Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc71717f4afc28af2573b25f0e7c29b9aeda2381.cer
File:                     fc71717f4afc28af2573b25f0e7c29b9aeda2381.cer (raw, json)
Hash identifier:          M5J2eVbHB0u4cNHJO68kPGnevHzD1HLDmtv5yjMKAkk=
Subject key identifier:   54:13:ED:BC:D3:C4:C8:60:C2:F7:B4:C4:5C:7C:72:C4:99:3B:F0:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB99CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b38906cd-6ff5-4b96-b1eb-84819d614da6/fc71717f4afc28af2573b25f0e7c29b9aeda2381.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b38906cd-6ff5-4b96-b1eb-84819d614da6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:37 +0000
Certificate not after:    Thu 08 Feb 2024 16:12:26 +0000
Subordinate resources:    AS: 264691
                          IP: 168.228.224.0/22
                          IP: 2803:a340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14391757 (0xdb99cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:37 2017 GMT
            Not After : Feb  8 16:12:26 2024 GMT
        Subject: CN=fc71717f4afc28af2573b25f0e7c29b9aeda2381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:d6:46:12:8b:9c:96:0a:ca:7d:03:24:a3:
                    56:75:27:fb:02:05:8c:80:48:ff:4c:1e:10:d4:79:
                    8c:48:c5:33:dc:13:b6:8c:f0:25:b4:71:3e:e1:db:
                    94:cd:85:31:c2:50:df:87:84:f5:ed:81:a2:a4:23:
                    db:d0:65:72:60:1a:4f:d0:c7:5d:40:e1:48:30:0e:
                    ee:74:77:fd:fb:6f:55:60:de:67:27:ed:57:84:62:
                    f6:7b:a7:3a:7f:32:35:1d:82:e5:f9:e1:22:2e:e8:
                    30:4c:b0:3c:49:47:58:9a:80:33:f4:ac:65:8f:86:
                    63:e2:36:3b:a9:19:c0:25:75:35:43:fc:1c:9f:79:
                    35:80:a8:c5:2e:7f:de:c2:14:ab:75:3b:f8:35:e4:
                    99:3f:07:9d:bf:8b:ad:d5:5a:38:c1:6c:ea:41:75:
                    7f:88:4d:29:b4:a7:a8:23:ec:b4:4a:c8:cb:61:a3:
                    c9:6b:5b:f8:64:72:67:1e:ad:14:7c:f3:a8:fd:a5:
                    aa:c7:da:38:0b:88:7c:a6:cb:53:f9:7e:6e:4e:54:
                    a5:cd:39:0d:a9:2e:4e:4c:69:f2:b0:7f:da:0c:d7:
                    9a:8a:4a:f2:81:ba:5c:f9:ba:fe:9a:0e:76:9d:ba:
                    14:cb:b0:e5:75:a0:d6:85:d6:3c:88:ae:dd:16:d6:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:13:ED:BC:D3:C4:C8:60:C2:F7:B4:C4:5C:7C:72:C4:99:3B:F0:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b38906cd-6ff5-4b96-b1eb-84819d614da6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b38906cd-6ff5-4b96-b1eb-84819d614da6/fc71717f4afc28af2573b25f0e7c29b9aeda2381.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.224.0/22
                IPv6:
                  2803:a340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264691

    Signature Algorithm: sha256WithRSAEncryption
         85:66:62:85:4d:06:8f:53:dd:79:c5:61:ef:25:34:93:25:07:
         5f:19:25:45:46:ee:44:18:bf:95:2a:a0:ff:e9:a4:24:7b:d5:
         f8:a5:b8:f3:78:36:f1:dc:c6:86:b9:cf:c0:dc:74:77:2e:12:
         65:fa:79:df:06:4f:3c:32:1a:b6:0f:51:53:d4:b2:c7:6b:48:
         81:4d:a4:b8:8c:ca:72:dc:6a:24:6d:62:83:5d:90:a3:6e:7c:
         8f:2a:a1:d2:42:cf:8a:06:9b:e1:3e:ff:1d:af:73:a6:98:6e:
         44:d5:61:49:47:9f:5c:f5:9c:55:d2:38:6b:a2:c7:d0:56:b2:
         af:dc:a2:f6:91:92:78:d2:79:1f:1f:f1:92:f0:81:64:9e:2b:
         72:b2:61:3b:98:62:90:61:a0:4e:de:da:76:46:ac:cd:10:4a:
         28:25:57:a9:f9:46:8f:23:83:cd:e6:23:1b:9f:c9:eb:4c:f4:
         42:62:7e:67:11:ed:1d:a9:d6:8a:f6:8e:13:16:13:04:32:56:
         fa:ad:ad:ab:dd:7f:72:d6:05:87:fa:32:0b:3b:bb:f8:68:42:
         e4:09:99:77:0c:87:dc:73:41:dc:a7:4b:86:cb:a7:d6:34:8f:
         91:36:7c:40:5d:dc:dc:06:fd:f6:de:fb:2b:f8:7e:6e:b5:3d:
         6c:4f:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----