Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b107b01f11ca47163588855443601d83d9a33e5b.cer
File:                     b107b01f11ca47163588855443601d83d9a33e5b.cer (raw, json)
Hash identifier:          mocv683kJZo8WOJ+6h9zEExWvLubBc5Xrmn56aySMdQ=
Subject key identifier:   BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCF45F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/b107b01f11ca47163588855443601d83d9a33e5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:27 +0000
Certificate not after:    Sat 16 Nov 2024 18:18:05 +0000
Subordinate resources:    AS: 28318
                          IP: 131.72.156.0/22
                          IP: 190.103.16.0/21
                          IP: 2800:cf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16577631 (0xfcf45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:27 2017 GMT
            Not After : Nov 16 18:18:05 2024 GMT
        Subject: CN=b107b01f11ca47163588855443601d83d9a33e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:6f:69:06:f0:b6:2d:a1:74:31:5e:a7:b4:
                    88:47:0f:38:f4:98:35:3d:17:54:95:77:44:ee:31:
                    ae:2e:d5:ba:a0:65:95:05:a6:4e:0c:7d:3a:48:57:
                    79:5b:53:6e:86:cf:2e:72:f7:d4:73:46:8e:18:48:
                    28:3e:34:64:77:e0:b8:7d:34:3b:b4:e4:78:c9:ad:
                    87:4f:75:80:64:e7:9b:a5:48:d5:da:63:a8:22:1c:
                    7a:00:8d:2e:d6:18:98:e8:06:7b:50:94:e8:03:55:
                    50:f3:c2:51:f3:24:07:02:32:cf:d4:48:00:8f:d8:
                    9f:ac:c6:2d:b6:81:6b:e6:ba:10:eb:42:ed:5c:f4:
                    cf:24:da:11:3d:c5:e5:aa:4c:12:80:d1:76:63:3a:
                    96:61:e0:24:af:b6:28:c7:f9:96:0d:f0:9a:f0:6c:
                    53:51:3a:fc:f3:27:de:bc:d9:f0:a5:ab:b4:ed:7f:
                    e0:91:8d:11:02:71:04:12:b1:52:23:1f:c2:d8:26:
                    e1:56:87:cb:0b:cd:8b:86:82:f3:4d:c4:23:eb:3d:
                    83:90:ea:b4:3f:db:6d:a3:d2:6d:30:d0:fb:f6:50:
                    9c:a1:fe:33:78:d4:86:d2:0e:e9:f4:3f:bc:1e:84:
                    b1:68:42:08:54:9d:43:a3:68:de:e3:38:3b:5d:8a:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/b107b01f11ca47163588855443601d83d9a33e5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.156.0/22
                  190.103.16.0/21
                IPv6:
                  2800:cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28318

    Signature Algorithm: sha256WithRSAEncryption
         13:77:b5:5e:24:3c:00:c4:bd:5e:37:79:84:e3:15:fd:eb:44:
         05:31:9d:f8:1c:2b:24:48:ed:17:39:54:02:41:6f:6b:f3:0e:
         46:a2:fc:b7:21:7a:e7:c6:b6:bf:66:94:3c:ee:42:c2:4f:d5:
         ba:db:53:7f:61:e9:0f:eb:1f:82:bd:bc:5d:13:64:0d:63:d7:
         00:ea:ff:08:04:24:97:ce:a1:89:0a:e2:ac:1f:bd:9d:e7:e5:
         70:65:5e:7c:5c:3d:cc:80:6e:de:22:5f:55:cd:99:3e:9e:0c:
         98:66:31:38:33:b9:72:a1:b6:1f:fe:1e:91:21:0f:fe:1f:92:
         70:2f:47:16:ef:ad:80:65:f2:b5:aa:d1:b8:01:26:79:57:67:
         73:42:2a:55:dd:fd:73:ed:f5:b1:6e:d8:16:7c:91:24:d5:ee:
         38:ef:44:a3:64:1e:9e:3d:7e:bf:1b:04:81:c7:3f:4d:0e:4c:
         05:a8:8d:77:8e:46:5b:31:3e:d4:ac:77:2c:03:7d:02:59:81:
         92:3a:3b:ec:47:3a:2f:32:05:11:d2:5a:3a:a7:8d:b8:a8:b3:
         3e:18:e2:b8:0d:7e:09:90:0b:19:50:b8:25:66:a1:45:16:5d:
         79:ac:90:3f:3a:e3:bc:25:13:59:7c:08:2e:58:e6:61:d8:c4:
         77:37:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----