Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b238c78c972aa16101a07c72dbb4af46547e301d.cer
File:                     b238c78c972aa16101a07c72dbb4af46547e301d.cer (raw, json)
Hash identifier:          Zt9qUQoRAJ/oj1ZLgCSuO1lR44BVEMVjK56hCunMoSs=
Subject key identifier:   60:A6:3C:06:6E:11:A8:3A:ED:E2:E0:88:8C:3A:FF:C5:AB:A7:16:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB7C4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f14e03f7-6b5f-4109-b3de-701cf65b0d7b/b238c78c972aa16101a07c72dbb4af46547e301d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f14e03f7-6b5f-4109-b3de-701cf65b0d7b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:30 +0000
Certificate not after:    Thu 27 Jun 2024 18:43:45 +0000
Subordinate resources:    AS: 263172
                          IP: 179.60.200.0/22
                          IP: 2803:7080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15432782 (0xeb7c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:30 2017 GMT
            Not After : Jun 27 18:43:45 2024 GMT
        Subject: CN=b238c78c972aa16101a07c72dbb4af46547e301d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:13:f1:05:de:29:d5:fe:22:51:d3:26:be:58:
                    dc:82:73:cf:c2:d3:3b:17:a4:0e:cc:6f:a1:0f:bc:
                    1d:d9:b3:88:f8:53:5e:52:80:8b:22:dd:44:4b:bd:
                    b8:3a:55:ce:92:ab:64:96:63:bd:09:87:dc:54:48:
                    be:22:56:ea:a1:2b:2d:a2:f5:09:4d:b2:24:a9:d7:
                    b2:33:0b:a6:97:13:67:eb:37:38:ff:10:e5:92:ed:
                    9e:aa:7b:ab:af:d9:6d:32:71:f5:67:95:31:53:06:
                    b3:6b:8f:ad:c1:e1:09:a1:e1:a9:b4:44:1f:b6:6a:
                    c1:fd:a9:7c:84:79:8a:e5:7e:ec:9d:b8:89:b2:06:
                    f6:9a:34:02:c3:67:9c:a7:71:f6:c3:af:8b:97:57:
                    ee:57:ec:a5:9c:8d:a4:7d:ee:fc:e7:ee:2d:d4:53:
                    ec:eb:d7:27:16:2b:3c:59:49:99:bb:fd:b0:e9:60:
                    6f:82:8e:0b:3a:a3:e5:62:23:a8:bd:5c:c1:ea:29:
                    c1:bf:ed:95:03:46:a8:bd:38:62:87:c8:99:35:33:
                    96:f1:c4:bf:1a:00:e3:10:5f:87:25:04:f9:2c:57:
                    61:f8:32:32:9c:5a:04:9f:c1:e7:3f:04:c2:34:54:
                    a6:54:10:56:d4:0c:e5:60:f7:24:c4:95:18:ec:49:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A6:3C:06:6E:11:A8:3A:ED:E2:E0:88:8C:3A:FF:C5:AB:A7:16:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f14e03f7-6b5f-4109-b3de-701cf65b0d7b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f14e03f7-6b5f-4109-b3de-701cf65b0d7b/b238c78c972aa16101a07c72dbb4af46547e301d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.200.0/22
                IPv6:
                  2803:7080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263172

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:91:3f:52:e5:53:36:20:e9:5a:81:4e:44:ea:41:9b:79:
         48:72:10:f0:de:7c:54:2f:f6:c4:e6:ec:68:c1:99:24:4b:6f:
         e6:31:14:2f:7d:fb:f1:65:ca:f5:ee:bb:7d:f7:da:da:4e:38:
         39:8a:9b:58:16:d9:91:4c:42:a3:b8:61:bc:5d:83:d1:7d:ce:
         8a:79:2f:75:4f:ea:9f:1e:9b:31:ac:90:7c:a8:93:15:60:03:
         1b:3e:64:fd:d6:cb:8d:fe:5d:cf:23:63:e9:f5:cf:b5:23:c9:
         b2:7b:84:55:30:75:f9:ca:9b:a4:ac:a0:77:8e:cb:a2:4e:6d:
         04:e6:b2:7a:a3:79:54:fc:c6:bf:37:b4:5a:a0:a8:35:43:bb:
         af:e7:34:45:3f:ba:d9:7f:45:a0:30:0f:17:bf:87:44:6f:1c:
         48:90:61:1d:e5:d4:4b:16:48:f1:88:b8:af:e8:2e:7a:ca:a4:
         e5:07:f7:c9:7c:ae:01:14:c9:b8:18:2c:14:16:a4:8c:bb:0a:
         50:50:a3:e0:75:26:7b:2a:29:00:a3:53:31:40:81:6b:09:c1:
         50:00:6b:1e:ee:aa:10:51:e4:b7:06:b6:c5:51:ce:ba:ae:02:
         e1:87:d5:20:0c:d8:91:3a:9d:35:ce:4e:73:0e:8d:f1:45:e8:
         ed:12:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----