Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
File:                     d5f5b360f6396f35cac76fe7727148af2ea950d9.cer (raw, json)
Hash identifier:          qEcLfRq1o7gj4iavM0RKA7x5IVPQXjHBWqN7eslc52g=
Subject key identifier:   38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBF343
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:21 +0000
Certificate not after:    Tue 05 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 52323
                          AS: 269752
                          IP: 181.16.128.0/17
                          IP: 2800:600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16511811 (0xfbf343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:21 2017 GMT
            Not After : Nov  5 04:00:00 2024 GMT
        Subject: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:4b:e8:80:84:2a:ee:8b:3c:d1:da:ef:7b:
                    0f:bc:ad:f0:f1:25:4c:90:6e:10:dd:9b:cd:7c:7a:
                    45:36:9a:33:0f:b3:a6:79:57:cf:62:9f:79:b1:e9:
                    9c:a2:9f:c3:be:08:89:e7:31:d8:05:e7:f4:81:d1:
                    59:cd:3f:03:fa:c8:cf:5a:40:d5:dc:8b:0e:8a:ea:
                    31:ae:70:cf:27:6c:50:54:25:87:bf:ba:45:bc:a9:
                    87:98:ea:3c:db:49:7c:fa:db:d1:fc:ef:dd:f3:f0:
                    1c:6e:ac:7c:7a:5c:99:f5:b4:2d:93:bd:1d:6d:09:
                    ef:c1:1d:f6:4c:f2:95:6a:a0:1f:cf:71:b1:96:cd:
                    d7:0c:73:52:55:8f:b0:5e:11:f1:84:96:f3:b3:9a:
                    4d:94:4a:51:b7:d8:bb:3e:0a:b3:9f:47:1a:33:22:
                    67:f7:08:e6:8b:8b:c5:fc:7a:33:dd:44:6f:89:15:
                    b5:ee:b7:26:a9:bd:78:24:cf:df:af:6c:49:8b:72:
                    b5:88:87:17:22:8a:f3:ed:0c:e1:cd:9b:3b:be:49:
                    cc:2b:9c:63:ec:4e:7f:01:a1:f1:2a:5a:75:71:71:
                    99:a0:db:f7:22:68:5a:eb:75:9f:c0:1f:60:d9:5e:
                    d1:41:bc:31:ad:8d:83:53:02:04:87:59:31:36:fe:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.128.0/17
                IPv6:
                  2800:600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52323
                  269752

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:b3:df:0a:88:72:2d:aa:a5:38:37:bd:d6:b7:e9:2f:12:
         e4:16:9f:59:fc:37:00:0f:f3:97:2d:bb:74:33:e6:1d:f4:18:
         17:41:31:e0:50:8c:9c:b3:37:85:15:1c:f1:23:7e:3e:09:f4:
         ee:7d:c0:6e:3b:4d:c4:a0:34:9d:78:90:12:5c:7e:c7:a5:db:
         21:dc:c4:5e:d0:5b:f7:26:27:04:d4:da:13:ff:80:af:29:cf:
         a7:2c:e5:f9:bb:04:ba:b4:a1:77:f7:93:4a:a5:a9:bd:4c:c9:
         cb:d4:4e:dd:f2:33:04:1b:d5:3f:6d:6e:90:25:54:0a:dd:3d:
         bf:d0:6d:2f:c6:ef:ca:83:a8:3b:df:39:3e:32:00:31:03:db:
         69:55:4f:bd:34:d1:18:1e:37:3c:77:68:02:b9:73:77:99:43:
         bf:d1:77:58:18:65:0d:27:02:68:4e:91:e2:95:95:11:db:d4:
         bd:50:83:f0:3e:65:87:0f:4e:83:1a:71:92:c3:eb:15:97:69:
         af:97:cc:4f:41:a2:61:fc:79:db:bb:92:61:7f:53:dd:84:2e:
         37:48:98:9e:8b:89:5e:e0:bd:f4:92:a3:fb:de:01:13:7f:1b:
         ea:1a:d4:57:9f:8f:0b:f1:53:20:f4:4d:f2:2f:a4:e8:59:d3:
         0c:d3:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----