Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faba226494c1bd7cbd91007cecff2afa9c4283ff.cer
File:                     faba226494c1bd7cbd91007cecff2afa9c4283ff.cer (raw, json)
Hash identifier:          kmS/VEV+JCrZIAVR2B2IIvVBBIoc77Ksb4BAZG/L+o8=
Subject key identifier:   DF:EC:B7:B6:3A:18:C7:F2:43:DA:76:97:49:30:44:5E:DB:51:EB:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4DACB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/faba226494c1bd7cbd91007cecff2afa9c4283ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:30 +0000
Certificate not after:    Thu 12 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 263692
                          IP: 132.255.0.0/22
                          IP: 2803:7b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16046795 (0xf4dacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:30 2017 GMT
            Not After : Sep 12 05:00:00 2024 GMT
        Subject: CN=faba226494c1bd7cbd91007cecff2afa9c4283ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:b0:9f:fc:8e:da:c0:68:fe:a6:80:ad:73:
                    3a:bb:90:c8:c3:1c:24:47:a9:65:b9:76:8d:11:bf:
                    e1:ef:e4:ed:4f:2b:60:51:30:c0:9d:b0:86:80:67:
                    7d:4e:5a:54:25:8f:95:74:5f:70:9d:0b:05:cf:11:
                    cd:45:38:23:9b:69:3c:7a:a7:a0:cc:88:04:c0:72:
                    be:4e:32:55:72:03:45:f8:27:dd:89:e7:13:79:de:
                    d3:ef:a9:06:08:69:5a:7c:05:8b:3a:9f:72:72:08:
                    e0:af:4a:ee:f2:29:5c:01:b9:d0:b0:d0:65:72:b2:
                    28:2a:23:c3:49:11:14:8c:46:e5:2f:f7:ba:e7:4c:
                    fc:f3:33:d0:bc:ae:49:1f:e5:26:ee:e0:c7:f7:3c:
                    07:c8:b3:88:39:af:c6:24:f8:4b:73:96:74:1c:f3:
                    69:a9:f9:47:7c:fa:f5:a2:c6:84:51:51:95:e6:90:
                    b7:0b:6e:ab:4f:79:a8:5b:ae:8e:bb:e5:f3:10:95:
                    76:0e:cd:70:47:a8:7c:75:d5:98:1f:ba:80:29:e6:
                    3c:27:41:0d:bd:3c:3f:71:16:f9:aa:bf:3c:11:cf:
                    34:89:8f:09:8a:1a:e7:75:4b:0c:4d:e9:fa:e1:b3:
                    14:85:1c:29:07:bb:bc:12:5d:32:0d:e0:8b:1c:7d:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EC:B7:B6:3A:18:C7:F2:43:DA:76:97:49:30:44:5E:DB:51:EB:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/faba226494c1bd7cbd91007cecff2afa9c4283ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.0.0/22
                IPv6:
                  2803:7b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263692

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:e1:89:4a:6b:37:8a:b0:c6:27:69:43:62:23:ce:5c:ee:
         3c:ff:d8:d7:64:3d:6d:a4:42:14:09:8f:05:4f:43:f0:f5:3d:
         71:45:15:0f:e0:a6:f3:ec:68:ac:fe:6e:0c:4a:a6:61:35:dc:
         57:75:8b:86:52:87:cb:fe:a2:12:45:2a:e4:05:67:5a:95:0d:
         cb:65:51:c5:b2:d4:0f:9c:72:f6:5a:2d:83:cc:f0:83:d3:96:
         1d:1e:ff:6b:15:10:1b:9c:98:8d:08:b7:94:41:0b:08:96:b4:
         2d:cb:a9:c9:9f:2e:3a:89:d5:94:a2:fe:eb:db:04:2e:37:39:
         1e:39:d4:bf:7d:d1:2c:e8:37:64:b9:54:34:aa:2f:a6:ef:8f:
         3b:d4:45:73:a5:f3:4f:4e:9c:52:76:e3:00:b9:0e:cc:40:69:
         e2:16:34:0a:79:f7:7e:bb:13:10:92:89:b3:1a:b8:06:ae:3c:
         77:e0:17:85:dc:b3:84:6d:6b:79:11:ae:ec:97:52:52:bf:58:
         d3:27:42:43:9b:00:db:d0:82:7f:d8:c7:05:d5:c8:62:d2:49:
         05:b2:ac:03:fa:ff:16:c7:e6:b6:75:ef:0e:97:a2:06:a1:9d:
         bd:fe:7d:b7:4b:7e:21:fc:00:07:8f:c4:b0:63:bc:f6:1e:fd:
         23:eb:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----