Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
File:                     ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer (raw, json)
Hash identifier:          skUP660orjshyiTY7VhyCIOhuWR9ISzgqdcymu2JPMg=
Subject key identifier:   3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0E1A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:36 +0000
Certificate not after:    Mon 08 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 28089
                          IP: 200.35.128.0/20
                          IP: 2801:13::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14737827 (0xe0e1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:36 2017 GMT
            Not After : Apr  8 06:00:00 2024 GMT
        Subject: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:e4:4e:52:f5:61:26:11:f1:35:47:29:ac:
                    8e:aa:bf:3c:31:ed:93:36:9e:99:3e:1b:d4:18:55:
                    39:f9:63:be:16:9e:0b:61:98:a7:b0:9c:63:af:86:
                    48:2d:db:20:fd:10:06:c8:2e:65:31:ec:fa:f6:9c:
                    1d:91:2e:48:8f:c4:de:0a:55:97:20:41:5c:66:af:
                    9e:b6:c8:89:cf:b2:a1:f0:5e:35:a1:15:dd:ce:2c:
                    13:2c:c1:5a:11:c4:dc:8b:ca:d1:30:e2:95:d3:c4:
                    d7:ac:ee:0d:e9:9f:d9:26:5a:c3:1b:ff:92:d9:ef:
                    1e:da:c7:55:23:29:c5:ed:b3:b3:bb:2b:6d:8d:27:
                    a9:e7:19:ff:c1:fa:f0:2d:ae:e4:6b:22:f8:fb:68:
                    1d:f4:ca:f5:f3:10:b7:30:3f:65:6e:dd:94:35:bf:
                    39:8f:f7:64:94:1c:98:43:60:6f:4f:bb:7f:5c:b6:
                    6b:9a:21:8b:d8:03:f1:32:26:00:55:73:2a:3f:d6:
                    f4:7c:19:01:04:84:5f:f1:9b:25:44:51:d2:26:f3:
                    03:fc:57:fa:de:8f:e1:aa:a3:1f:97:6b:91:2c:95:
                    5e:22:08:fe:b6:0e:6b:c5:a7:16:ad:28:6d:3a:a0:
                    cc:54:04:b0:fd:01:36:81:4b:5b:22:0d:7a:dc:32:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.128.0/20
                IPv6:
                  2801:13::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28089

    Signature Algorithm: sha256WithRSAEncryption
         91:95:29:a6:12:18:c3:0b:a9:a0:78:5e:8b:61:29:57:3e:0d:
         bf:24:31:6c:9b:d3:ea:fb:0f:4f:e4:5e:44:29:98:90:74:e8:
         f5:53:ff:f0:37:a0:75:dc:03:d3:3f:85:3c:b9:3d:b4:ca:2e:
         7f:f9:66:e6:8d:86:4a:c6:70:1d:b4:eb:79:aa:1b:8f:d1:6c:
         de:77:e0:45:00:10:ec:15:3c:e3:dd:ab:fe:9f:f7:4f:30:98:
         e0:7e:63:6f:72:e3:56:f0:a6:15:ec:70:fa:22:17:10:ee:13:
         57:61:ef:72:28:24:7b:89:48:a3:93:d0:21:f1:f0:f1:a3:53:
         fb:41:87:8a:46:20:ae:64:35:ad:36:e1:3e:ce:97:d6:19:61:
         84:a4:da:58:d7:3a:e9:3d:fb:09:15:41:f6:f3:9b:f1:49:50:
         aa:bb:30:fa:a5:1f:40:09:98:12:fa:84:09:a9:a5:1b:93:31:
         a1:dd:51:49:f4:cb:08:b6:29:2c:47:da:3d:19:49:37:c9:47:
         52:7d:dd:1e:49:bc:2d:28:e1:97:88:87:b9:ca:88:67:12:81:
         88:b7:10:cb:b5:41:ea:6e:7a:74:5e:13:eb:85:02:c9:a6:8e:
         f0:b4:af:44:af:af:a6:5d:2a:c6:30:88:0e:49:f2:b7:de:29:
         f8:fc:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----