Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3c3ff9caa6a1197088be4d1139481164c6ca86f.cer
File:                     f3c3ff9caa6a1197088be4d1139481164c6ca86f.cer (raw, json)
Hash identifier:          sJvcGCWULbcBrat6TzU0zSbEddzmfbXiX8joEEjETVI=
Subject key identifier:   A8:48:A3:D5:C3:57:ED:AB:87:7C:10:ED:D5:8A:23:9C:03:AB:09:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E52D96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:41 +0000
Certificate not after:    Sat 26 Oct 2024 04:00:00 +0000
Subordinate resources:    AS: 27691
                          IP: 190.8.0.0/21
                          IP: 190.8.12.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15019414 (0xe52d96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:41 2017 GMT
            Not After : Oct 26 04:00:00 2024 GMT
        Subject: CN=f3c3ff9caa6a1197088be4d1139481164c6ca86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:73:73:ac:a8:e6:88:24:9a:40:8d:ed:d5:
                    e1:8a:a3:3f:95:b3:d0:3b:c7:2c:5e:19:dc:fc:80:
                    ad:8d:f2:eb:c7:58:97:6f:0d:69:7c:42:3c:7a:7c:
                    ba:64:0e:6a:47:8b:db:03:de:34:75:fe:a1:a5:fe:
                    99:20:7d:b1:5d:53:6a:37:51:68:03:00:b9:d5:33:
                    d4:49:25:c5:5b:2f:de:01:02:f2:3f:76:f6:6d:d8:
                    e7:50:1f:2c:7f:38:6c:65:91:fa:10:b4:06:40:72:
                    ca:f7:ca:99:f5:2c:98:1a:e8:a3:1b:8a:24:7b:f7:
                    7d:49:ab:2a:b1:e0:56:83:86:f1:24:bd:66:37:e8:
                    e0:5e:5d:08:68:9f:a5:70:c0:f4:ea:30:57:55:e5:
                    04:af:a8:19:d7:a8:5a:28:27:9c:f8:71:98:38:8f:
                    a7:d9:c7:f7:af:98:ab:f9:84:40:1e:4c:f3:e5:5a:
                    3c:b0:ab:06:01:bc:5f:39:1c:65:5a:e3:2e:fb:0e:
                    99:d3:61:b7:8b:ef:37:07:a3:d9:20:63:50:fb:9e:
                    54:9e:7a:4d:12:91:9e:55:b1:7c:43:50:f4:83:6b:
                    48:33:0d:a3:16:af:35:75:ca:ef:65:02:1c:9e:c6:
                    6e:10:0a:35:cb:8c:4e:1c:cf:c8:a3:07:94:8d:3c:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:48:A3:D5:C3:57:ED:AB:87:7C:10:ED:D5:8A:23:9C:03:AB:09:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/043c7bfc-d3c8-4518-8a1c-ed68adb797d5/f3c3ff9caa6a1197088be4d1139481164c6ca86f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.0.0/21
                  190.8.12.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27691

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:ae:04:9f:ae:c6:37:f0:3a:b0:e9:4a:1f:85:4b:79:0f:
         cc:10:9e:83:dd:1f:df:bd:7b:b0:a9:9c:19:01:02:7a:c2:ea:
         8a:e2:3e:e9:c9:cd:30:d7:1e:4e:90:e2:11:d3:0b:b4:41:a1:
         ec:d0:91:34:d7:78:52:91:29:05:17:ee:f9:ab:a5:f1:83:26:
         07:fe:a7:0d:a0:32:b8:9c:4e:bc:c4:d8:a2:a3:dd:14:51:d0:
         cd:4a:0d:13:6a:ef:53:d3:0c:29:bc:e4:93:8e:00:7c:37:ce:
         a8:1e:1d:75:58:6e:c6:e1:00:4b:c9:40:61:8a:7e:79:0f:c5:
         aa:d7:60:77:74:9f:e1:50:aa:23:69:59:bd:60:b2:16:26:29:
         97:3e:cc:34:01:3a:92:fd:bc:8c:39:ef:36:cd:bb:d0:cc:29:
         6c:39:3a:6d:af:6b:9d:40:5b:cd:ee:42:4e:cc:d1:81:22:45:
         24:60:2e:69:34:14:b7:f2:32:55:99:a5:88:f9:47:33:ab:95:
         28:0d:f7:2f:0f:16:df:0a:04:5c:c0:ca:f3:fe:d4:34:37:ef:
         b9:12:8b:5f:53:c1:33:e0:6b:14:2d:b0:9e:24:fb:f7:c8:06:
         f2:01:bd:6a:d3:c7:70:b0:f9:28:03:78:61:43:ba:25:0f:62:
         88:98:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----