Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer
File:                     d802d1f4519aab3e5793a16a3c9971a640951720.cer (raw, json)
Hash identifier:          u6jlbmeHAyAcQGmKVQK47KFlyqcVNopUwRGUwd8a2Hc=
Subject key identifier:   07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F28572
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Wed 21 Aug 2024 16:03:00 +0000
Subordinate resources:    AS: 263693
                          IP: 138.121.160.0/22
                          IP: 179.60.232.0/22
                          IP: 2803:3880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15893874 (0xf28572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Aug 21 16:03:00 2024 GMT
        Subject: CN=d802d1f4519aab3e5793a16a3c9971a640951720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:d5:40:4c:63:75:5e:3e:6d:39:e6:d5:d2:
                    7b:bc:fd:e4:40:1c:4f:c8:ed:b0:c8:27:d8:1c:61:
                    6e:32:43:53:3e:9b:83:10:3f:cb:c6:c8:da:31:73:
                    09:e2:ce:26:21:f9:a8:0b:02:e9:b2:a9:22:d9:26:
                    42:a8:2b:57:86:28:4e:6a:b0:ec:ba:bb:f9:75:04:
                    62:e1:7c:3c:9b:0d:92:ea:98:96:6c:15:67:5d:aa:
                    91:29:b8:ce:7f:fa:75:aa:3a:b1:52:87:01:1a:7c:
                    ed:12:92:a3:21:6c:6c:99:0f:12:0f:a9:cc:98:37:
                    45:47:b0:83:e9:c3:bb:82:43:17:ba:1e:8e:04:c6:
                    9c:d1:ea:49:63:ba:a4:8b:d0:12:fb:4f:6e:c3:44:
                    d7:f1:c8:33:19:b2:a8:47:88:3d:24:00:4a:23:e8:
                    32:38:bb:71:0a:0e:ff:c3:16:e8:f8:3a:5c:28:65:
                    14:6d:0c:e3:0a:50:5c:a5:d2:e4:be:cf:c0:64:95:
                    70:48:9f:c9:7e:41:9d:2e:77:cf:53:1a:a5:77:51:
                    4e:01:e5:b0:0e:38:5f:28:90:2a:3c:b5:2d:a0:8b:
                    f6:b4:f7:91:61:ee:ea:ef:06:a4:7c:a0:34:39:fd:
                    ed:5f:f3:c1:e9:d7:dc:c2:26:c3:58:2e:3f:c9:ca:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.160.0/22
                  179.60.232.0/22
                IPv6:
                  2803:3880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263693

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:b5:b2:f0:95:1c:63:d7:20:e7:17:20:a7:78:85:86:76:
         33:1f:ce:1f:fe:64:85:45:9c:06:ac:c6:1b:36:9f:41:8c:70:
         e4:d1:6c:b6:52:77:6e:d7:4e:89:7c:7d:b2:e0:c6:8b:53:8e:
         9e:95:00:71:21:67:96:9f:fc:bc:dc:1e:64:9b:cf:46:c1:06:
         8e:45:5c:c2:1d:82:23:57:e7:67:61:63:b8:7b:b1:98:1a:ef:
         45:a1:e8:fe:76:ba:ad:49:07:0a:fd:a4:c7:b5:92:d1:a5:e8:
         87:70:ae:b5:f8:29:3f:72:46:50:94:81:05:2c:50:29:25:6e:
         89:a4:56:c3:87:d4:1f:60:52:2b:31:6d:b9:94:be:c8:49:83:
         66:07:8b:b2:c1:a6:03:b2:ea:c9:69:e1:a0:f7:8a:b6:65:75:
         40:b3:1f:9e:6c:66:ff:10:ce:68:3c:67:ba:23:8b:a6:b3:a1:
         8f:9e:22:a4:bf:b3:91:11:2f:ec:a6:3c:81:34:a6:49:b9:28:
         eb:aa:a9:58:91:ec:a6:ec:05:27:d3:44:82:31:98:2c:89:58:
         7c:98:12:5f:29:06:2e:d6:d5:62:96:80:3b:43:8c:04:42:65:
         f6:b5:4b:c9:f6:61:d7:78:3b:78:10:9a:c1:51:8c:a3:25:9d:
         2a:54:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----