Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
File:                     d5747c1980bcbeed56cb517c667a966b8945ceee.cer (raw, json)
Hash identifier:          ftUnpTRL5XYIMCrvbqXliBAfP/fxznXFgC209CApQCY=
Subject key identifier:   14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E94BA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Mon 10 Jun 2024 19:48:59 +0000
Subordinate resources:    AS: 262145
                          IP: 143.208.168.0/22
                          IP: 168.228.48.0/22
                          IP: 190.211.96.0/19
                          IP: 2803:5840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15289248 (0xe94ba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Jun 10 19:48:59 2024 GMT
        Subject: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:91:fc:22:00:41:24:de:7f:27:d7:31:82:
                    5b:21:d4:c8:a7:1b:2e:3e:64:19:b0:b5:de:d9:33:
                    f4:d8:cb:f3:71:2e:18:f3:23:f1:76:b0:74:84:c4:
                    2d:7a:ec:f1:ec:a3:9d:2f:62:83:3c:21:f8:d0:95:
                    58:9e:3e:8c:c1:74:9f:77:32:8b:fa:ba:45:74:60:
                    74:f6:67:0d:ed:47:24:b2:9e:d5:ed:46:3c:15:6a:
                    c2:f5:70:84:c1:a7:0f:33:c8:1a:70:f2:e0:62:dc:
                    96:99:a9:e9:a7:b9:2e:46:ac:7f:f0:62:41:b3:1b:
                    5d:d6:8c:28:11:1f:40:bd:16:46:8e:dd:ee:79:30:
                    8d:5f:1b:2e:da:af:b2:e5:bc:fb:41:25:81:8d:f7:
                    2f:18:02:0d:a1:44:26:58:34:23:e8:c8:b0:6e:26:
                    26:9e:20:4a:87:43:81:a3:4b:1b:3f:13:fa:c5:0c:
                    28:00:57:ab:35:6c:05:b8:ee:34:08:0a:40:19:e9:
                    ba:86:7a:9d:d4:5f:0b:5c:9a:66:9d:be:a0:80:da:
                    23:76:70:ca:ae:8e:94:64:2e:0f:17:cd:25:ae:e7:
                    dc:b3:6d:5e:d2:aa:f9:3b:47:83:a8:6e:8a:8d:cd:
                    c6:a4:58:49:b7:09:1c:89:06:f2:b2:0d:34:37:a6:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.168.0/22
                  168.228.48.0/22
                  190.211.96.0/19
                IPv6:
                  2803:5840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262145

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:3c:3f:5b:84:2b:bc:4f:b5:91:ab:2a:6a:af:2d:30:03:
         a6:31:8d:ea:67:4d:9a:7d:5e:8b:86:cb:15:51:f2:7a:8d:ce:
         8a:b5:a2:4e:a5:5c:6f:17:da:7f:2a:eb:a8:fd:7e:b6:5b:55:
         08:c7:dc:d7:c1:38:64:bb:5f:c6:cb:f2:eb:b4:a1:71:95:40:
         6b:ff:75:56:e9:c4:d4:22:b0:4a:b2:00:34:b7:1a:09:be:8e:
         56:f8:30:b0:9a:c0:34:3b:e5:6f:a9:82:05:ae:23:dd:b2:18:
         00:15:9f:33:fb:2b:1e:a3:5d:4b:8f:8f:79:7b:82:7e:14:9c:
         d8:cb:58:26:73:8f:42:8c:18:eb:86:f2:93:b6:c0:30:f0:e8:
         26:5d:fc:ba:e3:36:f6:c4:8b:ea:48:9d:4a:97:b4:6d:ab:a8:
         d7:77:f0:51:2e:d9:c4:ae:4a:9d:71:cc:12:1e:66:c5:c8:ae:
         49:b9:50:89:b1:1c:7a:fd:09:0d:e1:0c:8c:ec:8e:e9:76:1a:
         d6:29:37:5a:2e:fb:92:5d:7c:18:9f:f8:4b:d5:d8:2b:d0:99:
         85:c3:5f:08:c9:2c:2b:ad:03:6f:0c:de:3c:c9:1c:88:c8:1b:
         ca:bf:a0:c6:cf:b4:4c:10:83:9d:ee:a9:d0:51:8b:19:25:9f:
         cc:e0:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----