Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5267601dd83a1d41c0c445e8a98d8c44f999705.cer
File:                     c5267601dd83a1d41c0c445e8a98d8c44f999705.cer (raw, json)
Hash identifier:          vhu7xJMNRs1ioXQcK9mw42GiZJewnS5awNE5MD4pWJM=
Subject key identifier:   B7:D9:28:DB:EB:F0:D1:69:4B:10:FA:D6:C5:6F:5C:9B:12:52:B2:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF65D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0a20dc46-77b0-47ae-af37-368258b84bec/c5267601dd83a1d41c0c445e8a98d8c44f999705.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0a20dc46-77b0-47ae-af37-368258b84bec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:13 +0000
Certificate not after:    Sat 23 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 263238
                          IP: 200.63.104.0/22
                          IP: 2803:4180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14640593 (0xdf65d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:13 2017 GMT
            Not After : Mar 23 06:00:00 2024 GMT
        Subject: CN=c5267601dd83a1d41c0c445e8a98d8c44f999705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:04:58:55:82:fc:f1:cb:5f:46:6d:c1:ca:
                    07:40:dd:7d:bb:ea:26:0e:da:6a:8d:25:6f:80:7b:
                    4e:d5:2c:0e:43:9f:25:19:9f:50:87:9b:d2:21:f2:
                    0f:4e:79:5b:ef:86:90:77:70:2c:48:e3:25:bc:c9:
                    ae:f0:98:35:54:2a:ea:ad:85:9f:a1:e1:68:0d:ad:
                    44:12:c1:8b:6b:a5:2d:4d:af:43:4d:bb:eb:11:43:
                    bc:ac:35:a9:8d:c1:5d:50:47:9d:3c:fb:0b:a0:0a:
                    a2:95:d2:e8:e6:25:18:72:e0:85:3d:45:fa:92:d7:
                    ba:86:41:69:0c:69:9b:e4:25:48:93:7d:e9:40:bc:
                    c1:e5:9c:6a:f4:a7:6c:cf:cd:8a:e0:5f:e3:b4:a2:
                    cb:37:53:28:03:75:b8:8d:10:2f:df:23:2e:6a:93:
                    d1:41:b7:2c:b4:61:b6:5d:29:b8:47:fd:f3:3e:21:
                    44:92:9d:7c:28:b3:da:0f:93:43:78:c8:5c:ba:2b:
                    ae:82:3b:af:a2:0e:ec:37:f4:27:ae:08:ec:38:10:
                    46:f7:8f:8d:09:0a:05:9a:d2:0d:04:41:a2:1b:e4:
                    fe:51:d5:bf:1a:48:7a:40:d0:ee:57:d9:0d:3e:d5:
                    47:30:79:44:72:a0:57:45:e1:ce:ca:44:22:68:53:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:28:DB:EB:F0:D1:69:4B:10:FA:D6:C5:6F:5C:9B:12:52:B2:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0a20dc46-77b0-47ae-af37-368258b84bec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0a20dc46-77b0-47ae-af37-368258b84bec/c5267601dd83a1d41c0c445e8a98d8c44f999705.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.104.0/22
                IPv6:
                  2803:4180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263238

    Signature Algorithm: sha256WithRSAEncryption
         ab:83:4c:c5:e3:44:b9:d3:b5:e8:8d:67:cc:84:fa:44:17:ed:
         0e:ec:14:9e:6b:4d:31:70:8d:f8:84:1d:a2:b4:8b:48:fa:55:
         f4:bb:94:3b:16:38:50:30:cf:c6:7d:9b:6a:eb:b5:0b:d8:98:
         d9:14:29:d5:e0:62:eb:e4:49:3e:43:c9:01:14:8f:9f:33:7e:
         04:bc:20:38:7b:0a:83:4f:90:31:a7:e1:21:7e:66:d3:57:86:
         22:08:3c:06:59:6a:3b:36:74:d7:9b:f0:67:cc:99:87:68:4c:
         ab:aa:40:e7:11:24:d3:a5:87:a5:eb:fa:74:34:87:68:a9:bb:
         7a:cb:f3:e0:c1:94:4b:8a:0c:73:cf:81:80:26:d8:50:75:c4:
         84:bf:55:bc:1b:30:87:e1:ed:4e:b4:69:71:bd:9a:af:cb:6f:
         fb:4e:d7:e4:96:7e:b1:77:79:45:8e:a0:93:06:68:fa:e6:3b:
         b7:40:21:37:55:3f:c6:1d:88:b5:84:ed:68:16:43:8d:18:d1:
         b8:04:3f:dc:63:1d:ca:b0:18:6b:99:7b:37:d8:27:3e:23:47:
         a3:2b:75:3d:3b:7f:0a:16:c5:de:d8:39:ce:cf:de:40:a6:ed:
         bb:c9:72:69:45:fb:a1:c5:66:66:8b:4c:78:91:98:77:d7:82:
         72:b3:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----