Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2de91b5651f4908af6452787ddc97487d7d7981.cer
File:                     e2de91b5651f4908af6452787ddc97487d7d7981.cer (raw, json)
Hash identifier:          SR4lnzCs9zG8vILrz93zRKlb0Qb5cQWywn36QSOlaEQ=
Subject key identifier:   E1:23:78:FF:43:A3:58:A8:7E:5A:CF:0B:CB:34:05:91:32:37:EE:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E83FBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c93bc3b9-0d0f-46a4-adea-16354a666243/e2de91b5651f4908af6452787ddc97487d7d7981.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c93bc3b9-0d0f-46a4-adea-16354a666243/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:41 +0000
Certificate not after:    Mon 03 Jun 2024 20:28:02 +0000
Subordinate resources:    AS: 263810
                          IP: 201.131.118.0/24
                          IP: 2801:17:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15220669 (0xe83fbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:41 2017 GMT
            Not After : Jun  3 20:28:02 2024 GMT
        Subject: CN=e2de91b5651f4908af6452787ddc97487d7d7981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:59:1e:e2:6e:c6:17:64:cd:04:f5:39:b0:
                    f7:bd:0c:8b:53:73:63:dc:be:a5:16:47:64:28:a2:
                    7e:3a:ea:15:2b:cc:31:e6:b5:21:ce:d0:81:ed:ae:
                    56:b3:59:5f:51:8e:15:6d:2c:80:b6:ee:c6:07:8f:
                    f6:29:7f:a3:4b:ea:7d:c3:d5:b1:77:b4:28:45:08:
                    ef:9d:6a:1e:9a:44:68:d4:f3:d3:38:3b:c8:31:e4:
                    65:ab:4b:87:92:01:e8:7b:b1:62:f4:e6:b8:b7:2f:
                    7c:08:19:f3:45:77:1f:4b:80:dc:42:b3:e0:dd:dc:
                    43:68:cb:d4:62:d6:1c:69:21:25:a6:ca:05:82:59:
                    76:d8:bc:00:c8:b2:72:bd:33:b2:26:0c:80:8c:ae:
                    17:79:1d:7e:42:f3:5c:f5:9a:8f:d7:d1:7e:46:2c:
                    65:f6:47:f6:fd:c3:62:99:a8:ea:72:56:4b:37:1a:
                    40:96:b3:63:5c:e1:c1:19:00:4f:69:e1:cd:9e:ca:
                    d6:b8:f8:18:ef:b9:b6:6d:fd:7a:2e:d7:40:51:e1:
                    e1:5d:3e:80:7b:d7:97:9c:d6:9b:32:f1:a9:7a:3b:
                    f2:2f:42:2e:47:54:f2:27:7d:d4:8b:5c:86:d5:eb:
                    64:fe:b3:96:32:6a:53:12:8f:98:7d:4a:ef:8a:0c:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:23:78:FF:43:A3:58:A8:7E:5A:CF:0B:CB:34:05:91:32:37:EE:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c93bc3b9-0d0f-46a4-adea-16354a666243/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c93bc3b9-0d0f-46a4-adea-16354a666243/e2de91b5651f4908af6452787ddc97487d7d7981.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.118.0/24
                IPv6:
                  2801:17:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263810

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:55:70:dc:f2:cb:90:ff:f3:a6:69:a9:15:a4:5d:8c:78:
         d2:08:95:a3:44:6b:74:cb:45:a0:ae:95:4c:03:07:7e:d9:98:
         37:19:2c:32:81:3d:97:4f:53:27:39:08:e9:11:63:a0:7d:f4:
         e6:03:e3:27:bf:fa:40:0f:2b:0e:75:0e:12:ff:28:ee:94:58:
         90:e0:f6:8a:ba:7b:46:e2:e6:60:8c:c2:0c:74:e9:2b:8c:b1:
         46:46:0e:f5:38:88:a9:1e:44:4c:33:dc:e1:1f:c4:65:ae:a9:
         b0:02:9e:0d:05:b5:a9:2b:89:6a:c9:c9:83:da:56:77:e9:8a:
         ba:e7:bf:e6:09:5f:4f:f5:21:54:0f:c1:fc:8d:77:bc:60:88:
         01:a8:01:4c:7a:2d:8c:f4:d3:55:d0:dc:2d:ac:1d:95:3a:dc:
         98:17:53:c0:bc:e0:8c:3e:14:3d:2a:c9:24:c2:77:ba:07:ee:
         40:6a:0e:fb:32:05:17:62:fd:9c:ea:66:24:4f:1e:57:a0:59:
         0e:5c:b0:0c:96:58:af:66:68:41:5a:20:4f:a0:2c:f6:05:09:
         6f:b3:01:f5:c0:79:4f:50:74:ad:1b:fd:95:3b:de:fd:1b:f4:
         f8:05:9a:9c:45:94:b4:bb:71:fe:02:e2:b0:d3:4f:34:9e:72:
         3d:07:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----