Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f24706c6cd9122d2a06a6a77178f060017882428.cer
File:                     f24706c6cd9122d2a06a6a77178f060017882428.cer (raw, json)
Hash identifier:          daSW7UEFu2u/1Y+7sCuWC0PDsYl0qEyNAEZlxNDY9tI=
Subject key identifier:   C2:6A:70:2A:76:11:25:96:47:AD:F3:BB:17:A7:C6:3B:D3:71:58:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAEAE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/f24706c6cd9122d2a06a6a77178f060017882428.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Mon 28 Oct 2024 14:25:19 +0000
Subordinate resources:    AS: 264654
                          IP: 167.250.192.0/22
                          IP: 2803:540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16444135 (0xfaeae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : Oct 28 14:25:19 2024 GMT
        Subject: CN=f24706c6cd9122d2a06a6a77178f060017882428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:14:20:03:27:38:7d:d6:5c:5a:5a:76:2d:
                    13:6f:34:56:52:8d:89:35:e1:6c:09:7b:d3:af:93:
                    85:1b:f4:c2:e7:3b:d4:c9:cb:45:e2:2c:b3:96:ef:
                    83:3f:ed:9a:9b:5b:69:7b:ef:6a:5f:f3:67:92:f2:
                    01:96:94:11:b9:2c:6a:63:16:e9:a4:fa:6e:0e:4d:
                    fb:de:62:2e:60:a5:a6:7b:8a:1e:d8:94:17:ae:f4:
                    d9:bb:b6:c4:03:01:e1:50:76:ef:17:2f:1a:45:6d:
                    9c:33:e1:47:fa:c4:ab:38:b2:c2:3c:e1:50:50:7c:
                    51:16:bb:15:ba:eb:4f:db:47:c7:c1:5a:f7:ee:50:
                    63:b2:12:f9:86:a0:21:da:a7:c4:ef:5b:16:9f:58:
                    8f:5e:43:7b:ef:e5:3f:0a:1b:b3:f0:69:b9:ad:67:
                    82:d6:52:4a:fb:9c:0f:fc:60:50:73:a8:f0:10:87:
                    a7:56:24:71:25:9f:54:16:26:b4:cf:ea:bb:73:4c:
                    97:d3:26:4f:a1:e7:09:a1:13:4f:08:33:41:e5:21:
                    46:47:5f:d2:cb:12:0c:5e:dd:c9:88:0d:4f:c3:67:
                    f3:4f:0d:a3:3d:9c:7d:4e:90:d7:82:cd:fc:33:98:
                    63:08:60:d3:80:56:85:0f:49:72:28:1f:90:22:c6:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:70:2A:76:11:25:96:47:AD:F3:BB:17:A7:C6:3B:D3:71:58:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/f24706c6cd9122d2a06a6a77178f060017882428.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.192.0/22
                IPv6:
                  2803:540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264654

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:f7:28:44:43:b1:7c:79:a0:a6:c0:f7:08:4a:02:b2:ec:
         d6:75:24:2e:a0:2f:56:e1:52:b4:c7:31:4f:0f:59:62:60:e9:
         20:8e:09:e0:84:fd:a4:2e:11:b1:10:34:c3:51:ce:c5:f9:70:
         87:05:d4:38:64:94:68:8a:44:d3:b7:d2:fa:1c:42:cd:db:a9:
         84:71:97:5e:6c:61:f4:b3:32:fb:70:86:77:1a:53:87:f1:bf:
         21:1c:ff:fd:69:57:19:fb:e1:db:7c:3f:39:4e:b4:4f:6d:c3:
         6f:bd:82:33:7f:20:d1:f6:24:c1:74:43:6c:cc:3b:f2:30:03:
         f5:6a:28:ce:98:44:7b:df:3d:bf:19:77:f8:6e:16:4f:a7:8a:
         e9:74:f8:26:e2:0b:a7:af:7d:cb:dc:cb:3f:4f:c4:ec:07:38:
         e0:eb:82:2d:cd:d8:20:43:da:74:67:39:91:f4:fb:e6:3e:11:
         1a:64:f9:1a:58:99:6e:23:bf:0e:4b:07:bf:77:44:33:e6:20:
         cc:f0:92:82:2b:0c:5b:09:f7:ae:ea:6b:cd:3c:36:d1:f5:47:
         9f:8e:b8:d8:16:b0:7b:b6:e2:a2:02:e6:0a:56:9d:61:4b:51:
         e6:cf:33:a8:d9:7b:b0:5f:51:c9:76:39:7b:35:bf:7e:e3:fe:
         4d:30:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----