Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
File:                     cdefb494494d25bc19fb16535ea742adc7a792b8.cer (raw, json)
Hash identifier:          sgOlizPhnBHwNJ4246tsPn3GeffWSVoIakEk0pdFJfE=
Subject key identifier:   54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC4A6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Wed 03 Jul 2024 22:12:15 +0000
Subordinate resources:    AS: 64120
                          IP: 179.60.204.0/22
                          IP: 2803:f080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15485549 (0xec4a6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Jul  3 22:12:15 2024 GMT
        Subject: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:bf:7e:d6:0e:7d:4b:84:b4:c9:fc:89:f3:
                    35:29:94:8a:12:a3:5b:be:d2:a7:81:54:df:b6:51:
                    a7:92:92:81:2b:ba:0a:28:10:1a:5c:e5:81:b3:be:
                    ff:f7:3b:0c:e4:28:47:95:e4:a0:c8:de:fc:02:c3:
                    f5:64:4b:38:a7:d5:0e:02:27:87:f3:3d:92:49:c0:
                    32:d8:82:42:0d:5c:fe:76:0c:de:30:44:c0:e3:38:
                    f4:5e:af:60:65:78:13:67:ff:36:bc:08:8a:44:04:
                    1e:9f:db:b0:57:a1:8d:1a:95:19:6a:f3:35:93:cd:
                    7a:ef:fa:a3:af:87:df:72:c1:4c:57:ee:e0:7d:1c:
                    e2:aa:c4:94:32:eb:b9:38:2c:0a:6d:3c:d1:4a:15:
                    90:2b:b2:f1:38:d3:b5:76:2e:18:d0:05:f4:50:74:
                    28:bf:9d:f3:5b:e7:48:80:b0:0e:02:02:e5:a2:58:
                    95:07:94:0b:ee:d8:db:a1:b7:0b:2d:8b:97:0c:df:
                    42:6c:d4:a1:b3:3d:db:d5:89:08:d8:1f:71:21:d4:
                    03:cb:4e:1a:a5:e1:83:db:2c:c6:f5:6c:1f:bf:6b:
                    6a:f2:f1:9f:67:71:59:7e:33:b9:20:96:f5:7c:7e:
                    d8:95:51:17:70:5a:c7:f6:2d:ea:a2:b6:77:9b:5a:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.204.0/22
                IPv6:
                  2803:f080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64120

    Signature Algorithm: sha256WithRSAEncryption
         0d:01:14:39:04:ad:7b:c8:2a:90:be:22:bd:63:d3:82:37:c8:
         61:de:70:7c:b6:5f:8f:f9:84:38:45:e3:b0:26:0e:0b:73:89:
         d8:a2:fc:04:1d:d7:37:45:70:4e:32:85:b2:09:45:5b:e4:6c:
         bf:d1:13:2f:69:a6:ed:8b:d1:b0:4d:a4:9f:09:02:eb:c5:bb:
         f3:53:1d:89:34:12:20:8f:00:e7:dd:99:be:1c:9b:46:15:d0:
         41:bb:e4:27:7c:31:97:08:9e:81:6c:ee:d1:17:4b:a6:ee:09:
         65:26:7a:19:87:00:a7:88:27:21:16:39:d8:97:da:0b:cb:9f:
         33:65:d6:f9:0c:dd:e9:24:88:b9:45:ac:f4:ae:b3:e2:ef:dc:
         70:a6:c2:c2:e8:50:e8:4e:17:27:63:ed:77:78:e3:a3:4c:78:
         bc:3b:73:fe:71:4c:6e:fd:bb:8e:77:39:a7:ad:e5:5c:42:c9:
         da:16:7f:b1:22:19:d4:ec:fb:bd:aa:ba:52:31:9e:dc:a6:48:
         5a:76:1b:04:28:20:74:36:54:d5:67:a1:11:c0:68:b7:2c:a4:
         af:43:ef:f0:e1:76:d4:0c:30:19:2b:77:b1:37:3b:e1:5e:ab:
         2b:ca:31:1b:8d:8b:6f:59:8d:f2:d1:6c:d0:c6:9e:dd:52:38:
         c0:cf:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----