Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb68f6320e26be559e91eff6ec319fec41f44266.cer
File:                     eb68f6320e26be559e91eff6ec319fec41f44266.cer (raw, json)
Hash identifier:          Pqej/uufjTU557YQigIFOiu4R4XmWTGEoSd/3ELf4H0=
Subject key identifier:   B0:1F:0B:20:65:0C:4C:88:DE:3E:01:7E:7F:16:82:46:F4:72:2B:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD4665
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/eb68f6320e26be559e91eff6ec319fec41f44266.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:14 +0000
Certificate not after:    Wed 28 Feb 2024 15:09:17 +0000
Subordinate resources:    AS: 265711
                          IP: 192.140.92.0/22
                          IP: 2803:c5c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14501477 (0xdd4665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:14 2017 GMT
            Not After : Feb 28 15:09:17 2024 GMT
        Subject: CN=eb68f6320e26be559e91eff6ec319fec41f44266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:df:d2:d0:5e:e3:1a:b7:10:79:15:06:f4:
                    0f:70:bf:28:0c:ae:97:5d:72:d4:3e:14:7e:a6:2f:
                    82:75:89:f5:ae:c6:f5:9c:f6:b7:dc:41:ca:7a:53:
                    fd:24:42:01:0e:8e:5b:2b:2a:fc:03:d7:a0:66:ac:
                    cd:20:83:a4:5d:31:cf:c9:75:34:8b:f0:80:fa:9b:
                    67:66:b0:83:eb:e0:61:cd:14:74:8c:7b:95:21:d9:
                    95:e9:de:5b:ee:89:1e:bf:e9:5b:6e:97:c9:60:74:
                    c5:b2:5e:8b:75:91:6e:e0:ac:6a:a5:7a:63:c1:b5:
                    38:25:c8:59:8e:49:ea:c5:f1:f6:08:3b:8b:c8:fe:
                    09:8f:79:73:c1:3a:9e:34:05:c8:b5:8f:4a:b1:5a:
                    56:d5:88:2b:b1:89:ce:68:e1:23:5f:e0:1b:77:fd:
                    01:6a:8d:5c:44:40:9f:f2:65:16:d9:9d:1a:81:a6:
                    54:bc:e5:df:5b:ea:18:7a:e9:38:f1:7d:f0:02:5a:
                    ae:7e:b4:fe:81:de:c2:c7:de:cd:dc:0f:89:7c:43:
                    73:91:60:29:c3:4f:d6:67:bb:02:f3:cb:2a:b1:59:
                    11:9a:56:46:d7:41:9a:62:99:d9:f2:5e:75:5d:4e:
                    e4:e0:ec:21:7c:2e:29:98:eb:5c:8a:8b:ed:ca:52:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1F:0B:20:65:0C:4C:88:DE:3E:01:7E:7F:16:82:46:F4:72:2B:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/eb68f6320e26be559e91eff6ec319fec41f44266.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.92.0/22
                IPv6:
                  2803:c5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265711

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:35:38:4c:e0:66:5b:89:68:8e:94:f8:ac:cb:e3:15:3d:
         05:ef:1d:cd:5a:66:9e:3c:2d:bd:47:f7:f4:8a:0b:53:2d:a2:
         73:84:c9:84:d8:8b:e6:da:43:7e:ac:26:9b:27:47:e8:0a:18:
         34:8d:7e:6d:d0:05:41:3d:86:d5:37:38:5d:18:25:52:a1:a9:
         0b:50:e3:71:71:78:96:fc:cf:a7:58:e7:b5:e3:5e:0c:59:b6:
         63:4e:77:2d:66:55:b1:bc:0c:d3:a4:5a:45:97:15:d9:ca:47:
         21:74:bb:13:9e:73:56:6b:0b:15:8c:7a:f1:94:57:66:d9:96:
         da:39:be:1f:61:cf:40:b0:a8:24:aa:a1:9d:e7:a8:bb:4d:96:
         b7:8c:24:0e:60:c9:2d:3f:0b:e1:6f:82:9d:a4:23:15:90:b9:
         37:a1:10:b6:13:6a:de:6c:ef:3e:28:ee:d9:9e:f1:cc:d4:e9:
         f6:04:3f:3a:00:a3:9a:16:46:39:6f:e7:f1:73:a2:fa:34:12:
         3c:4d:73:56:23:ff:18:e2:58:85:26:cf:70:2b:9c:d3:e7:bb:
         e0:98:5d:db:85:3b:c5:0c:4d:ce:52:25:97:44:6b:8f:df:ca:
         09:42:1b:28:00:b4:eb:fc:5a:89:2a:ed:63:45:95:5f:17:52:
         bd:89:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----