Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer
File:                     eaec8ce2b33df137eb80bce3bc979b817d27173e.cer (raw, json)
Hash identifier:          XEhUZZIJ7qaJOQaJXHnm6jWsDsmjQz+NuzQW3kwPRro=
Subject key identifier:   84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7DF68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/eaec8ce2b33df137eb80bce3bc979b817d27173e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Sat 23 Dec 2023 16:40:13 +0000
Subordinate resources:    AS: 263732
                          IP: 138.59.164.0/22
                          IP: 2803:af80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14147432 (0xd7df68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Dec 23 16:40:13 2023 GMT
        Subject: CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:2d:35:d3:9a:1b:6a:e7:83:20:ff:f6:af:
                    5a:17:5c:d7:d9:cd:e4:64:e0:b9:5f:d2:1e:b0:80:
                    06:d0:f2:d8:52:56:ef:44:64:46:99:91:bc:59:c8:
                    a2:3e:4f:28:c0:a7:aa:a1:9e:34:de:11:bc:9c:2b:
                    19:16:16:26:58:cc:ee:28:4f:cf:35:30:35:16:e3:
                    72:3f:32:bd:f3:06:63:80:dd:66:bd:2a:f5:a4:3d:
                    36:bb:ef:c9:31:51:6d:4c:76:8b:aa:85:df:dd:f9:
                    f6:85:db:9c:47:24:65:98:ba:48:1c:0a:a0:3d:22:
                    cf:95:af:08:ed:72:f1:92:db:fb:a9:26:e4:5d:d9:
                    6b:76:76:2e:90:be:f4:ca:82:cc:c7:87:16:25:10:
                    ab:28:25:4a:27:67:ba:28:51:59:c4:e5:9d:9f:8d:
                    62:a0:07:25:86:18:4d:6b:d0:87:77:76:91:ee:1b:
                    ef:e5:32:47:fb:dd:c7:04:dd:08:8b:ea:8c:78:99:
                    f8:60:ec:b3:2e:56:8b:8c:7d:3a:50:bf:b0:a9:6e:
                    32:f9:bb:15:f8:1f:11:74:47:28:d8:ff:be:ad:f5:
                    6a:60:96:62:5b:fd:eb:9e:a2:7c:10:92:51:08:eb:
                    1c:ce:d9:89:08:1b:61:b3:e2:f0:46:41:6f:b6:01:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/eaec8ce2b33df137eb80bce3bc979b817d27173e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.164.0/22
                IPv6:
                  2803:af80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263732

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:e4:6a:04:20:1b:56:01:01:f4:f1:28:f5:8f:57:8a:b5:
         8b:b6:eb:a7:9c:e7:ab:a4:e0:23:83:dd:22:ef:7a:6f:0a:26:
         47:ad:7f:dc:0c:2d:83:d6:22:12:b1:b2:c8:63:4f:20:5d:67:
         4a:a0:fe:d7:be:97:db:95:ff:09:16:92:62:6d:fb:12:e1:11:
         35:44:e4:f2:ae:78:98:c3:22:bf:97:c2:03:18:17:bb:2c:e9:
         83:8a:8b:e9:d0:52:85:5f:be:a3:d3:41:ad:51:75:3b:f4:6c:
         8c:6c:f0:43:4a:3f:3e:7b:16:67:ad:61:6d:39:be:25:d1:9f:
         f0:ab:f1:48:d8:85:2a:9d:b0:1b:1d:34:72:9e:5d:0c:0a:a8:
         a9:4e:e1:36:90:36:ff:39:f4:e8:8f:60:71:e7:36:cf:0f:74:
         60:b8:99:5b:25:30:29:4b:50:56:51:d7:b6:06:35:79:a8:d9:
         d5:9b:78:68:6d:bb:aa:17:02:ed:1a:f1:18:54:dc:fa:22:7d:
         51:16:29:b4:28:ff:eb:0d:ae:69:90:78:17:12:05:0d:7e:4a:
         a1:66:d3:e6:37:e5:14:27:8b:39:35:20:ae:4e:24:c5:e5:2b:
         63:51:fe:a0:4f:8f:84:87:cc:f8:bc:e7:be:42:05:5e:db:15:
         b1:51:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----