Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef640f7ea7a6b188596318dadeffcac5ca26a907.cer
File:                     ef640f7ea7a6b188596318dadeffcac5ca26a907.cer (raw, json)
Hash identifier:          I7WE6ggG8WLp5UlYBml4k2+R6+StlRB9dhxehtWK3Mc=
Subject key identifier:   38:2B:1B:14:3C:85:03:51:C2:70:92:9B:A3:6D:48:65:F0:31:01:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB50BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/ef640f7ea7a6b188596318dadeffcac5ca26a907.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Mon 05 Feb 2024 18:28:42 +0000
Subordinate resources:    AS: 264689
                          IP: 168.228.140.0/22
                          IP: 2803:2340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14373051 (0xdb50bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Feb  5 18:28:42 2024 GMT
        Subject: CN=ef640f7ea7a6b188596318dadeffcac5ca26a907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0b:ec:7b:5e:a0:00:4a:7c:3a:82:37:29:f8:
                    46:70:ca:fc:5e:10:45:7a:95:69:4d:65:e0:25:ff:
                    c8:65:06:4f:7a:79:fd:49:fe:2b:b0:b9:82:e3:32:
                    41:4b:66:4f:35:70:c5:4b:ba:2c:2d:80:4e:17:92:
                    e4:f3:80:43:de:38:12:95:7d:96:bc:a1:17:ea:ef:
                    fa:fb:ed:89:cc:68:40:01:35:0c:20:e0:e1:72:8f:
                    49:44:20:32:cb:d5:ef:62:49:bd:af:ad:c7:34:27:
                    fa:3a:8d:bb:73:fd:24:3f:df:7c:68:8f:08:a4:61:
                    09:4a:02:7a:46:c3:d4:d7:dc:96:e3:9d:1b:af:87:
                    5a:63:43:08:e4:cf:37:db:5c:50:b0:fc:ff:07:bc:
                    ef:b0:fb:0f:da:26:f6:1f:e0:8e:f5:1e:11:4f:21:
                    76:bc:2a:af:20:a5:46:ef:33:e0:dd:37:c4:b1:aa:
                    d8:d5:2f:ac:ce:c6:e5:c8:8f:4c:22:bf:57:f5:5d:
                    f8:03:ba:06:33:9f:0e:7c:75:48:72:b2:ca:b0:93:
                    02:db:77:f8:69:6d:1d:cb:38:7e:2c:28:c6:88:73:
                    55:49:c4:e3:ee:8b:fc:80:e5:6b:68:ed:6b:62:c2:
                    e6:2c:a4:dd:b4:37:e4:3d:ec:5e:0e:9b:47:79:af:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2B:1B:14:3C:85:03:51:C2:70:92:9B:A3:6D:48:65:F0:31:01:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/ef640f7ea7a6b188596318dadeffcac5ca26a907.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.140.0/22
                IPv6:
                  2803:2340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264689

    Signature Algorithm: sha256WithRSAEncryption
         bf:d4:ab:5f:bb:bd:54:2d:99:06:94:51:38:da:41:ce:74:54:
         54:fc:a3:94:31:77:fb:48:59:f6:81:e9:ac:fe:5e:1a:96:c2:
         7b:38:e4:9a:af:ae:44:42:6f:9d:41:3b:8a:a2:ff:cf:4d:97:
         05:55:ef:aa:3b:97:54:e0:53:95:d5:c9:b7:41:15:8c:33:7a:
         07:02:3e:e4:99:fe:cb:8f:43:9f:16:09:1d:1b:13:17:76:c1:
         44:f1:03:6c:c3:2c:15:94:bc:42:da:23:b8:9b:1b:1a:7c:c9:
         d1:c7:48:fe:a4:cf:93:33:19:e5:3d:e4:ee:04:22:6b:80:47:
         83:0f:a3:c6:82:d2:cb:91:26:09:10:24:c0:99:22:4a:76:45:
         88:c1:40:f5:64:4e:63:a7:a6:39:9d:0e:8c:f4:77:30:9a:50:
         74:47:b0:d8:e2:ac:9d:11:47:24:a8:49:d6:1e:b4:2f:27:1a:
         c2:94:0c:27:d3:da:0f:12:28:c7:5c:54:d5:50:0c:98:43:7b:
         14:2f:3e:94:ae:f1:ce:8d:78:d3:db:de:54:28:e8:39:ec:a4:
         e2:c0:fd:2d:69:8d:11:f6:37:47:76:32:f7:21:d6:a7:7e:39:
         5a:ee:60:22:06:45:a1:71:28:fb:09:1e:e3:4c:d5:6b:93:29:
         08:00:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----