Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4c5e1b5e8dc5144cf4449053a9d87fa540ae92c.cer
File:                     e4c5e1b5e8dc5144cf4449053a9d87fa540ae92c.cer (raw, json)
Hash identifier:          /7+iPyejpJwDwX4AwYUIoSENaq7f9s6UutJ5Qw91pPQ=
Subject key identifier:   1D:36:BA:86:88:A5:F3:3F:6C:5F:9A:DF:AC:99:34:09:9C:B6:0B:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6E9BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0586c935-2b3f-4533-be1f-f23c17df4343/e4c5e1b5e8dc5144cf4449053a9d87fa540ae92c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0586c935-2b3f-4533-be1f-f23c17df4343/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:07 +0000
Certificate not after:    Sat 28 Sep 2024 16:36:09 +0000
Subordinate resources:    AS: 264817
                          IP: 170.81.8.0/22
                          IP: 2801:184::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16181691 (0xf6e9bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:07 2017 GMT
            Not After : Sep 28 16:36:09 2024 GMT
        Subject: CN=e4c5e1b5e8dc5144cf4449053a9d87fa540ae92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:8d:1f:8f:c8:af:7c:1d:b6:04:7f:54:b3:
                    9f:41:44:34:68:66:d7:98:6e:76:0c:ca:b6:d4:69:
                    bc:ee:63:a6:54:46:5c:ed:cb:85:cf:26:b6:5d:b7:
                    b6:33:b5:92:a5:f9:99:50:ef:18:02:31:58:08:5d:
                    01:bf:72:74:2b:fe:4d:27:df:b1:f9:e4:d4:d9:7f:
                    8b:68:40:e0:1b:1e:ed:8f:21:67:b6:4d:93:ee:d0:
                    fc:d7:d6:b2:2d:d4:23:80:c6:6c:7e:a7:50:ba:47:
                    6f:f8:31:95:a0:bb:35:3b:dd:80:0a:42:f1:12:7e:
                    14:8b:34:a2:ff:9b:db:96:ad:7e:35:06:7a:c4:15:
                    93:9c:30:71:ad:72:de:bb:df:f7:37:26:45:4f:9e:
                    13:f0:c9:6a:8e:02:20:65:04:52:5b:ec:84:54:a8:
                    3a:a9:7c:ac:de:6c:f7:15:fa:29:8b:29:60:52:b9:
                    da:53:91:e6:00:94:54:0c:5d:d8:19:05:01:96:75:
                    3e:14:9e:a0:00:ce:bd:34:a9:84:93:20:35:82:85:
                    5c:cd:1d:cb:ec:71:5c:9e:4d:43:51:5e:8e:99:50:
                    77:26:a4:9b:41:3c:69:6d:79:73:a4:65:6a:5e:b2:
                    d5:e0:39:81:d0:6d:ac:72:a8:6a:de:c1:e4:0d:a0:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:BA:86:88:A5:F3:3F:6C:5F:9A:DF:AC:99:34:09:9C:B6:0B:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0586c935-2b3f-4533-be1f-f23c17df4343/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0586c935-2b3f-4533-be1f-f23c17df4343/e4c5e1b5e8dc5144cf4449053a9d87fa540ae92c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.8.0/22
                IPv6:
                  2801:184::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264817

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:ab:67:67:40:88:43:d4:0b:4d:ae:c9:dd:74:30:1f:97:
         5d:2d:5d:48:81:23:d4:67:7f:fe:3e:14:07:88:15:88:ca:69:
         e0:c5:8c:8b:c1:8f:b9:d2:c3:c2:94:6e:0f:ed:20:04:65:70:
         bf:6b:ee:93:48:45:a9:f1:33:38:73:a0:b9:2d:73:15:29:06:
         93:b5:85:c3:8f:e6:1d:d8:d7:c2:7f:fc:e4:9b:ea:8e:67:94:
         02:da:eb:06:08:b5:bf:02:08:05:25:0a:cb:b4:4a:33:c2:dc:
         d7:ac:79:b5:4d:ac:2c:a4:19:28:3c:02:b0:3d:71:4f:58:3a:
         80:32:36:1a:97:70:eb:cc:63:40:c0:ec:7b:10:c3:e0:cd:9f:
         5f:2f:f2:03:34:fb:0d:3a:78:ba:dd:06:34:3c:58:6c:4d:24:
         48:3c:c5:44:b5:4e:98:63:a2:03:50:99:44:60:42:d4:fc:ca:
         66:06:fd:71:af:75:6a:6f:15:6b:d3:f8:3e:a8:6f:ec:91:fb:
         98:7f:0a:51:49:63:24:12:b6:85:fb:5d:7f:a7:73:48:f1:84:
         8f:b9:a3:d5:d1:3e:19:86:c1:e3:d8:01:f5:5e:3a:c5:ce:9c:
         7d:5c:7a:2d:b3:71:99:e4:f8:fe:91:82:17:73:6a:44:1d:27:
         7b:e7:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----