Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45.cer
File:                     e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45.cer (raw, json)
Hash identifier:          wHl5DzHufPHUs0nAafhUN9SY/+iZNEHGopJVPtTZtMs=
Subject key identifier:   8F:F3:6E:CD:0E:EB:38:0B:3F:D7:11:4A:2D:32:F0:28:61:ED:6C:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E23FD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:22 +0000
Certificate not after:    Mon 22 Apr 2024 22:06:33 +0000
Subordinate resources:    AS: 263786
                          IP: 138.122.156.0/22
                          IP: 170.78.88.0/22
                          IP: 2803:7440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14827473 (0xe23fd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:22 2017 GMT
            Not After : Apr 22 22:06:33 2024 GMT
        Subject: CN=e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:a1:bf:34:ab:2e:14:d4:b9:45:7c:d6:72:
                    6d:69:bd:f8:02:08:93:e8:b9:2b:be:77:00:f5:0b:
                    eb:e2:e6:c1:bf:35:44:52:36:ef:1b:7b:3c:5f:a6:
                    82:f0:77:71:21:43:f7:fd:c5:1a:d3:db:69:b2:7d:
                    f7:d4:36:8d:71:a2:3b:0b:18:24:ab:ee:16:08:61:
                    a3:de:86:c5:15:c6:67:06:80:a1:6c:9d:04:e6:58:
                    ed:1f:53:8d:5b:f6:d6:dc:fb:f6:45:66:bd:8e:e1:
                    ae:a6:99:cb:96:f9:90:b8:0d:4a:7d:2a:b1:77:ce:
                    56:62:fd:ba:ec:42:ad:91:6d:ee:4b:24:b8:04:8c:
                    4e:76:23:0d:76:b1:7b:d2:06:17:a2:7f:83:0d:a7:
                    70:14:53:af:15:3a:dd:24:1d:e0:0e:e4:97:8d:99:
                    f7:22:24:ba:95:f3:fb:22:c7:55:2c:56:0e:ce:d9:
                    75:e0:96:bb:7d:87:bc:e7:e1:d9:ad:c9:36:0c:0f:
                    7c:17:f4:f4:9f:d0:d5:64:a3:9e:92:b7:fe:f1:30:
                    ef:b4:27:67:20:54:8e:87:31:7c:b5:f9:f8:14:c1:
                    48:d6:2d:5c:50:5e:d1:a9:d1:06:8e:04:35:f7:e2:
                    67:73:95:7b:36:6f:6c:3c:0b:42:6f:35:a6:cc:0c:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F3:6E:CD:0E:EB:38:0B:3F:D7:11:4A:2D:32:F0:28:61:ED:6C:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.156.0/22
                  170.78.88.0/22
                IPv6:
                  2803:7440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263786

    Signature Algorithm: sha256WithRSAEncryption
         03:7e:ef:5d:5b:8b:c3:0c:1a:6d:ec:09:df:fe:6f:f6:85:0b:
         bf:f0:e9:db:48:24:e6:e5:e4:dc:3f:82:10:e5:8b:5e:ec:38:
         f1:58:d5:f6:f5:34:02:a0:80:a2:a1:c9:ce:da:b1:c2:ed:f1:
         89:4b:5e:96:1d:65:8f:ed:23:fa:7b:94:80:81:9b:6a:0d:32:
         de:35:ce:a6:83:0a:b9:26:f9:47:a6:5b:cc:1c:fd:6e:0c:c9:
         9d:ad:93:82:49:bf:ca:b7:27:89:61:1b:58:8b:88:b2:d6:b3:
         46:66:41:a2:b8:65:14:a2:6c:e8:43:73:09:f3:53:26:73:b1:
         14:ff:4d:e9:8b:38:72:0f:6b:02:65:4a:5d:ac:d7:ef:99:a4:
         f0:dc:9b:d4:f8:a1:0a:ab:20:74:62:8e:56:4b:1c:f1:83:8a:
         3f:2c:d8:d4:1a:ff:97:30:f3:2a:da:f8:38:e4:7e:42:d5:b5:
         33:64:9c:5b:ca:2a:13:e0:04:7f:c6:61:7d:f9:42:7d:a4:6f:
         92:7d:83:da:34:93:c0:3c:17:19:72:fa:b3:1d:58:dd:7d:ea:
         cf:74:17:4f:e0:68:cf:52:23:c3:42:d0:a8:94:ce:4b:c2:43:
         0d:a9:fe:a5:d5:23:d1:52:90:b2:ec:a8:b0:bc:aa:d0:d8:9e:
         bd:1f:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----