Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae23196081a357896e28d16bad3ce2331a9f7ae0.cer
File:                     ae23196081a357896e28d16bad3ce2331a9f7ae0.cer (raw, json)
Hash identifier:          ejOt/LZpxSv+BYtfXfzcgoldVQ7efvVqyWuZKhJMkv4=
Subject key identifier:   21:48:4E:3D:15:00:AC:D5:8B:CA:1D:71:E4:FC:AA:FD:8D:6A:67:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB35FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/ae23196081a357896e28d16bad3ce2331a9f7ae0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Wed 30 Oct 2024 18:01:53 +0000
Subordinate resources:    AS: 263718
                          IP: 192.231.120.0/23
                          IP: 2801:17:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16463359 (0xfb35ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Oct 30 18:01:53 2024 GMT
        Subject: CN=ae23196081a357896e28d16bad3ce2331a9f7ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:20:e6:49:e8:c1:65:8f:fa:2a:bc:d2:c0:
                    7e:9b:91:60:b1:b0:3c:e7:9d:5e:4a:1b:44:da:89:
                    08:ff:fd:fa:86:87:7f:c5:34:0d:4a:87:61:1e:19:
                    97:6b:3f:0c:76:cd:d9:02:0a:ca:8e:79:86:c7:27:
                    24:ae:99:f3:b5:7a:45:0f:80:51:86:2e:ca:05:2b:
                    fc:b5:87:e2:21:34:2d:f4:3a:27:7c:c1:a4:9d:95:
                    90:ac:f7:bf:c7:be:01:9c:00:d9:91:43:e6:09:72:
                    94:0e:e9:1d:4f:cf:10:68:58:08:3b:c9:95:df:46:
                    a5:53:7b:46:56:d4:7c:f1:bd:b8:3b:21:4f:d0:c4:
                    bb:e5:fc:07:1c:ab:e1:ac:40:04:42:bf:19:2a:01:
                    f7:2d:52:1c:9e:3c:db:0d:ad:14:07:fc:fd:6a:27:
                    0e:53:af:13:62:c8:4d:54:6f:05:2f:2b:01:2d:c9:
                    69:26:b1:23:fd:d8:98:b2:a8:51:ac:f2:e6:97:e2:
                    b4:5d:dd:c2:86:7c:56:ef:02:7f:5c:5a:53:8a:fd:
                    ee:db:05:cb:d0:41:b2:61:9f:66:aa:bb:99:b8:48:
                    06:8c:4e:f5:a8:5e:dd:78:c1:9e:6f:ee:e1:a9:ac:
                    7a:66:6f:f1:b1:a8:23:99:da:79:34:42:5c:77:18:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:48:4E:3D:15:00:AC:D5:8B:CA:1D:71:E4:FC:AA:FD:8D:6A:67:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/ae23196081a357896e28d16bad3ce2331a9f7ae0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.120.0/23
                IPv6:
                  2801:17:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263718

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:35:07:35:89:af:3f:b1:8b:10:18:bb:f9:18:28:a1:64:
         c1:3b:b3:04:72:67:95:09:14:95:d9:1c:41:49:06:2e:15:64:
         25:2e:b3:4a:99:f1:67:37:8d:e7:f2:94:dc:79:84:91:2f:7d:
         a4:b1:82:a4:fa:16:4a:f5:96:1e:5b:91:65:7a:f3:2f:fd:94:
         83:20:66:88:d2:6b:c4:69:95:c7:6f:2c:7b:15:10:82:5e:d0:
         d7:38:85:3d:5b:5f:2b:89:58:87:89:1b:33:3e:e2:ef:52:57:
         43:2f:f6:04:07:9c:bf:70:63:cb:35:7b:96:1b:10:88:9b:1b:
         d1:33:7f:88:bb:15:ae:de:09:b0:58:bf:e6:2c:14:5a:c5:ae:
         d4:df:b5:7f:be:09:7b:3b:68:25:59:76:fb:16:1d:84:dc:93:
         37:7e:98:e2:99:7d:58:c2:e9:a9:01:56:ff:df:ad:d9:2c:7b:
         8d:26:21:7f:0f:c8:8e:05:cd:a5:67:eb:03:35:69:37:c5:0e:
         36:6d:7f:f0:b2:4f:b8:45:ed:d9:43:53:21:11:24:d7:fc:f1:
         68:f4:2e:6f:d9:08:17:e8:d2:17:e3:19:01:82:29:69:9c:f5:
         58:03:f0:aa:e0:6c:54:85:a8:64:ee:f6:6a:4c:7b:13:56:25:
         ca:32:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----