Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.cer
File:                     b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.cer (raw, json)
Hash identifier:          26HiITD1EViSjSrTmGC04CztaS9BznZsrdj60XP6cUo=
Subject key identifier:   29:DA:7A:6C:6B:65:DC:88:9B:C6:0A:2C:19:E4:30:A9:4A:D8:BD:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F02841
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 Oct 2018 20:23:19 +0000
Certificate not after:    Tue 30 Jul 2024 22:43:20 +0000
Subordinate resources:    AS: 263687
                          IP: 131.161.236.0/22
                          IP: 2803:f380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15738945 (0xf02841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 20:23:19 2018 GMT
            Not After : Jul 30 22:43:20 2024 GMT
        Subject: CN=b5cb84b2403a4c6769f3a9c96971e8facdd5b24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:64:a5:6b:53:2d:40:5f:03:a4:2f:0a:46:
                    a1:44:cf:35:bc:b2:4b:b8:ba:14:07:ed:9b:e8:91:
                    a1:6f:55:1a:51:62:cd:95:2a:19:48:02:29:c0:46:
                    b9:44:3d:8b:3f:56:d5:21:eb:73:7c:f6:19:2b:00:
                    a0:5a:1b:09:0c:6b:a4:5f:8a:53:a1:a5:fe:bc:9b:
                    f2:01:32:4a:53:8b:ee:f9:83:7e:8f:de:86:17:e7:
                    89:2b:4e:71:b7:c8:04:b6:be:a0:be:07:24:7b:00:
                    fd:c0:88:6a:bf:7f:8a:66:cb:65:68:dd:66:1e:ab:
                    a8:3a:ec:a0:4b:de:98:11:de:16:34:a9:10:70:02:
                    7e:24:ce:77:fe:d8:d4:77:fd:77:e6:00:c9:80:41:
                    a6:00:ef:f4:2c:7d:8d:77:43:b5:bd:ad:9b:16:51:
                    07:25:4e:82:28:59:e4:23:87:4c:d1:ba:d4:bf:98:
                    8d:a7:e1:ec:80:d5:e2:f0:d0:3a:a9:b6:93:32:22:
                    7e:59:1f:02:71:a0:d0:a5:76:00:f9:b1:53:b2:ef:
                    e7:df:ec:3f:37:d3:4f:32:0e:97:10:c4:b7:6b:c9:
                    62:42:03:92:c5:ea:ac:d0:79:25:a9:f6:20:89:d7:
                    82:bd:95:5f:63:f6:85:cc:b6:56:3e:4c:c2:19:34:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:7A:6C:6B:65:DC:88:9B:C6:0A:2C:19:E4:30:A9:4A:D8:BD:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.236.0/22
                IPv6:
                  2803:f380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263687

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:06:e3:29:44:bf:23:72:eb:f9:31:f9:3e:c5:7a:49:b2:
         42:cf:2e:56:f7:80:82:32:dd:c5:c3:29:14:98:89:a9:10:78:
         4f:06:31:cd:81:d6:09:d0:e0:7a:08:e6:41:17:b0:12:fd:f5:
         3c:97:4c:eb:7d:a3:a4:eb:b6:ab:96:e1:65:f5:ca:12:e0:23:
         8e:7b:52:6a:1d:af:7a:55:6f:86:98:53:6e:5a:4e:b2:d0:52:
         93:e4:d7:67:fa:9f:f0:e2:ca:0c:f8:7e:5e:b4:ff:25:47:95:
         75:a1:fd:3e:87:ca:eb:22:7f:65:e8:02:b5:7c:86:8f:0a:f5:
         05:ac:88:86:96:c6:c4:24:20:4a:41:5a:e4:f7:94:f4:0f:48:
         e7:43:45:1e:a7:e9:b7:cb:02:33:e5:51:57:ab:13:d1:b5:9e:
         45:f9:e7:25:4d:fb:9a:34:a4:c6:a4:c5:e4:56:22:4e:1b:da:
         cc:bb:ab:33:ec:e3:d6:9d:f6:da:55:99:bb:b3:3c:41:fa:eb:
         55:6b:76:ac:72:14:e0:0f:fb:88:75:4f:bf:06:63:82:da:ce:
         24:01:9f:d6:08:d5:fe:9d:86:dc:11:bf:55:22:38:d9:c2:fc:
         94:98:5f:72:07:fe:6c:d1:1b:99:e2:0d:b4:38:09:90:91:68:
         17:9d:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----