Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
File:                     d4919a8b2dab56309b76746e8d395e1b61b10da9.cer (raw, json)
Hash identifier:          hcIc8JfMghny8eKsXFhy2ZQrMxcRdSeBd3FL4GNbKCY=
Subject key identifier:   BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E57B43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:25 +0000
Certificate not after:    Tue 14 May 2024 19:25:49 +0000
Subordinate resources:    AS: 265774
                          IP: 164.163.216.0/22
                          IP: 2803:f7c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15039299 (0xe57b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:25 2017 GMT
            Not After : May 14 19:25:49 2024 GMT
        Subject: CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:8f:02:14:f1:a9:b7:00:21:70:35:03:9f:
                    64:b2:e6:33:cb:dd:c7:e2:5a:ef:76:d0:76:c2:f2:
                    1e:cd:df:18:05:cc:f6:f0:29:d8:ed:d4:85:94:77:
                    a1:96:74:93:30:79:a6:5e:4a:d9:df:ab:e6:c0:53:
                    ec:57:81:ac:32:df:ca:42:84:89:ab:74:23:38:14:
                    19:50:03:ab:b8:31:bb:72:ee:3c:92:27:e9:0c:aa:
                    de:44:67:af:df:69:4e:69:49:9c:8a:d0:f5:71:90:
                    31:3e:2a:74:56:fe:10:b8:be:1b:55:ef:01:c8:fb:
                    91:e5:ce:d5:03:11:d1:e2:b9:70:8e:9d:3b:5f:07:
                    30:d4:4c:69:08:20:82:6d:47:7d:27:9a:b7:4f:3b:
                    c2:2d:0f:13:c2:8b:59:11:24:31:9d:d6:38:de:79:
                    6a:00:a7:e2:f4:04:c1:96:b0:a9:45:1b:d3:e6:36:
                    74:b2:70:24:46:8b:72:9a:81:f2:02:b1:b2:59:e3:
                    8e:04:2b:f0:dc:60:ad:e1:c0:65:ff:4a:33:d4:01:
                    ef:8e:04:99:ee:36:d5:2d:83:09:e7:0a:ed:37:54:
                    3d:d4:59:41:9e:83:23:8b:eb:fc:74:4c:03:55:1b:
                    74:50:68:05:da:ab:0f:6c:aa:d4:50:b7:49:08:0a:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.216.0/22
                IPv6:
                  2803:f7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265774

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:ee:bb:56:82:1f:b3:09:d3:e4:cc:97:5b:0e:62:04:d0:
         52:88:66:b3:59:29:38:fd:71:1b:b3:6f:0e:b4:ad:fa:49:b9:
         89:f8:1b:81:2d:2c:5b:a4:8e:01:b3:0f:42:56:c6:ba:bd:5b:
         42:bc:10:82:bc:01:9c:14:c2:36:a7:4d:e4:78:1b:f7:df:46:
         6b:bd:9d:09:5b:34:e9:12:d1:2a:05:99:47:cb:11:d6:8b:b0:
         40:f4:b4:23:f1:75:77:e2:04:1e:16:2a:7f:8e:a2:32:64:90:
         ae:47:d7:d0:31:6e:b7:a1:f3:5e:2f:76:83:6b:74:0e:e9:49:
         20:4c:a2:14:c6:c3:61:58:a0:11:01:e8:b0:b1:d7:46:ff:05:
         72:8d:fa:65:8b:aa:66:c8:61:fb:14:d0:33:10:ce:0d:a7:35:
         41:64:7f:73:d1:d4:53:55:eb:ae:85:d1:ea:1a:72:bd:d1:ac:
         96:a3:49:7e:eb:d6:f0:fc:f8:74:45:9f:73:46:66:53:ff:b2:
         b2:f9:1c:42:05:ef:7d:84:91:6f:b0:54:b2:8f:10:07:9a:3f:
         c6:eb:ac:b1:d6:25:fb:16:a7:83:fc:1b:a6:37:90:d1:e0:1a:
         91:9d:6b:09:bd:69:30:7c:0c:ad:2d:9b:cc:05:d7:7d:de:6a:
         8e:5d:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----