Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.cer
File:                     bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.cer (raw, json)
Hash identifier:          9PjPF/jChiKyBNNaVYyoJyLihstIxmWgIzcy5b+bvtM=
Subject key identifier:   33:76:69:0E:95:80:A6:3C:1C:0F:0C:06:DC:94:FF:04:D1:33:68:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7E36F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:53 +0000
Certificate not after:    Sat 23 Dec 2023 20:26:29 +0000
Subordinate resources:    IP: 138.94.0.0/22
                          IP: 2803:6f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14148463 (0xd7e36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:53 2017 GMT
            Not After : Dec 23 20:26:29 2023 GMT
        Subject: CN=bfbc3170ff4bbeef2a866c5733ee25ecd4102b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:92:cd:44:cf:ce:a4:94:6f:a7:96:63:89:
                    e7:e4:cd:f1:f3:49:ae:2f:aa:a1:bb:7f:84:44:c9:
                    a8:a9:ea:d7:87:58:e2:67:d2:5c:83:c1:70:76:75:
                    4f:50:55:d1:d1:19:b8:02:85:3d:8a:70:75:96:a3:
                    c3:3b:d2:51:1d:73:fe:a6:e8:10:d6:00:b8:da:8f:
                    11:61:a4:ae:87:49:75:e1:3d:99:1b:5e:a0:46:41:
                    80:bf:39:1d:64:0c:b2:26:88:53:0f:16:d5:e6:e6:
                    7d:26:c2:38:84:be:0e:8c:23:e7:a6:b9:8d:26:9e:
                    ad:e5:fd:5e:b6:7a:c6:12:c2:f4:5c:2d:fc:33:73:
                    0b:97:fb:69:f8:43:87:93:a6:03:8a:bf:05:b2:4b:
                    b7:64:7f:26:1a:b9:6f:86:cd:d9:a0:45:a2:48:33:
                    1d:60:54:40:88:77:d5:30:ee:e7:f0:59:d7:2c:cf:
                    c8:ad:2f:60:08:17:a0:09:af:5d:8d:bc:ee:8f:21:
                    fa:bf:e4:c5:6b:ad:ad:42:d6:23:9f:ed:df:e5:3f:
                    45:ec:f1:7b:56:de:87:c6:4b:a8:1a:f9:71:ca:f0:
                    6d:4f:52:45:e0:25:bf:a0:21:a6:20:a4:83:8c:6b:
                    3b:32:48:a7:93:8f:9f:88:70:7f:e0:b2:e3:11:7d:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:69:0E:95:80:A6:3C:1C:0F:0C:06:DC:94:FF:04:D1:33:68:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.0.0/22
                IPv6:
                  2803:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:66:19:bf:4e:85:c0:4e:42:7c:39:e6:2f:96:b4:8c:69:
         f6:fc:a5:92:54:ca:fb:15:f5:f5:79:26:1b:0e:e1:7f:e2:80:
         87:5f:06:35:e6:b4:71:26:24:9b:02:7c:1b:ad:3f:65:0a:12:
         1e:c2:cb:db:dc:c4:3c:ed:37:7a:23:5f:2c:b6:04:42:dc:ec:
         f5:d0:0b:d8:46:72:11:d3:d3:b1:af:51:8c:5c:41:6a:a3:53:
         91:2e:15:a6:cc:53:27:37:dd:f5:42:83:bc:5d:a8:6b:81:9f:
         f4:71:df:e0:cc:94:5c:c1:b2:30:7a:50:d4:12:bb:2c:5d:57:
         b5:9c:19:7d:e9:38:f0:85:c2:dc:d9:d1:e8:e9:63:5a:85:9b:
         49:4e:09:5f:ab:2a:b5:61:f6:28:4d:16:85:d6:40:07:6d:9c:
         7d:43:d0:ce:8b:69:6a:a8:62:99:49:55:ec:72:a5:53:06:df:
         65:fc:9d:5b:54:92:0b:c9:ca:68:ba:13:9e:0b:df:94:a9:27:
         4d:8d:55:1a:8e:fe:cc:97:45:80:ca:a3:03:75:d2:e9:e6:ec:
         76:6c:a9:52:32:9d:7f:e8:41:cb:03:6c:8c:b8:f9:ff:4b:b9:
         7a:45:78:d3:a6:69:5e:15:7a:dc:45:46:32:84:cd:dd:6c:90:
         46:4b:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----