Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
File:                     bd7f33cd5376098fb55565247f8dae5ea5de2952.cer (raw, json)
Hash identifier:          Ef69t9N4rM6wvfn61uPTMZaANxzRUqNIewlHmwHXE3E=
Subject key identifier:   A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D527F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Fri 08 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 27958
                          IP: 200.50.232.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13969399 (0xd527f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : Dec  8 04:00:00 2023 GMT
        Subject: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:0d:b1:8f:a3:06:9a:93:dd:e0:16:61:b8:
                    13:5d:ba:42:12:39:ce:1c:d1:87:fd:9e:41:59:61:
                    a5:70:51:ec:e8:e3:cc:c8:4e:62:07:47:ff:fb:58:
                    37:22:59:8d:16:7d:25:39:e6:93:c9:ab:64:8c:5d:
                    d4:74:b8:f4:f7:9a:08:41:22:87:92:ab:eb:49:92:
                    fe:d4:cb:1c:24:b5:8c:40:0e:1a:1c:dc:b2:1f:73:
                    63:28:19:4a:90:02:03:75:ec:c8:21:02:12:a4:23:
                    e3:ca:1c:b1:52:62:5a:60:69:b8:72:31:fb:d6:34:
                    5b:d4:af:e4:51:f0:e8:1c:89:a4:23:df:3f:40:39:
                    a6:61:6c:59:b3:87:f3:7f:7d:3a:85:33:f7:03:59:
                    8e:f2:90:b1:bb:bd:81:7c:b9:15:0b:88:12:80:f8:
                    e7:97:1b:86:2a:98:5d:35:4b:66:83:66:4b:5d:06:
                    03:2c:39:d4:65:1b:86:ad:2f:04:92:b9:6a:91:92:
                    e2:24:11:ea:4f:b2:a3:81:c6:cc:4f:6f:a8:a9:06:
                    32:17:32:12:c6:64:c2:f1:5a:68:db:71:1b:e0:03:
                    a6:fb:8d:ec:d3:57:1f:48:3e:9f:74:23:25:81:01:
                    ef:1b:df:31:62:d4:f5:f0:06:cc:e0:5f:14:ff:5b:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.232.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27958

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:30:31:55:6b:c9:d9:0d:6b:61:0e:b6:3a:b2:5c:c4:3f:
         01:f9:9b:b0:b3:24:a0:bc:e3:dd:e7:71:68:e7:81:48:42:c6:
         78:1e:19:e5:bc:cb:53:a9:f6:16:77:ec:73:a9:cf:90:db:f8:
         84:d6:2c:79:c9:63:12:e7:53:8a:65:2a:eb:e5:30:51:da:65:
         6e:c8:3b:a9:eb:c7:62:9f:55:45:37:79:dd:fb:4b:39:ec:c9:
         33:e4:3b:22:c5:30:5c:c8:a6:61:44:4f:95:d5:18:74:61:79:
         b7:c6:36:41:24:30:2c:b4:7b:f0:a6:a4:6a:80:f0:c7:8b:38:
         e2:a1:6e:45:0e:6c:01:c4:a6:89:72:be:31:61:0f:e1:4a:90:
         52:94:83:ef:ba:80:67:9c:12:14:68:2f:b7:1c:f8:d3:4e:1a:
         80:30:ea:d2:31:b4:bd:62:9f:a4:b0:5a:8c:02:93:0b:f3:38:
         ce:67:5c:57:53:f3:9a:83:35:a0:aa:f5:07:07:98:6e:78:87:
         af:1a:c4:1f:7d:b0:c4:2f:8f:b5:ce:46:3b:16:97:50:86:0a:
         19:e2:4f:a4:49:0a:ca:f2:a5:c3:5e:55:29:54:de:33:15:45:
         b8:fb:16:9c:05:18:1c:dc:9b:ae:76:44:3c:87:5c:8f:6e:cb:
         64:32:db:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----