Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
File:                     bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer (raw, json)
Hash identifier:          CluKmGW6lUms/hBcrry7a7jte3PGHo9CzIqwY6TuRF0=
Subject key identifier:   9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8B9A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Tue 02 Jan 2024 18:13:03 +0000
Subordinate resources:    AS: 52253
                          IP: 190.108.196.0 -- 190.108.215.255
                          IP: 190.124.220.0/22
                          IP: 2803:da00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14203297 (0xd8b9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Jan  2 18:13:03 2024 GMT
        Subject: CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:73:8e:b6:67:20:68:fe:41:5d:ee:9e:e2:
                    a6:99:cf:c2:a2:36:93:aa:7b:07:ce:d7:a8:61:10:
                    fa:56:ee:64:62:e7:e7:75:0a:fc:6b:7c:50:ed:2d:
                    40:c7:77:85:18:dc:43:9e:da:ad:63:77:86:c3:eb:
                    8a:ed:f8:bc:9b:08:a7:d5:d5:b8:9f:8e:5d:c5:fc:
                    12:62:57:f7:f6:5d:5b:e5:e2:b8:23:98:16:e2:0d:
                    0b:0b:91:a9:4d:5b:6b:1d:58:8a:89:4c:65:6b:38:
                    79:cd:7c:60:e6:78:ae:e7:d1:88:cc:3b:ad:ff:93:
                    5d:73:6a:a9:75:bf:e5:06:84:58:ac:23:84:ce:0f:
                    b3:6e:2b:99:02:63:a7:d2:e5:8a:b2:00:99:ed:4c:
                    18:d1:d5:3b:b4:37:39:22:2c:22:98:f7:50:ae:61:
                    89:6c:c3:1f:35:16:7e:e1:e9:c7:c8:19:c4:cf:47:
                    da:80:fe:a2:1e:02:0f:67:27:30:bc:ed:c6:97:ef:
                    b8:67:a7:da:50:3a:38:2a:bc:cc:e6:69:4f:17:6d:
                    2d:80:c2:0f:3b:20:f2:0d:aa:96:15:16:c4:d1:8b:
                    ca:20:d8:a5:6a:a0:f1:23:61:15:50:89:bb:bf:49:
                    b6:ee:24:35:85:c1:9b:85:d8:35:33:bb:06:1c:24:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.196.0-190.108.215.255
                  190.124.220.0/22
                IPv6:
                  2803:da00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52253

    Signature Algorithm: sha256WithRSAEncryption
         bc:1e:9e:bf:bd:d2:0d:c4:3f:62:2e:26:91:cf:44:f1:32:0b:
         ff:f0:2c:85:37:07:de:04:d2:fe:7c:73:74:ad:47:22:1c:b8:
         23:e1:6c:5e:ad:61:0d:69:8f:fe:d3:9d:f4:2a:0c:d7:7f:99:
         3b:99:f4:8f:64:0d:bb:e5:35:19:97:d8:3a:e4:14:de:e5:be:
         2a:9a:68:98:e0:ed:84:a9:81:2a:f8:2a:86:42:68:93:e7:4e:
         56:b7:18:71:a0:b3:6c:ef:2d:05:62:e0:b8:5a:b9:84:3d:68:
         44:20:9b:82:ee:28:49:72:bf:4d:26:b6:2a:f9:0e:4f:1e:47:
         42:db:2b:9b:e1:81:7b:4d:57:1b:24:45:89:fb:f4:3c:19:d7:
         92:ce:91:7d:c3:ff:aa:0d:3d:17:41:ec:e5:48:a9:e4:11:88:
         72:02:67:44:57:17:8e:cb:be:61:05:5e:7e:31:f6:af:b3:72:
         77:23:ab:bf:22:be:6f:d1:e7:01:89:3d:06:ec:fc:7f:10:f6:
         42:02:e8:9b:aa:fd:67:a2:bd:84:e2:89:f0:f9:7f:7b:29:df:
         78:16:fc:59:3e:0b:24:bc:2e:a2:a8:ad:45:7b:2a:46:16:eb:
         21:65:60:22:4f:d6:52:d6:79:ea:39:50:8e:9a:f7:e2:ba:f3:
         d8:30:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----