Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c798b4141963c12fed3a8a7310121b822cdd4e87.cer
File:                     c798b4141963c12fed3a8a7310121b822cdd4e87.cer (raw, json)
Hash identifier:          6jAnR93xx13wXw9GUS9mEj8fpAWPBrjRwal4CPjTi4w=
Subject key identifier:   54:41:1C:B9:EA:09:C1:89:E4:08:E6:DD:E7:50:46:77:61:0E:9C:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0FC37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/c798b4141963c12fed3a8a7310121b822cdd4e87.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:06 +0000
Certificate not after:    Mon 08 Apr 2024 19:20:14 +0000
Subordinate resources:    AS: 265742
                          IP: 128.201.112.0/22
                          IP: 2803:33c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14744631 (0xe0fc37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:06 2017 GMT
            Not After : Apr  8 19:20:14 2024 GMT
        Subject: CN=c798b4141963c12fed3a8a7310121b822cdd4e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:4f:07:9f:5c:9f:8b:ac:48:1f:79:b9:16:
                    e0:ea:41:76:06:3c:a0:b9:ad:2d:93:78:3b:43:5e:
                    32:e5:1a:23:8b:5c:ba:6f:18:a7:07:7f:6e:e6:53:
                    e6:6e:74:32:2f:b9:ee:80:c8:dc:5e:2a:0e:d5:45:
                    0b:53:f6:19:bf:d9:fe:83:5a:c5:d2:b2:28:64:88:
                    a3:63:cc:0f:dd:2e:2f:52:53:ce:cc:1f:41:04:b9:
                    e9:11:23:78:d6:61:ed:98:84:d2:fc:2b:7d:de:fe:
                    2e:86:54:8f:ca:f5:75:30:e1:f7:ad:7d:99:61:da:
                    98:b8:33:25:2c:8f:b4:88:cb:4f:49:6b:c9:51:16:
                    20:fe:35:b4:58:40:ed:97:ba:98:01:01:07:ea:72:
                    62:03:0a:85:2d:26:a5:66:30:d0:74:9e:6d:bc:fe:
                    2d:98:eb:31:29:73:c8:c2:fc:21:60:fb:d8:b3:43:
                    ce:7e:8d:87:00:09:6d:fe:6b:86:15:db:e5:c1:de:
                    e2:5d:c0:d8:0c:6c:31:70:2d:dd:9c:c9:59:4c:93:
                    4d:31:ed:3d:37:3e:4e:54:c5:b4:c6:e0:2f:ff:e4:
                    d6:dd:9e:80:70:cd:d8:2a:fd:c3:c1:04:79:00:f2:
                    f4:c6:af:45:8c:11:62:66:a3:60:6f:5b:22:e2:e6:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:1C:B9:EA:09:C1:89:E4:08:E6:DD:E7:50:46:77:61:0E:9C:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/c798b4141963c12fed3a8a7310121b822cdd4e87.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.112.0/22
                IPv6:
                  2803:33c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265742

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:57:bf:12:c0:a6:18:23:db:76:2d:df:ac:ef:f2:3e:e0:
         39:0b:1e:ce:68:33:78:65:fe:08:87:66:19:7a:11:4b:8c:6e:
         b6:d3:85:e1:2d:23:0d:61:7a:78:94:48:51:86:37:cd:a5:b6:
         f5:47:7d:8f:b8:61:6e:bf:c2:46:2e:90:cc:53:06:99:a7:68:
         4b:82:f7:8e:3a:ad:6f:55:0e:04:16:19:90:89:14:14:8b:84:
         51:1d:22:fc:96:ea:a3:43:bf:73:22:e5:b2:46:a4:09:35:87:
         ed:56:be:36:51:3d:10:50:65:b4:d1:a0:1b:59:91:f6:6b:a9:
         c5:74:d0:28:bf:33:ab:b9:3e:56:97:6f:3f:30:d4:32:cb:bd:
         d1:62:06:44:bb:dc:4e:5e:01:00:3b:d7:38:8e:f2:1d:03:36:
         5b:da:4b:23:d3:52:ea:c5:20:da:9a:7d:36:cd:b9:da:3b:17:
         1c:23:22:15:e3:14:ef:d5:81:fc:45:08:ea:8c:65:a0:0d:e7:
         24:99:d0:10:33:a7:b8:7e:b6:d2:2a:1a:2a:f1:e7:4c:02:00:
         12:4c:3a:f6:8f:b1:37:a7:47:18:f4:74:58:e5:ae:99:f0:73:
         78:6e:40:ec:7d:31:74:a8:3b:6b:08:24:75:78:b1:56:d7:4a:
         bd:99:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----