Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcfc1bb1cedc6321805c909b53115fb285208613.cer
File:                     dcfc1bb1cedc6321805c909b53115fb285208613.cer (raw, json)
Hash identifier:          ooRE/iIYo3JByzVC3+QawzJrmFcBwDF0+bysLmtQ6Ug=
Subject key identifier:   EF:7F:13:07:0D:1A:46:0D:77:01:7A:A2:B8:28:0E:1B:F7:8F:C2:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E00826
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/dcfc1bb1cedc6321805c909b53115fb285208613.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Sat 30 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 265831
                          IP: 138.117.148.0/22
                          IP: 190.107.176.0/22
                          IP: 2803:4200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14682150 (0xe00826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Mar 30 06:00:00 2024 GMT
        Subject: CN=dcfc1bb1cedc6321805c909b53115fb285208613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:20:b2:39:d3:f6:9d:39:97:21:8f:0b:48:
                    b2:6d:c9:3f:f9:21:f2:8f:14:98:37:b8:96:18:ab:
                    a3:17:b1:b8:db:ef:5a:91:fd:54:bd:31:e3:6b:17:
                    b5:92:5c:88:e7:10:7d:59:3e:e2:af:be:23:ab:a3:
                    2b:09:a5:9e:4d:40:8f:61:91:44:85:22:6f:db:85:
                    99:84:3b:ee:21:0b:3d:d0:d6:4c:bd:d5:a7:f6:b3:
                    9b:74:b4:f4:94:c5:3f:3a:88:3f:22:57:15:40:fb:
                    79:ee:c7:4a:76:5c:09:dd:d7:cf:ef:f3:35:8e:ed:
                    18:89:08:53:7c:28:ef:34:68:65:b1:fc:b0:cd:14:
                    9f:44:4f:2e:e5:7b:6a:5d:69:cb:26:9d:ee:5f:93:
                    7b:60:a9:92:a3:bb:b1:41:9b:58:0e:a6:b5:ae:bb:
                    61:0d:27:69:f6:5c:5f:df:86:2c:73:3d:7a:e5:8e:
                    d6:56:72:75:d7:89:4b:04:75:65:61:7a:b9:a0:6d:
                    e3:25:0f:61:b6:43:f5:87:6d:9d:05:36:a6:73:55:
                    a6:a0:17:d0:3c:cd:71:15:12:b8:a5:49:da:b6:66:
                    93:da:e3:3f:8e:a3:3b:6a:10:74:1f:09:e5:96:a3:
                    fb:52:78:9a:e2:8a:30:68:e1:16:d6:1f:80:cc:55:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:13:07:0D:1A:46:0D:77:01:7A:A2:B8:28:0E:1B:F7:8F:C2:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/dcfc1bb1cedc6321805c909b53115fb285208613.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.148.0/22
                  190.107.176.0/22
                IPv6:
                  2803:4200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265831

    Signature Algorithm: sha256WithRSAEncryption
         5c:d4:9b:a2:63:10:21:13:5d:02:60:6c:00:c8:32:c6:51:d1:
         41:df:20:30:21:45:c8:9c:aa:e4:06:a0:8d:ce:4f:d2:fb:4d:
         98:dc:e7:bf:2a:85:b1:cc:91:9c:64:92:f1:25:3f:f2:84:7a:
         cc:b3:49:d5:e6:6d:f7:00:81:a3:55:12:0e:50:90:39:ed:17:
         ac:4b:9e:90:96:84:a9:f2:54:00:6f:d0:b4:c5:e4:1e:6f:fd:
         2f:43:53:a9:92:27:9d:24:5f:21:f2:71:9a:b8:d0:37:e6:63:
         c1:8c:98:53:fe:53:d1:2b:cc:1b:a5:11:cf:8b:6e:32:0c:f3:
         3b:e0:77:87:e8:5d:3d:aa:e9:01:6d:ce:75:16:41:73:f6:43:
         e8:86:c2:08:ef:5e:8a:98:69:62:e1:ad:4f:b9:00:51:b9:04:
         c0:95:b5:6a:3a:b7:e6:c0:41:08:e5:3e:a3:83:61:78:c8:b7:
         8e:80:53:2f:f8:a1:6e:8b:0f:ea:59:28:9a:17:a2:be:1b:da:
         f0:b5:bb:86:48:b0:ed:29:65:54:79:14:06:cf:00:d6:28:d3:
         6a:36:93:96:86:63:7d:c5:a1:9f:56:3a:3c:c4:fe:a1:2d:43:
         29:6e:21:2b:34:36:64:9e:21:fa:73:6e:d0:33:8d:7e:46:d6:
         c0:49:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----