Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5cb1422732fb0905512803e74a682044f078d09.cer
File:                     e5cb1422732fb0905512803e74a682044f078d09.cer (raw, json)
Hash identifier:          IGmwyMBQrA6UWLm/uTgxIfpuGkiodCM33wZ4nRiWAaY=
Subject key identifier:   61:FA:18:74:EE:CB:71:5F:EB:02:B0:75:55:91:45:CE:2E:17:83:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD5D4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/e5cb1422732fb0905512803e74a682044f078d09.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:58 +0000
Certificate not after:    Tue 19 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 263710
                          IP: 200.10.154.0/24
                          IP: 2801:0:210::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16604490 (0xfd5d4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:58 2017 GMT
            Not After : Nov 19 04:00:00 2024 GMT
        Subject: CN=e5cb1422732fb0905512803e74a682044f078d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:8d:d9:c9:40:f2:73:1e:20:52:bf:8a:15:
                    f5:0b:fe:5c:ba:fd:33:e2:a9:3e:c4:df:d1:2c:e9:
                    55:a5:ed:77:73:4a:ac:47:13:c7:1c:5b:fc:af:38:
                    c5:96:3b:e6:7d:60:b5:7a:33:aa:d0:cf:e8:99:66:
                    43:90:c7:8e:88:03:35:c3:ce:1e:af:f6:fb:09:13:
                    5e:43:7b:0e:1c:97:ed:06:74:1f:25:eb:53:00:27:
                    8c:83:1e:e1:94:ef:14:02:66:59:1a:3e:81:8f:18:
                    28:c2:43:db:14:6b:6c:6d:cb:d4:2a:af:62:70:b0:
                    99:c2:d4:ae:74:1b:b4:95:7e:07:9e:12:7d:2d:ec:
                    2d:db:f5:00:96:72:89:ab:cc:66:b2:ee:12:90:2d:
                    80:ef:5e:ef:2d:29:e1:37:a8:b0:7c:41:55:15:54:
                    b0:61:02:7a:dc:45:60:ec:9d:19:60:3b:b4:56:69:
                    3f:4b:2e:de:bf:12:20:53:c3:d0:ed:d3:a8:07:94:
                    40:7c:96:a0:53:9f:c2:02:38:13:85:84:eb:a9:e9:
                    fa:a8:4d:3f:90:bb:b7:58:95:c1:0e:85:3c:8f:d8:
                    d8:69:dd:83:ea:db:80:0d:0d:6f:2c:34:6f:ec:9d:
                    89:cd:cc:67:ec:ce:40:a2:d2:0f:86:24:b6:cb:e5:
                    d5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FA:18:74:EE:CB:71:5F:EB:02:B0:75:55:91:45:CE:2E:17:83:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/e5cb1422732fb0905512803e74a682044f078d09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.154.0/24
                IPv6:
                  2801:0:210::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263710

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:91:35:8e:10:17:e0:3e:eb:36:d2:f2:3a:af:26:c7:81:
         41:0d:83:ca:d4:46:d6:21:55:83:fd:90:78:22:f5:df:af:49:
         df:97:23:0d:c6:f9:6b:47:ac:69:06:a9:96:97:c6:2b:0f:c3:
         16:84:e1:f4:d2:ef:97:4d:b0:05:7d:64:86:b7:1e:b7:bc:c0:
         7e:55:1f:4f:d0:f7:8b:8e:b9:89:6a:51:69:2d:55:07:2b:63:
         80:4f:70:62:22:05:dc:bb:02:66:70:3d:55:e9:e2:89:71:f7:
         7d:01:ab:71:19:54:78:7c:13:8f:9f:47:43:69:9d:25:c6:34:
         8c:a6:ca:1a:9e:59:f2:a1:23:64:58:f9:a1:63:e9:ae:b4:29:
         d8:ed:af:69:39:de:d8:72:4d:bf:2e:85:bf:29:82:df:6d:ba:
         2e:2e:3c:62:c6:f9:05:a6:75:b9:eb:eb:e4:db:e0:08:3f:05:
         7f:10:ea:7c:30:23:37:45:1b:c5:8e:38:96:74:99:7f:b1:7a:
         c4:ff:33:4f:4b:02:7d:a3:59:a7:41:1b:32:2c:8d:c6:dd:a8:
         a3:1e:3e:e1:52:80:b0:40:d7:5c:49:f2:4f:1c:c2:98:d4:c7:
         a5:23:5f:4d:2e:5d:93:28:c9:6e:d8:71:96:89:62:bf:53:67:
         b1:d0:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----