Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1f199734e391a7789d29da958f43080e77b40df.cer
File:                     e1f199734e391a7789d29da958f43080e77b40df.cer (raw, json)
Hash identifier:          Hxno3oS2HUm+lunc1anhRl/jOWDfQ5xFVz7Hnn+VitE=
Subject key identifier:   92:00:00:F7:49:F5:49:F5:1D:FE:24:26:4A:80:F3:ED:9E:EC:63:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8112A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/e1f199734e391a7789d29da958f43080e77b40df.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:10 +0000
Certificate not after:    Mon 25 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 262154
                          IP: 200.55.248.0/21
                          IP: 2800:c10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14160170 (0xd8112a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:10 2017 GMT
            Not After : Dec 25 05:00:00 2023 GMT
        Subject: CN=e1f199734e391a7789d29da958f43080e77b40df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:8b:7b:0c:8c:5a:bb:11:19:a3:05:e7:5c:
                    85:78:05:d1:06:9f:dc:2c:85:50:6f:92:3a:b8:4a:
                    87:33:d5:a1:75:c7:a8:96:6e:82:d0:6e:f4:5c:5f:
                    c5:fd:19:53:f8:56:f8:81:29:a9:45:e7:0b:3d:6b:
                    08:47:62:6f:09:95:cc:2c:cd:6a:80:32:42:02:df:
                    9a:be:c1:7f:c3:4e:a5:eb:c8:50:73:68:72:3f:9f:
                    0c:15:97:88:25:44:1f:87:07:af:4f:11:16:15:43:
                    56:77:81:ca:58:c1:6b:c5:b6:1b:8b:5e:4a:73:52:
                    6c:0b:23:70:ef:08:0f:92:9f:de:e7:91:ab:49:29:
                    a8:f7:36:69:e5:70:2d:82:ce:6a:0a:ba:70:aa:0a:
                    02:a3:9c:bc:60:6f:ac:f3:ff:a5:30:ae:35:9c:5f:
                    11:79:ed:e2:6e:a2:0d:b2:ab:a7:f1:67:ab:68:86:
                    ca:ff:ca:db:7b:51:dc:90:30:8c:6a:c3:2f:ca:1e:
                    7a:b4:03:de:59:36:0c:9c:a5:75:d3:78:95:03:d6:
                    00:c6:f4:6a:27:b3:c4:ba:9e:9b:fc:8f:99:44:af:
                    0a:e7:e9:e3:77:6d:00:9f:42:5e:95:0e:b3:58:63:
                    d5:e0:04:01:04:e9:1c:65:53:bd:d2:c4:b0:d9:12:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:00:F7:49:F5:49:F5:1D:FE:24:26:4A:80:F3:ED:9E:EC:63:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/e1f199734e391a7789d29da958f43080e77b40df.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.248.0/21
                IPv6:
                  2800:c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262154

    Signature Algorithm: sha256WithRSAEncryption
         00:05:a6:8c:67:34:36:d0:fb:ed:05:7a:af:44:25:c8:3a:8a:
         23:51:20:e1:76:4f:88:2a:63:3c:b6:a7:ad:8c:e1:56:94:59:
         34:e7:1c:b0:3d:8b:d1:86:0a:21:31:14:37:92:16:8a:52:75:
         88:2b:66:f1:75:1e:d6:4d:63:71:ed:59:5d:89:bf:ee:d3:44:
         76:a5:14:3d:c6:e2:f3:fd:c6:fe:29:03:d2:20:14:2b:18:13:
         ee:cb:f2:cb:b3:ea:c8:58:0e:92:3f:5a:94:f9:4a:16:ef:c3:
         a1:5c:1f:c2:dd:de:46:66:c3:4e:f3:32:ca:12:20:6d:f6:06:
         2c:78:4f:5e:85:24:32:46:25:73:6b:5f:c9:5c:5d:c6:4d:31:
         0c:f7:b3:53:18:26:27:89:94:14:da:9d:21:8a:fc:bf:b1:11:
         4d:4f:6e:75:de:28:e0:1d:d5:c4:cb:5d:5b:e7:99:7f:81:bd:
         97:81:f6:12:08:55:91:4d:12:61:61:ff:53:7f:96:13:7f:d4:
         59:ce:2f:b8:dd:a8:44:59:bb:20:f2:66:5e:cc:d1:23:9c:8b:
         c4:47:2a:88:55:ae:25:aa:7b:5d:26:9d:94:08:9f:50:87:54:
         21:d8:39:90:8c:97:36:27:56:b7:77:f9:c5:f6:44:77:92:c9:
         49:8e:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----