Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef788f83ad12f7488de1d2fc19482e9274b780f6.cer
File:                     ef788f83ad12f7488de1d2fc19482e9274b780f6.cer (raw, json)
Hash identifier:          58WOyrL2WLt0t3EaNkhO1oI7UPEcYqX3pFHFcAzXLGQ=
Subject key identifier:   8B:E8:87:5F:E4:12:90:64:23:50:28:2A:14:DB:8C:0A:9F:3A:20:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE00D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/ef788f83ad12f7488de1d2fc19482e9274b780f6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:07 +0000
Certificate not after:    Thu 18 Jul 2024 17:55:16 +0000
Subordinate resources:    AS: 264750
                          IP: 143.137.80.0/22
                          IP: 168.232.108.0/22
                          IP: 170.82.24.0/22
                          IP: 170.239.164.0/22
                          IP: 170.244.80.0/22
                          IP: 2803:3640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15597782 (0xee00d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:07 2017 GMT
            Not After : Jul 18 17:55:16 2024 GMT
        Subject: CN=ef788f83ad12f7488de1d2fc19482e9274b780f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0d:d4:78:14:ba:76:57:73:9e:80:a0:e4:c8:
                    c9:e0:95:1d:47:c9:e1:ce:9d:a9:d5:57:79:3b:32:
                    83:ca:a3:f0:49:57:50:91:c4:ae:c1:3f:a7:30:68:
                    8e:40:bc:e5:18:fc:2b:78:39:6b:08:64:91:3f:4b:
                    b5:88:55:19:c1:05:de:c3:7e:11:5d:1e:df:fa:b1:
                    4e:7f:7c:17:b8:3d:4b:f9:88:36:ca:3d:e5:d2:aa:
                    fb:49:22:c4:b1:22:6b:dc:7d:82:06:7e:3a:c1:b5:
                    ba:26:5f:0f:c5:c5:ce:87:85:96:9f:ff:01:73:0d:
                    1e:bb:f7:54:fa:0c:7c:c1:3b:2f:d3:27:3b:40:fc:
                    14:39:41:b8:07:e4:be:10:e1:5c:98:b2:fa:b8:00:
                    06:c7:e2:bd:f5:db:63:60:95:0b:1c:ab:f0:3a:ae:
                    fe:3b:da:37:dc:25:67:90:cf:c0:3a:1e:b5:71:bf:
                    27:4e:ca:7d:05:e8:8b:15:eb:4a:d6:f1:f5:63:cd:
                    e0:93:25:36:72:90:8c:7a:0e:09:7c:e8:12:d9:48:
                    9f:25:94:0a:09:db:a5:cc:35:49:30:73:e2:b7:f8:
                    c8:1c:fe:b2:e6:80:f8:d2:a7:37:28:23:22:6c:05:
                    c9:d8:63:b5:79:5d:49:01:e3:11:5d:40:06:b6:67:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:87:5F:E4:12:90:64:23:50:28:2A:14:DB:8C:0A:9F:3A:20:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/ef788f83ad12f7488de1d2fc19482e9274b780f6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.80.0/22
                  168.232.108.0/22
                  170.82.24.0/22
                  170.239.164.0/22
                  170.244.80.0/22
                IPv6:
                  2803:3640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264750

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:aa:6f:34:ed:7a:82:2a:99:0b:7f:84:81:7b:a5:75:3d:
         71:3c:5b:e9:c1:37:49:eb:d8:f6:87:d1:5a:64:12:05:48:50:
         c8:44:1a:29:0e:cf:3a:3c:93:c3:98:3f:2e:a4:fc:09:ee:4c:
         0a:e9:58:69:eb:a3:e6:60:46:1f:10:d6:94:9c:ea:e0:6e:f9:
         0e:da:bb:4f:6c:15:57:fc:df:29:ac:d8:89:ea:72:73:b1:0b:
         fa:2c:c8:e8:8a:2e:49:5b:5e:3b:2b:84:40:cb:33:63:3b:72:
         bc:41:2c:20:af:0c:5f:65:83:ac:fa:cb:ad:69:66:f1:c8:43:
         73:bd:1c:2d:8d:51:84:14:6f:67:16:55:37:1d:51:42:04:6c:
         c2:be:31:85:c3:cb:b2:e9:76:84:0e:33:df:e8:30:60:6f:a9:
         1d:a6:5e:22:c0:ed:1e:54:c5:1f:7d:7e:9b:72:af:44:00:44:
         d2:9d:f5:0e:a8:27:a8:0f:fd:d9:1d:4a:1f:13:2b:25:dd:7e:
         f8:80:62:6f:65:51:76:bd:b8:c7:c6:59:64:9e:3a:44:84:de:
         c8:d6:25:1b:0f:47:98:a8:28:03:3e:e6:f2:17:57:24:1b:e6:
         1e:29:98:cf:95:75:ad:23:c4:24:58:a9:88:f1:57:45:89:fa:
         ce:86:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----