Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer
File:                     dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer (raw, json)
Hash identifier:          r1tNE+NedkW1v3IFg3JbpZOF1/0PyB4ihd8ORbYTHZg=
Subject key identifier:   38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F08B86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:53 +0000
Certificate not after:    Sat 03 Aug 2024 23:30:38 +0000
Subordinate resources:    AS: 265833
                          IP: 45.70.168.0/22
                          IP: 2803:dc20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15764358 (0xf08b86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:53 2017 GMT
            Not After : Aug  3 23:30:38 2024 GMT
        Subject: CN=dee6b996a76c14ae5f55dba4ca3c67bc234275ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:1a:3d:ad:68:a3:ef:15:c5:44:9f:5e:ee:
                    f1:40:ca:27:5d:06:9b:a1:06:b1:6c:67:d5:f6:68:
                    e9:2f:74:38:75:b1:8d:40:fe:9a:34:14:b4:ec:b8:
                    85:e0:6c:df:e7:cc:dc:8e:c7:14:03:ba:ee:c2:a5:
                    34:a0:82:4b:4f:ee:c9:16:50:59:47:03:b6:d9:db:
                    ae:5b:9b:0d:14:18:92:b1:83:d6:b3:b6:67:1a:30:
                    99:cf:ac:73:1b:1b:7e:c9:a1:95:6b:4e:10:63:d5:
                    01:09:97:9b:b5:4f:fd:cf:52:20:95:42:6b:7e:ee:
                    59:5c:fa:f4:5e:8b:19:c9:a2:4e:bd:e8:f8:14:dd:
                    86:d4:ad:56:9c:db:72:54:8e:06:8d:87:74:6a:d3:
                    03:bc:6f:4f:54:1f:c5:83:79:c7:98:09:94:aa:12:
                    f5:b9:69:37:cd:e6:f5:3a:39:fc:2b:dd:f8:3a:59:
                    8f:27:b1:a6:f6:5a:06:22:53:28:f1:ee:ea:16:e6:
                    6d:09:b7:2a:e8:a8:07:d8:ce:88:7f:de:11:4b:e5:
                    18:0a:ef:71:b2:44:f9:ca:0c:d9:bc:c3:fe:a2:c1:
                    b6:16:73:73:03:38:a7:b8:ab:e5:60:05:73:d5:df:
                    f0:0c:2c:13:23:9b:6b:59:d4:07:ee:7f:5a:43:ea:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.168.0/22
                IPv6:
                  2803:dc20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265833

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:cd:d4:df:fd:05:f8:1b:97:84:a3:f2:3d:9c:13:84:86:
         13:9a:b4:92:88:95:68:67:91:19:1d:f6:55:52:03:31:43:b0:
         b0:73:dc:eb:58:65:52:77:ba:d8:84:f0:0e:43:81:95:61:18:
         00:e2:f9:27:7b:34:54:9b:70:1b:6c:66:cb:08:29:19:bb:f1:
         34:c9:ea:b1:26:44:56:7f:ab:29:38:e2:1e:86:f7:e7:61:64:
         7e:4a:0e:96:75:4f:39:b8:f1:08:07:3b:8e:7a:16:02:bd:94:
         b4:6b:8b:30:f9:b4:24:18:77:2d:d6:46:ca:c9:71:ff:69:dc:
         31:76:a8:03:ef:68:d2:55:60:f0:16:51:fa:85:fe:47:79:cf:
         34:80:13:b6:4c:13:c5:c3:d8:b7:23:37:a8:15:bf:bd:e2:d3:
         e0:5a:05:72:7f:98:1c:ce:2b:0a:70:f4:f5:79:3a:35:d6:02:
         9a:1b:26:3f:0f:07:f3:5f:ad:4b:35:fb:69:bc:56:c7:6e:05:
         30:c0:33:8b:03:f8:34:06:a6:b5:1b:11:f7:88:76:fb:76:be:
         f5:e4:30:fe:38:68:b2:7b:99:5a:b6:ef:e0:01:11:1d:49:df:
         90:a2:63:6a:96:a1:9f:74:d8:50:f6:1e:0b:55:ac:00:c3:fa:
         68:df:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----