Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
File:                     c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer (raw, json)
Hash identifier:          EqoeEy55aO3+CxFaTfJ5u2x/zwapWDOMbXwJCif8BR0=
Subject key identifier:   BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5C8B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:52 +0000
Certificate not after:    Sat 15 Jun 2024 18:58:43 +0000
Subordinate resources:    AS: 269918
                          IP: 131.72.168.0/22
                          IP: 2803:dd80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14010547 (0xd5c8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:52 2017 GMT
            Not After : Jun 15 18:58:43 2024 GMT
        Subject: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:c8:79:4e:43:df:a1:03:3d:9f:53:8e:d2:
                    30:22:c6:3a:b6:b7:f2:47:6a:98:b9:10:df:b1:f5:
                    af:1c:8c:c6:a5:23:a8:01:aa:c7:8a:d8:d5:c4:7e:
                    70:ed:aa:63:70:0b:80:66:04:9e:23:97:92:a6:2b:
                    91:d4:69:79:7b:a2:e5:08:11:c0:6d:86:26:0b:bd:
                    cb:05:d8:19:da:77:ac:65:7a:bd:fb:80:d8:89:6c:
                    fc:72:76:77:7f:2b:fd:91:26:a9:f2:56:10:28:23:
                    f9:ee:1e:0b:28:df:40:e2:d7:6f:51:67:1d:0e:19:
                    92:73:66:d3:16:81:73:e7:ed:fb:dd:f9:47:3a:a2:
                    a7:5d:c1:fa:e8:d5:79:6b:fe:5b:a5:e3:d3:76:b3:
                    f2:43:cd:34:f0:54:c2:43:44:53:ab:34:3e:dd:04:
                    ce:c5:8a:16:9d:3b:09:bd:d9:4b:57:5f:7c:0b:b9:
                    c6:28:da:a1:f4:85:48:73:a8:be:69:ce:00:db:73:
                    f3:96:fd:ff:5a:ae:81:f1:f4:98:4b:04:87:cd:86:
                    b6:65:f3:ca:d0:26:7a:52:1d:b9:4a:d7:d0:0c:37:
                    93:20:1b:9e:93:1e:66:62:4d:dc:f8:b1:6f:0a:3a:
                    7f:85:fa:cb:8f:41:82:fc:6d:fd:7e:f5:26:96:4d:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269918

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:ca:e9:4f:5d:10:6e:07:e0:9d:37:2a:78:00:9f:ac:73:
         a0:60:aa:5b:bf:8f:ba:8d:c8:40:74:a1:78:d9:a4:a6:47:7b:
         2f:e7:6b:94:52:90:39:66:a3:4f:85:7f:e6:8a:de:2a:fb:7c:
         e6:e0:0f:e3:f6:86:f7:e7:cf:f8:9a:2a:0f:8f:d5:34:6a:b7:
         54:62:51:d4:17:19:0b:57:19:41:13:07:07:5b:ca:64:23:02:
         a2:b9:f8:59:70:a7:81:91:0d:c3:17:7b:a8:02:06:b4:f8:08:
         6d:c4:68:60:79:f7:27:f6:a2:9c:f8:dc:9f:90:13:cc:5a:2d:
         70:e1:81:04:1b:88:e3:e7:89:1c:3a:68:11:e4:e4:fc:87:b3:
         7f:65:0a:44:53:16:94:55:ed:72:8b:73:a1:ff:9e:4d:0d:2c:
         e2:47:86:e5:22:fd:b0:ba:7f:d2:7a:e9:2b:60:23:77:41:e3:
         ad:57:ba:60:5e:51:76:c0:35:ab:47:ff:fa:11:31:27:89:4c:
         ea:9b:2b:34:21:88:e2:60:69:c7:7f:bc:92:d5:bc:b9:05:5c:
         9e:88:29:02:0f:05:a3:95:c5:c1:20:0d:92:5a:68:fb:a3:f6:
         1f:22:10:67:90:78:1a:78:e5:cc:7c:58:99:33:04:ad:06:3c:
         c9:fe:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----