Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer
File:                     f0973f64f8f7a17366a92ab7845b32edddce23cd.cer (raw, json)
Hash identifier:          nbZD370kwDZH2XrvR6lNjBzsax8rG25OD9eBYviw6hU=
Subject key identifier:   ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CCC46A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/f0973f64f8f7a17366a92ab7845b32edddce23cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2018 14:34:15 +0000
Certificate not after:    Mon 01 Apr 2024 17:18:57 +0000
Subordinate resources:    AS: 265734
                          IP: 45.65.203.0/24
                          IP: 2801:1a:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13419626 (0xccc46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 11 14:34:15 2018 GMT
            Not After : Apr  1 17:18:57 2024 GMT
        Subject: CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b7:06:fe:34:95:a9:01:8a:c2:be:c2:97:99:
                    c5:b5:37:ed:93:ef:ab:b6:3f:52:9b:d6:fa:b6:59:
                    0e:d8:3d:9f:ec:1d:c8:d4:b8:1e:ed:fa:f2:46:f1:
                    a7:de:27:1c:ec:fa:5d:7d:e4:8c:08:94:4f:23:48:
                    a6:dd:8c:41:49:4f:2f:35:17:ab:67:7a:81:31:39:
                    8f:44:6c:87:a2:7a:c8:5b:d9:1c:88:13:3f:79:62:
                    3a:39:11:25:0f:20:10:42:e8:cf:11:d1:dd:a5:6c:
                    71:1b:e1:78:5e:1a:32:d0:c7:b7:fe:d2:be:7f:fc:
                    01:bc:47:47:36:57:8f:15:33:47:39:04:76:73:11:
                    6d:18:98:52:e3:31:53:cc:2e:2c:b2:bf:da:c5:b9:
                    6c:ff:d4:4b:04:91:cc:da:98:06:90:bf:3d:08:db:
                    1a:d1:9d:e0:1f:27:2d:4d:52:e7:dd:62:b6:56:35:
                    e3:45:57:ab:4c:de:42:5a:87:99:f4:45:93:38:ee:
                    e5:2b:cb:59:ef:e6:97:08:cf:e1:6b:55:03:c2:dd:
                    38:6d:d5:a9:a8:a8:bc:9b:f6:d5:b1:78:11:e4:97:
                    ff:e2:3c:39:4a:7c:95:82:de:13:bf:3d:27:8e:67:
                    47:7b:fa:6d:c2:b1:4b:b5:63:28:34:6f:46:60:9d:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/f0973f64f8f7a17366a92ab7845b32edddce23cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24
                IPv6:
                  2801:1a:3000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265734

    Signature Algorithm: sha256WithRSAEncryption
         37:52:4e:a9:8b:e8:da:4f:4e:c8:ba:de:6a:a4:99:0f:da:bc:
         2b:5c:33:22:1c:40:07:2c:7b:73:43:c3:f2:ea:7b:51:d5:37:
         58:87:b0:b9:9c:45:c6:4c:6a:fb:0c:b1:04:6c:cd:d2:bc:d0:
         16:19:75:83:57:ba:2c:79:82:45:43:86:be:cb:68:b3:61:e4:
         09:8d:08:55:9e:64:6a:00:11:28:4a:a4:8a:72:fa:7c:fa:74:
         e2:a5:1d:20:d5:51:88:60:5b:1d:4c:50:1b:66:ee:03:77:33:
         b8:ce:4a:0b:24:be:42:33:03:5f:94:9c:75:f7:61:49:98:6d:
         ef:77:1d:46:ac:ea:ca:92:d8:10:0e:1c:7f:bf:1f:a8:3e:21:
         34:c0:bc:d5:64:68:e2:78:ed:78:48:45:08:93:16:3b:1d:d9:
         98:fc:c4:1f:a7:6c:44:11:42:e7:60:d6:c7:51:92:a1:2a:36:
         40:ad:45:41:b2:b8:6f:1b:50:e3:54:35:4f:2f:ef:2b:8f:9c:
         6e:64:63:07:65:49:65:6d:10:01:da:f5:9e:6d:d1:87:86:f8:
         65:76:2d:17:36:0f:13:34:6a:db:46:26:7e:a9:7f:a1:ac:f6:
         d5:20:18:7c:0e:05:c3:03:ad:30:2b:a2:b9:ee:16:c5:67:a9:
         cf:d9:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----