Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.cer
File:                     fa092f07e38e9048e9276bd9c5b8977da9cfba5d.cer (raw, json)
Hash identifier:          dFuPIYydMN85ZnvyBzKPm8GPAur+R2baY/wJNY3v71c=
Subject key identifier:   3E:AA:95:D2:CF:03:E3:F0:24:4B:07:C4:63:06:80:FB:09:6F:B7:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E78B9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Tue 28 May 2024 15:51:56 +0000
Subordinate resources:    AS: 263807
                          IP: 138.255.96.0/22
                          IP: 2801:14:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15174558 (0xe78b9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : May 28 15:51:56 2024 GMT
        Subject: CN=fa092f07e38e9048e9276bd9c5b8977da9cfba5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:7b:3e:d9:b1:b4:a4:bb:f8:0f:ea:58:5f:
                    f0:2b:ff:64:19:39:95:71:9a:1f:86:59:6e:3d:0d:
                    3f:a0:fd:1b:e4:05:1f:81:39:7f:66:5b:01:c9:32:
                    d4:56:ea:5f:e1:49:43:65:55:86:3b:22:2f:24:8f:
                    82:7e:d8:df:d0:c9:8c:08:e9:8b:fa:fe:f9:f5:0c:
                    13:25:3d:3e:94:0b:cc:e5:37:df:32:f1:60:ec:9b:
                    a9:94:89:0e:9a:bb:0e:83:bb:ac:99:2b:0e:b0:f5:
                    7e:44:ba:48:2f:72:8c:b8:2d:1f:da:dc:77:d7:8e:
                    d6:e7:f3:6d:77:3c:22:ae:77:0b:13:ce:a1:61:6e:
                    44:c6:33:66:c0:c2:01:9d:22:4b:3d:aa:d7:1c:13:
                    70:1a:22:54:ee:b7:26:94:06:49:9b:41:6d:15:d9:
                    47:0f:4e:5b:2a:d3:25:cc:5f:bc:2b:fb:76:95:6b:
                    a3:6d:df:58:b8:21:9c:8d:6d:01:e5:e1:b1:78:b5:
                    9a:8f:c2:6b:f8:e4:83:e9:fb:2d:cb:96:f1:41:ef:
                    24:3e:fb:df:2d:e6:07:0d:31:dc:6d:9d:dd:28:b6:
                    18:32:a7:00:dc:f8:83:cc:5c:c4:59:2b:88:9e:8b:
                    ee:f5:1f:5d:d8:53:f4:d3:83:46:8c:d9:62:92:b3:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:95:D2:CF:03:E3:F0:24:4B:07:C4:63:06:80:FB:09:6F:B7:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.96.0/22
                IPv6:
                  2801:14:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263807

    Signature Algorithm: sha256WithRSAEncryption
         ae:e0:f0:5e:11:2e:d3:39:9f:28:ad:77:6a:66:5a:a1:ea:f9:
         dd:44:4b:64:a0:b0:03:6a:50:28:1d:52:99:4d:c0:40:97:f4:
         e4:95:4b:13:4e:4a:fd:b3:bc:8a:56:f5:f1:20:d8:c4:50:39:
         cd:85:0f:81:eb:a8:fa:42:e3:a6:69:d9:09:e9:14:de:7e:97:
         f2:2c:44:67:ef:4a:24:69:16:4f:d7:79:f9:9e:82:40:03:ac:
         7e:31:68:82:df:5f:6d:b1:00:c1:30:fa:bf:c5:d0:fb:1f:47:
         1b:d3:78:b7:48:0f:17:42:5b:bc:22:a7:f0:58:2c:5f:64:6e:
         5a:49:ba:05:c7:71:23:fb:d1:78:50:6a:2d:cc:30:b7:0a:2f:
         75:89:07:1d:16:55:29:c5:0c:96:81:4c:f6:c0:aa:cd:aa:f7:
         e7:a8:60:a3:b8:90:7e:96:12:06:2d:e0:9c:37:45:df:6c:54:
         e9:d7:a3:80:cf:ce:01:21:30:4b:98:fe:f8:bf:80:f1:86:56:
         52:59:f9:e1:1e:3f:ae:4d:b4:5d:34:b1:f2:3b:9d:82:f1:ad:
         fa:56:04:e7:28:cc:e1:e9:44:fb:78:58:2b:75:06:7a:d4:36:
         42:f5:42:b3:93:a8:fa:15:af:01:61:85:55:c6:e3:e0:9c:5c:
         dd:5a:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----