Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adf9faacf5b1001e511e4cd7a5d4b571f58a77d9.cer
File:                     adf9faacf5b1001e511e4cd7a5d4b571f58a77d9.cer (raw, json)
Hash identifier:          ipW7S8dg5sdbGTDCWjYbbyCFNiPOY3gaim2aNQ/wF4k=
Subject key identifier:   B0:89:56:F8:44:D6:63:D3:69:73:0B:30:CE:41:65:75:C0:D0:71:A6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDEFE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/adf9faacf5b1001e511e4cd7a5d4b571f58a77d9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Fri 08 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 263232
                          IP: 179.0.208.0/20
                          IP: 2803:4e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14544864 (0xddefe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Mar  8 06:00:00 2024 GMT
        Subject: CN=adf9faacf5b1001e511e4cd7a5d4b571f58a77d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:01:c7:5e:58:c1:51:db:78:81:8f:ae:7f:
                    19:b9:67:88:1f:f1:e1:d6:5f:51:0b:ba:97:66:1a:
                    92:45:ce:a9:65:49:13:bd:9d:e8:8f:7d:d2:a9:c4:
                    76:e8:2b:44:4e:17:96:b0:f8:b1:f1:62:ae:2f:4a:
                    89:a3:7d:aa:3f:13:8f:65:55:26:bb:33:a8:16:c6:
                    9f:18:4d:f8:fe:96:9e:37:19:90:25:ec:7a:3b:17:
                    90:9e:a4:d2:e2:f2:ec:31:76:2c:79:82:ac:bd:11:
                    72:51:16:6d:21:0a:5a:fc:18:73:b1:2c:49:93:a3:
                    28:96:ca:35:a4:50:6e:d0:88:ae:d0:a2:b2:23:43:
                    a4:b7:2b:02:9d:74:de:d5:9e:b9:b6:58:da:f4:b7:
                    8b:75:16:46:11:c6:63:18:ae:15:31:e8:7c:e0:54:
                    3f:e9:43:42:05:ca:ab:b3:99:46:43:50:0e:63:14:
                    c3:13:2f:7a:b9:f5:f7:78:3e:1d:d4:8d:64:f2:7d:
                    61:12:ee:12:23:62:0a:eb:3d:b0:05:76:76:f8:c1:
                    a6:2b:18:89:47:93:44:8f:56:d2:a5:a1:7e:94:68:
                    cd:07:28:59:9d:57:3d:c6:6d:69:af:8e:97:b5:79:
                    e0:f1:30:f0:a3:01:07:03:2d:cd:f1:ef:77:ac:34:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:89:56:F8:44:D6:63:D3:69:73:0B:30:CE:41:65:75:C0:D0:71:A6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/adf9faacf5b1001e511e4cd7a5d4b571f58a77d9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.208.0/20
                IPv6:
                  2803:4e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263232

    Signature Algorithm: sha256WithRSAEncryption
         c2:2b:25:2b:fc:90:c6:1c:5a:5a:8b:7e:1e:75:f6:70:42:d6:
         59:3c:c9:66:d9:34:9e:d0:1d:0f:9f:cd:e0:ab:99:1b:b2:85:
         8a:38:38:b2:79:75:ca:10:1a:74:c0:0b:6f:ec:39:88:9e:78:
         cc:28:21:16:0b:1f:d1:6f:c9:ac:9e:1c:25:3d:02:6b:e6:71:
         28:f4:b3:44:20:a9:76:3d:f2:09:cd:c9:fa:1e:f8:c6:34:f1:
         39:74:22:7e:05:ab:7f:f5:c3:d5:c9:57:6f:43:6c:b6:03:16:
         6e:8a:c5:96:3b:8a:05:70:37:f4:5e:ce:51:4f:3d:81:56:80:
         a6:d6:40:2a:a3:f3:ef:d0:3c:b6:cb:65:42:bc:48:73:3a:d5:
         0b:6c:a1:3e:2d:12:16:28:47:ac:12:15:d9:26:d9:34:c1:f9:
         0b:9c:9a:f9:ea:e8:b3:8f:93:f7:46:d8:5e:d7:eb:20:c9:b6:
         e3:93:58:39:10:a6:fd:45:1b:02:2a:71:89:94:ef:e0:1d:e8:
         14:09:65:9b:c5:4d:b9:01:2b:08:a0:21:72:6a:2e:36:26:4e:
         09:e6:14:4a:cf:39:31:d4:5f:ad:d0:c9:64:d4:23:b3:5c:c9:
         f4:9a:01:e5:2e:b8:b9:d6:e0:3b:fd:ff:ac:0a:35:91:76:6d:
         2d:c6:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----