Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1e681b3a50e20044b7b83f7f72b1363596eba66.cer
File:                     b1e681b3a50e20044b7b83f7f72b1363596eba66.cer (raw, json)
Hash identifier:          jjbr4OKtJEHQu9fPj5AlCfNdimJUadIP1QaJNSvhjXM=
Subject key identifier:   8E:02:F7:B4:C4:46:AC:9B:CF:3E:74:6A:7C:CA:9B:91:B7:91:38:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E49DC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/b1e681b3a50e20044b7b83f7f72b1363596eba66.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Sat 11 May 2024 15:54:40 +0000
Subordinate resources:    AS: 265769
                          IP: 164.163.80.0/22
                          IP: 2803:e7c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14982597 (0xe49dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : May 11 15:54:40 2024 GMT
        Subject: CN=b1e681b3a50e20044b7b83f7f72b1363596eba66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:4d:8b:72:a5:af:66:4d:92:8f:05:f3:92:
                    bb:18:37:88:2c:3a:63:3c:6f:61:f2:c1:2d:ea:fd:
                    98:8a:49:34:d5:00:9a:32:a4:e0:45:99:6e:13:e3:
                    fa:8d:b8:8c:4a:7e:42:d9:f9:a1:77:6f:46:86:d3:
                    a1:51:4b:90:ee:51:02:16:74:ce:f3:29:48:84:8d:
                    ff:66:86:0d:ea:a2:77:80:29:53:4c:b4:7f:e0:5e:
                    74:b7:32:dd:db:cd:2b:a1:65:16:93:b7:3b:bb:44:
                    68:08:f7:c1:4e:7c:09:c8:39:35:de:e2:e2:14:45:
                    3a:8b:5e:4d:0b:5a:d4:78:2a:5c:cc:32:84:ac:29:
                    21:f0:77:94:c6:1f:79:18:1d:73:2c:63:aa:83:63:
                    8c:e9:8b:be:f1:b0:c6:cc:a2:43:9a:40:df:5f:62:
                    96:de:6a:97:14:ea:80:39:c2:ce:49:5a:99:98:8b:
                    b7:f1:33:f3:f1:ee:57:43:61:94:36:31:2e:e1:3e:
                    f2:4e:6c:34:a8:1b:db:90:5e:e9:13:4c:37:2f:bf:
                    9e:b9:f4:59:c1:31:1b:4f:cf:c3:74:c7:82:12:98:
                    70:ae:f2:b6:53:8f:6b:7b:49:da:3c:e5:3a:17:14:
                    82:a4:1f:d1:bb:64:77:fd:6b:0c:6f:ab:a5:1b:4d:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:F7:B4:C4:46:AC:9B:CF:3E:74:6A:7C:CA:9B:91:B7:91:38:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/b1e681b3a50e20044b7b83f7f72b1363596eba66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.80.0/22
                IPv6:
                  2803:e7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265769

    Signature Algorithm: sha256WithRSAEncryption
         b6:38:6a:b1:d6:1c:61:56:ad:da:8d:43:3e:55:73:1f:af:6b:
         a6:f6:6c:4f:a2:2d:e8:1e:24:03:e1:f9:38:ca:08:5a:3d:d5:
         01:10:56:2a:f7:7b:48:0d:17:d0:2b:dc:4d:3b:39:a6:c9:21:
         73:72:4c:f3:f1:9e:a8:41:7d:69:a1:10:aa:13:3c:ef:a4:40:
         6a:61:60:55:da:fa:c7:9a:a0:c7:df:48:24:d4:dc:c8:b1:21:
         54:7f:31:82:5c:f9:03:33:07:df:ff:f3:0f:4b:23:c8:13:95:
         75:64:7c:35:7a:0a:8b:43:39:1c:f9:7f:56:4f:d5:53:73:ad:
         58:80:7a:a6:39:fc:5b:87:d2:63:50:16:db:0b:c7:bc:a5:56:
         ae:e2:a2:57:91:67:38:ea:b0:de:59:0c:e0:86:66:ef:8c:16:
         f0:4e:ba:e4:f5:b0:d7:9d:da:d5:d7:83:b9:3b:a1:cb:7f:d0:
         e2:c6:db:0f:03:f0:63:cf:8c:08:80:6d:c1:92:29:40:74:6a:
         e1:71:11:99:99:47:62:3e:da:6b:80:bd:71:4e:f5:db:c8:44:
         bd:16:fa:a4:d0:48:15:70:4a:d6:3d:62:89:ca:b3:88:a2:42:
         39:4b:e7:34:02:18:0d:cb:40:aa:1b:3f:e2:a3:4e:93:97:14:
         eb:61:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----