Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc219a0c8565d978e678cda1ed42599771df9ec0.cer
File:                     dc219a0c8565d978e678cda1ed42599771df9ec0.cer (raw, json)
Hash identifier:          ww5gYRKVDX8o1XAHU6NPlFhEK8UuQ6v9rTPGKeyiGXs=
Subject key identifier:   3F:0E:42:0E:C0:31:5E:D4:7C:EC:D0:8A:96:48:26:63:5E:B2:EA:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E76B92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/dc219a0c8565d978e678cda1ed42599771df9ec0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:44 +0000
Certificate not after:    Mon 27 May 2024 06:00:00 +0000
Subordinate resources:    AS: 263806
                          IP: 138.185.64.0/22
                          IP: 2803:6240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15166354 (0xe76b92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:44 2017 GMT
            Not After : May 27 06:00:00 2024 GMT
        Subject: CN=dc219a0c8565d978e678cda1ed42599771df9ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:da:b0:44:19:47:74:93:dc:d2:4b:86:07:
                    d0:52:60:2b:32:c8:ee:72:da:59:d4:f6:15:ed:40:
                    26:c9:20:d9:5d:ba:f1:cb:13:05:92:2a:0e:44:28:
                    4a:c5:7b:4b:dc:53:57:ea:34:e3:3e:33:c7:e3:3e:
                    dc:3c:10:0d:63:17:db:e0:31:99:9f:2d:c4:25:f0:
                    3c:4e:27:17:69:36:f8:e5:6b:20:ed:ad:e5:78:09:
                    a9:df:8c:51:af:c7:5b:70:3e:98:31:b0:bb:d0:51:
                    0d:ee:7c:76:f4:1c:be:1a:0d:97:0f:2d:2e:21:ad:
                    a3:ba:08:b6:cb:11:67:bf:a4:c5:11:5f:af:f2:a4:
                    6d:94:0f:58:ac:68:6e:1f:86:03:42:eb:cc:4b:d5:
                    e7:86:0b:c4:51:cb:5d:81:5d:8f:b3:bb:27:06:f2:
                    3e:c7:cd:45:65:b8:4e:3d:51:88:1a:04:a3:16:95:
                    8e:5b:31:29:36:3c:f9:f8:fd:59:7a:e4:aa:1b:ae:
                    29:ba:59:97:d8:a9:29:f8:cf:ed:a5:f3:d5:b2:e4:
                    63:f3:c6:ae:ad:ff:8d:56:61:e6:3b:f5:63:c3:b3:
                    95:70:e5:63:46:1e:93:3e:2d:3e:0c:96:38:7f:20:
                    a1:aa:e0:3a:1c:12:81:b1:ef:70:0f:3b:c5:82:c1:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0E:42:0E:C0:31:5E:D4:7C:EC:D0:8A:96:48:26:63:5E:B2:EA:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/dc219a0c8565d978e678cda1ed42599771df9ec0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.64.0/22
                IPv6:
                  2803:6240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263806

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:e3:22:f3:f9:18:ba:b4:06:f0:92:9e:a0:36:64:ec:90:
         e0:32:d4:f8:62:b3:83:56:83:6a:e5:4d:39:55:42:2d:94:eb:
         cf:81:b0:5b:06:e3:cd:0d:41:88:ce:1e:b3:a5:63:c2:6c:bc:
         03:84:c8:b3:13:23:f0:3c:a5:48:3a:de:e1:6e:f2:e7:a7:c5:
         c0:47:b2:26:a1:81:b6:45:54:1c:09:7c:5b:51:a4:be:85:f9:
         4d:68:fd:fe:60:1a:a2:37:ae:04:cc:f7:2b:dd:0f:31:f7:36:
         e2:9f:49:bb:59:e4:1b:25:ef:c8:08:6c:f4:87:1e:78:3c:8f:
         fd:8e:ab:90:13:4a:56:07:ea:fa:11:7f:e3:91:88:dd:17:16:
         ce:2c:e5:af:39:b8:17:97:f7:b5:e2:61:06:85:bb:81:91:a8:
         68:5b:b1:ca:d5:18:eb:76:9b:f8:dc:7a:a6:38:04:a3:5e:85:
         f1:f6:bd:1c:ab:fe:e9:c0:00:d4:4d:8d:08:0d:fc:01:13:4c:
         6f:78:77:4d:26:43:04:9e:d7:27:78:25:af:83:91:48:86:12:
         95:e2:0a:4a:d0:80:5a:c8:18:c1:ac:a3:52:07:93:46:82:90:
         2e:12:e8:0e:af:ce:17:df:33:67:57:12:88:87:2a:f2:99:51:
         6d:73:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----