Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.cer
File:                     bcd70bfc3861eb7e019391a06760bc1fb909a8fe.cer (raw, json)
Hash identifier:          /6T9KABfxDmeeO+AnWpN2vAubZWXE61vXudcKF4Yx+4=
Subject key identifier:   1C:DB:01:BF:88:4C:7D:6F:F0:83:0E:BA:4E:1C:0C:DC:BF:7C:98:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1F606
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:44 +0000
Certificate not after:    Sat 20 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 27745
                          IP: 161.0.80.0/20
                          IP: 186.159.96.0/20
                          IP: 190.4.64.0/20
                          IP: 200.6.144.0/21
                          IP: 2803:a000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14808582 (0xe1f606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:44 2017 GMT
            Not After : Apr 20 06:00:00 2024 GMT
        Subject: CN=bcd70bfc3861eb7e019391a06760bc1fb909a8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:c6:88:21:b9:65:24:eb:c8:b3:ff:cf:9b:
                    aa:74:8d:15:13:d0:b6:3b:7d:a9:27:4c:aa:9b:b0:
                    97:15:a1:1b:85:32:e7:cc:ed:1f:8c:d5:1a:90:9e:
                    c5:61:75:be:eb:45:af:78:5f:6d:40:a1:de:62:7e:
                    27:96:7a:00:fa:4d:14:0b:2b:97:68:5f:33:e0:4c:
                    b4:06:2a:a0:f8:bd:04:fd:51:1d:63:96:97:3b:38:
                    94:84:7d:00:30:ef:69:b8:e4:8a:fb:11:ce:24:7e:
                    62:3d:57:70:35:ef:d9:c3:a2:ec:54:1f:5a:64:e1:
                    70:89:73:94:cc:9a:3e:8e:7a:3f:a6:cc:57:24:ed:
                    85:82:d3:3f:92:79:4b:3a:87:81:ab:b6:86:56:70:
                    2c:01:0e:ec:e5:ca:59:f3:27:6a:33:4f:16:4e:58:
                    ed:92:1a:ae:f2:01:e6:54:9e:18:df:57:1a:39:09:
                    06:1e:29:0c:55:5a:1b:84:8a:37:f2:ec:25:cf:c6:
                    63:d0:98:19:1a:94:24:5c:56:5b:14:e5:bb:cc:fd:
                    34:ef:5f:4c:2b:35:eb:f5:16:8b:65:33:87:d4:e8:
                    e6:d5:cf:81:d9:e7:9a:7d:a0:8d:a5:82:ae:5a:28:
                    53:dd:ab:14:c0:c6:72:6c:6a:3d:c7:9b:5f:5d:03:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DB:01:BF:88:4C:7D:6F:F0:83:0E:BA:4E:1C:0C:DC:BF:7C:98:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.80.0/20
                  186.159.96.0/20
                  190.4.64.0/20
                  200.6.144.0/21
                IPv6:
                  2803:a000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27745

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:75:23:db:9d:74:b1:7a:36:81:af:41:57:9e:96:a4:d4:
         46:93:94:47:31:13:85:86:7b:53:25:16:eb:f9:23:62:51:d6:
         f6:b5:18:aa:ae:e8:93:93:6d:b0:d3:bc:3c:86:37:a7:03:84:
         77:68:45:c0:a3:5e:02:af:bc:05:0d:6b:79:dc:bc:36:ce:c8:
         c6:ee:ff:0d:7d:bd:dd:e9:02:29:4a:0d:a1:a1:a0:35:52:5d:
         06:9c:1c:1b:52:fb:83:0e:1b:62:af:a9:70:3f:31:2d:f0:98:
         19:c3:18:49:7e:4f:24:34:f4:69:df:78:39:eb:1c:b3:2f:05:
         68:d7:68:64:3f:85:fc:01:d8:ba:7f:0f:e9:d0:10:0f:04:91:
         33:49:cb:9b:92:6c:69:10:38:b9:90:b3:b4:9d:44:2f:52:60:
         fb:a1:a8:91:65:02:c2:5d:75:b0:71:37:80:5a:98:ca:39:4b:
         ec:e7:96:1f:23:3f:35:2e:49:28:c0:33:4e:36:0c:dc:e4:6a:
         ba:21:91:8d:48:9d:c7:e3:77:d0:ae:00:10:2f:1b:49:ed:e1:
         85:a2:18:16:0a:84:88:bb:b0:14:9c:20:9e:06:68:3a:c0:2f:
         64:6e:d5:2f:07:4e:4d:8a:96:c2:19:98:c1:24:fc:56:2b:bc:
         68:06:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----