Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b35c1322099fee88cef9f367919a030f9bda180f.cer
File:                     b35c1322099fee88cef9f367919a030f9bda180f.cer (raw, json)
Hash identifier:          4zocvuHe9gjztgVWjlMsd1R9E3+S6ALmBUUTBJ8cz5c=
Subject key identifier:   C2:93:67:43:D2:33:1F:32:58:27:CD:20:5C:F0:0D:37:F8:A6:FC:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E99D34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/321834d0-4a78-42c4-8984-2f43ba7aafe4/b35c1322099fee88cef9f367919a030f9bda180f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/321834d0-4a78-42c4-8984-2f43ba7aafe4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:20 +0000
Certificate not after:    Wed 12 Jun 2024 16:27:20 +0000
Subordinate resources:    AS: 264764
                          IP: 168.194.72.0/22
                          IP: 213.173.52.0/22
                          IP: 2803:bf40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15310132 (0xe99d34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:20 2017 GMT
            Not After : Jun 12 16:27:20 2024 GMT
        Subject: CN=b35c1322099fee88cef9f367919a030f9bda180f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:05:89:5a:4d:cd:11:19:73:35:63:de:6d:08:
                    c5:3c:65:a4:7a:22:a0:83:48:ad:5c:fe:4e:71:ed:
                    53:05:2c:08:d6:eb:47:c5:4d:f9:92:14:8b:2c:f3:
                    aa:21:c0:80:84:e6:a1:0d:03:e4:36:a2:19:4c:0a:
                    0f:76:29:c1:85:3d:6c:38:6c:b7:b5:5c:18:ef:52:
                    be:74:8e:32:ca:b7:ad:e7:5b:25:6e:64:4f:83:26:
                    e4:5e:6d:14:5d:d6:05:85:18:e9:75:d9:21:fb:b8:
                    50:1a:6d:ac:fd:1b:71:17:a0:05:51:d4:6c:11:2a:
                    61:16:d5:0f:ab:a7:48:38:86:94:8d:0b:38:58:a6:
                    2c:07:69:c0:2a:47:a2:b1:38:de:89:0d:b3:91:01:
                    ec:94:09:14:74:85:07:05:ff:60:c9:d1:98:e3:14:
                    c1:21:28:f9:03:85:a6:5f:05:a4:32:50:fc:70:be:
                    f0:16:88:83:0c:95:64:4d:81:29:63:b3:7e:65:23:
                    87:d2:2c:89:d4:fe:1f:2b:c5:7c:f3:54:a3:a7:af:
                    2d:99:a6:7f:2a:89:24:e9:5a:5b:e5:3f:d3:45:33:
                    f7:9a:d4:4d:49:6b:6d:73:d1:e1:a8:59:e8:db:1c:
                    ca:0f:e1:d5:36:81:fb:34:0d:33:76:86:cc:7f:2e:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:67:43:D2:33:1F:32:58:27:CD:20:5C:F0:0D:37:F8:A6:FC:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/321834d0-4a78-42c4-8984-2f43ba7aafe4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/321834d0-4a78-42c4-8984-2f43ba7aafe4/b35c1322099fee88cef9f367919a030f9bda180f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.72.0/22
                  213.173.52.0/22
                IPv6:
                  2803:bf40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264764

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:a3:69:e5:d6:95:d2:d8:dc:50:c2:0c:61:9b:95:3f:9a:
         05:30:bb:ea:31:fa:c1:4a:3f:cb:76:e8:d3:f5:6b:ca:98:69:
         f9:7d:c2:f9:d2:ff:d2:40:84:86:66:45:6f:03:33:d7:22:f2:
         09:2d:a7:88:19:2f:b1:03:aa:82:c6:57:1a:d2:60:cb:8a:cf:
         2d:08:86:7e:c8:84:25:5b:a0:96:fe:57:3f:82:20:8b:32:85:
         42:4c:2c:8e:4d:f2:1b:a2:49:56:49:77:ea:54:32:10:ea:b8:
         6e:03:a9:5f:a3:a3:63:b2:ba:92:06:53:cf:6c:57:54:18:9f:
         34:c0:e9:f9:ef:8e:25:18:a3:59:1e:61:f0:0e:37:cf:f6:11:
         71:01:d8:c0:32:c3:b3:2b:06:f0:f5:6c:76:a7:a9:5c:01:c8:
         ac:0e:d8:46:65:9d:6d:6e:9c:d1:51:7d:e5:58:68:15:8e:c4:
         3e:c6:84:49:3d:3e:af:dc:d6:9e:ab:5a:3a:08:83:f5:1d:86:
         e0:ef:61:a0:33:ba:a3:91:03:f6:e1:b7:d6:c1:2c:2a:af:ff:
         a6:8b:57:f2:d2:04:4b:c2:ad:3c:c8:92:c0:9a:89:9b:e5:94:
         73:c0:2b:64:b7:06:7c:1b:d8:0a:be:5b:f6:25:73:a7:4c:73:
         bd:38:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----