Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b64182d80dbafb202ea6b3a2a194eeafd9c4bd05.cer
File:                     b64182d80dbafb202ea6b3a2a194eeafd9c4bd05.cer (raw, json)
Hash identifier:          U0FHBC/fgtUr2rbMaFwGCAKeWC3N6nwIfgl/LNA+Mok=
Subject key identifier:   B8:AD:88:E9:14:4C:8A:1B:D7:D9:CD:37:C4:E9:93:9E:FB:3F:F1:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA67F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/b64182d80dbafb202ea6b3a2a194eeafd9c4bd05.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:27 +0000
Certificate not after:    Tue 22 Oct 2024 15:11:39 +0000
Subordinate resources:    AS: 264652
                          IP: 143.255.36.0/22
                          IP: 2803:7940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16410613 (0xfa67f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:27 2017 GMT
            Not After : Oct 22 15:11:39 2024 GMT
        Subject: CN=b64182d80dbafb202ea6b3a2a194eeafd9c4bd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:4f:d4:e0:19:5d:72:60:cc:31:9a:72:8e:
                    92:50:dd:41:56:46:ec:8b:02:5b:9f:4c:43:98:da:
                    ef:1c:f2:60:84:7e:12:0f:46:a6:3f:ef:c0:4a:ff:
                    b3:4d:34:ee:f6:27:4b:d5:72:cd:60:fc:de:ef:26:
                    d1:d8:73:6a:83:25:2e:dd:85:07:ad:66:e8:0e:76:
                    4d:61:6b:c8:4a:4d:ff:84:39:32:d8:41:0e:05:cd:
                    42:35:fb:fa:f8:ef:03:38:a2:57:8c:21:78:84:2a:
                    e5:e8:b4:ed:f1:2b:07:a1:58:fa:2d:a0:17:0d:a8:
                    09:81:b2:7f:aa:09:e2:7e:70:ab:7e:0d:0e:4a:60:
                    b1:77:97:59:9b:f4:b6:c4:4c:3c:53:f2:72:0d:5a:
                    c3:eb:05:be:08:33:f1:ad:24:af:55:de:32:bf:b5:
                    4b:1a:6d:27:05:a7:a4:77:72:9a:1b:1f:7e:12:38:
                    ce:db:80:40:9e:7f:a8:aa:26:12:5d:7e:2b:97:51:
                    0a:61:f3:34:0c:08:72:66:a0:56:0b:55:8a:42:49:
                    ae:a3:94:ab:63:0a:e1:a7:b4:33:c3:81:ab:ba:19:
                    09:d9:74:c7:ed:f4:db:eb:a0:b7:c5:ac:26:b7:52:
                    20:6a:d1:8f:9d:a1:99:34:80:ef:b6:02:78:47:ac:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:88:E9:14:4C:8A:1B:D7:D9:CD:37:C4:E9:93:9E:FB:3F:F1:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/b64182d80dbafb202ea6b3a2a194eeafd9c4bd05.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.36.0/22
                IPv6:
                  2803:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264652

    Signature Algorithm: sha256WithRSAEncryption
         a5:f5:eb:88:dd:8d:d9:42:94:bd:f7:83:4b:2f:2b:fc:0d:77:
         99:4c:c6:5e:af:1f:d5:2b:f4:5c:ec:dc:54:db:fe:2e:1c:d1:
         42:54:b2:81:bf:ed:79:4d:57:b6:23:c5:67:cc:89:a8:4c:63:
         8c:87:12:28:86:95:f1:f8:a2:3d:73:18:8b:f4:42:ef:89:54:
         80:46:f8:77:96:6a:60:27:11:91:d2:bd:53:92:bf:e1:08:7e:
         11:cd:db:da:1f:3d:aa:a2:e3:8a:f7:32:9d:2a:77:3a:46:9b:
         88:41:80:eb:4d:97:16:2f:74:84:f4:d6:0d:6a:d9:ff:5e:24:
         ff:ec:53:da:74:2c:2a:47:6d:b0:6d:1c:e8:0a:bc:14:c7:c6:
         8a:ca:bb:d0:91:27:56:01:2e:05:05:f7:54:23:d5:4e:e7:bb:
         f0:af:67:0f:8a:6f:ef:da:67:a3:37:19:7d:af:f3:4d:09:ca:
         95:ad:5a:d0:ac:ba:8d:f1:e4:d3:5c:97:68:ad:90:1a:85:e5:
         6b:8f:51:44:a6:d9:00:80:f1:34:48:4b:d5:f1:b1:b7:fe:4d:
         17:b8:19:eb:85:9f:f6:50:c1:fb:31:4f:49:65:77:1e:a7:af:
         da:d8:df:00:75:9b:e4:54:b1:41:7a:df:0e:59:45:05:18:0c:
         38:e8:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----