91:4E:54:0B:F6:10:BB:ED:8C:93:0D:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA9A02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e6189fc-0bd5-4b01-9967-cc9dfefcc68f/ad1217369a1db2b0d3b1274c0764bd1969d76b23.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e6189fc-0bd5-4b01-9967-cc9dfefcc68f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Thu 20 Jun 2024 21:10:16 +0000
Subordinate resources:    AS: 263826
                          IP: 138.219.228.0/22
                          IP: 170.80.72.0/22
                          IP: 2803:3a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15374850 (0xea9a02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : Jun 20 21:10:16 2024 GMT
        Subject: CN=ad1217369a1db2b0d3b1274c0764bd1969d76b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:69:3f:51:51:31:4c:72:e1:80:0d:2a:2f:
                    47:12:a8:b3:49:72:84:bb:7a:43:1e:45:9b:90:f4:
                    c1:80:e5:d4:60:36:60:e8:b5:40:0f:57:e2:62:5a:
                    82:e1:2b:38:53:a8:8b:ef:f6:a9:77:1f:f1:69:8f:
                    fd:8c:ef:41:3e:8b:aa:71:7c:77:c5:d5:0d:6a:e2:
                    21:30:e2:b9:5e:e2:e9:4c:f9:94:6b:5a:e8:7d:f8:
                    63:5b:4c:08:88:69:f8:f2:7e:40:16:39:c1:7d:b1:
                    09:fd:a6:52:6e:fc:a2:df:39:9f:0a:93:04:1b:8b:
                    a1:c8:4b:3b:ff:16:1e:46:01:03:19:33:67:d7:31:
                    52:d1:56:0b:4c:28:c7:98:04:83:54:90:89:36:f2:
                    9d:ad:6b:c2:bc:54:c2:8c:4a:32:6f:5a:ca:a5:49:
                    b2:cf:16:e4:ee:b9:52:8a:1e:74:0d:e6:57:ce:ce:
                    27:e9:da:a6:a2:e1:a4:b7:40:bc:c2:45:96:a3:28:
                    94:ff:66:5b:6d:3b:5e:f3:bd:87:68:26:56:a9:66:
                    ea:58:f9:ec:36:cb:4a:ca:00:4e:47:5a:7c:be:d9:
                    5c:65:c3:cb:2a:93:d3:02:13:53:f0:49:0e:15:48:
                    db:f2:ad:4d:86:52:4c:e9:bb:78:c1:5d:04:e6:8a:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:EB:E7:76:78:C9:61:91:4E:54:0B:F6:10:BB:ED:8C:93:0D:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6189fc-0bd5-4b01-9967-cc9dfefcc68f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6189fc-0bd5-4b01-9967-cc9dfefcc68f/ad1217369a1db2b0d3b1274c0764bd1969d76b23.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.228.0/22
                  170.80.72.0/22
                IPv6:
                  2803:3a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263826

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:93:c6:88:7d:2b:5e:e2:46:fd:ff:2c:32:d2:f2:1f:95:
         b8:11:d2:bd:32:41:17:ff:ac:94:9a:15:77:12:fc:79:19:a8:
         1d:f8:e8:26:7f:01:32:ad:f7:17:99:51:6c:23:ed:36:8c:dd:
         3a:1b:66:62:03:eb:73:ea:b4:82:c9:f3:a6:a0:42:39:4b:94:
         31:d4:c8:58:ea:3f:49:5e:4d:1a:4d:d2:1b:90:9f:1f:e7:9a:
         08:51:10:8c:a6:7e:cf:34:63:1e:f6:6e:90:29:c2:e9:6d:c1:
         4a:eb:f7:79:2a:00:c7:65:96:c5:6f:55:fe:38:7a:7f:ac:69:
         91:57:11:0c:3b:eb:fb:7e:b7:92:e9:69:f5:81:af:fc:9c:fe:
         63:52:70:54:29:30:ef:45:ca:c1:66:78:be:31:1e:3a:e0:42:
         05:1a:b8:63:4d:20:6b:55:57:d4:36:0e:1a:fa:ab:79:04:21:
         07:92:b3:df:d3:39:1d:fe:7a:88:89:f7:0a:f8:45:b1:ce:d0:
         6b:b9:28:d5:38:46:2f:5d:31:1e:2c:13:82:74:84:09:33:21:
         1b:22:8e:27:2d:de:83:93:96:99:21:ff:ea:ab:0e:5e:f9:a9:
         8f:27:b0:8b:1e:82:eb:9d:bc:83:b8:16:15:88:2c:df:67:39:
         58:ce:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----