Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.cer
File:                     f85a010f5e6f009917c8e2019f5f208cfeb5f75e.cer (raw, json)
Hash identifier:          oHUJY+S2lqQeu3nCQxCn4ggnTTOxama0aLdMzGn0BUk=
Subject key identifier:   BF:78:75:62:F9:EB:8F:C9:8B:B6:0E:D4:74:95:67:5F:4E:E2:72:8A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF0B9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Tue 19 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 264797
                          IP: 206.221.80.0/20
                          IP: 2803:7e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14617501 (0xdf0b9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Mar 19 06:00:00 2024 GMT
        Subject: CN=f85a010f5e6f009917c8e2019f5f208cfeb5f75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:57:81:16:7c:e9:cf:d0:02:91:62:2c:7c:
                    43:6e:07:40:20:b5:8f:f5:2d:60:3b:67:46:33:45:
                    b2:2c:f1:df:ac:e3:8e:17:56:c5:45:18:e3:64:b6:
                    07:36:da:4c:d0:0c:7b:c7:7a:ef:18:7e:f3:30:4a:
                    a9:c5:80:76:bb:c7:3c:f2:a0:5e:6a:de:fc:fb:6d:
                    98:80:de:f6:b6:59:c5:de:63:9b:d0:90:52:08:19:
                    73:80:d2:88:77:b1:c0:19:16:cc:c8:d7:92:83:49:
                    9d:ed:97:ba:65:61:37:75:c4:1b:9e:9f:68:4d:f4:
                    83:fe:b1:82:1f:03:5f:4a:1e:43:af:c2:98:7a:ea:
                    0e:cd:c6:ab:03:c4:7b:39:41:58:2f:85:37:83:bd:
                    8a:44:6d:13:bc:50:dc:ae:a7:cf:ca:44:2e:32:02:
                    5d:c2:fe:b5:d7:b4:6e:71:b1:eb:c6:79:d8:c3:8c:
                    49:d7:8f:fa:6c:8f:7a:17:51:3c:bc:38:0b:13:4d:
                    a3:0a:1e:ef:c9:e9:ae:a6:69:bf:94:6b:42:7d:71:
                    8e:f4:a1:11:7c:f6:f0:d2:ae:08:11:84:70:ce:e8:
                    6f:97:4f:2d:18:3b:de:20:1b:1b:6e:a8:ed:87:36:
                    e5:b1:69:33:0a:53:52:b7:8e:fd:6e:43:53:a7:18:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:75:62:F9:EB:8F:C9:8B:B6:0E:D4:74:95:67:5F:4E:E2:72:8A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.80.0/20
                IPv6:
                  2803:7e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264797

    Signature Algorithm: sha256WithRSAEncryption
         91:af:de:02:fa:96:cf:75:93:6d:08:b0:a1:9b:17:2b:9e:67:
         b3:78:5b:c2:00:54:e4:70:3d:fe:7f:4b:48:68:72:37:79:41:
         1a:46:27:71:5f:36:a8:b3:65:b6:47:28:74:52:2f:df:f4:9e:
         dc:8a:13:3a:2d:9a:24:04:2a:4f:60:71:8e:6d:82:b9:35:7f:
         3c:6e:c2:fd:14:46:e5:c7:32:c2:01:65:64:38:d0:57:bb:1b:
         71:cf:02:bd:c9:00:32:29:97:37:11:23:ba:6e:05:4c:f7:b4:
         db:74:3a:37:d2:47:33:d9:9b:62:d0:df:01:15:42:74:41:83:
         16:3c:25:c5:ff:ac:55:fb:da:91:d9:9e:f2:ec:2e:e4:09:35:
         64:cc:af:a3:9f:5a:af:45:fb:53:e9:87:bd:25:f0:9e:88:4e:
         1d:7d:70:35:97:0c:59:a5:a8:20:77:a5:b1:34:3b:05:bc:e2:
         53:cd:dc:a1:a2:0a:f0:94:d0:c1:5b:b5:86:2d:02:6a:49:c2:
         31:05:ee:ad:9b:35:c9:ec:e2:02:d5:e1:a7:3a:13:60:bf:c5:
         82:f8:be:75:1f:e2:91:e0:f9:1b:56:61:79:cd:ec:c3:5e:d6:
         96:6d:30:30:ea:6e:cb:2d:30:c9:05:10:85:56:db:52:43:73:
         23:cd:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----