Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/047b84634bdb1a6b9bc9918c849144970e17f64a.cer
File:                     047b84634bdb1a6b9bc9918c849144970e17f64a.cer (raw, json)
Hash identifier:          Kntdl+7wnsPDTn6Wxou2pXS/1j5puXN/nqeoqrQmQPU=
Subject key identifier:   2A:A3:0C:F8:19:83:5B:A2:6F:5F:34:80:9A:83:73:EE:68:54:2C:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101BBDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c89106f7-7260-413b-8ee6-7c2addfb5de6/047b84634bdb1a6b9bc9918c849144970e17f64a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c89106f7-7260-413b-8ee6-7c2addfb5de6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:54 +0000
Certificate not after:    Sat 21 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 27758
                          IP: 201.219.192.0/19
                          IP: 2803:8980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16890846 (0x101bbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:54 2017 GMT
            Not After : Dec 21 14:00:00 2024 GMT
        Subject: CN=047b84634bdb1a6b9bc9918c849144970e17f64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:43:50:8b:37:cb:4e:7d:16:5a:1e:fe:c0:e3:
                    2c:68:ab:a0:84:bb:e6:1c:f8:f7:c7:ff:21:a0:e2:
                    64:cd:dc:07:48:21:28:56:1b:31:4b:bc:d8:28:7b:
                    6c:e7:a1:61:f5:df:1f:75:65:82:e2:11:6b:a0:c1:
                    fc:83:5d:ef:b5:3d:37:72:97:e5:e9:72:50:90:71:
                    f2:1f:0e:8e:17:6c:61:f7:94:75:54:2d:c9:fb:6b:
                    f0:54:ff:5f:bd:a2:45:82:47:73:91:86:77:b0:d2:
                    c3:b8:bc:ba:07:f2:a0:f8:7a:73:b1:c2:f0:3c:44:
                    11:13:15:98:d5:93:91:b4:fe:32:5a:ae:a8:f0:63:
                    6c:9d:ce:ea:36:af:e2:89:7a:12:d4:73:65:80:fa:
                    e3:92:98:24:20:ff:da:8e:ee:26:3b:1d:bf:74:74:
                    6d:2c:90:a4:a1:fd:84:0f:93:e9:4e:11:55:10:2d:
                    37:fb:71:24:c8:d7:65:87:67:63:8c:e3:43:82:fd:
                    77:1b:69:a6:99:60:d4:62:5d:80:bd:ac:20:5b:d8:
                    86:97:13:fc:82:cd:40:ec:9c:8f:4f:5b:d0:96:6c:
                    f1:a1:e2:75:e6:b4:fa:10:7b:49:88:6b:54:27:93:
                    8e:3e:17:1a:88:bb:7d:78:13:c6:85:ca:3a:19:a3:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:0C:F8:19:83:5B:A2:6F:5F:34:80:9A:83:73:EE:68:54:2C:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c89106f7-7260-413b-8ee6-7c2addfb5de6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c89106f7-7260-413b-8ee6-7c2addfb5de6/047b84634bdb1a6b9bc9918c849144970e17f64a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.192.0/19
                IPv6:
                  2803:8980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27758

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:a7:76:18:81:5f:87:70:20:90:a1:fb:58:d7:b3:fd:b3:
         ce:1f:d4:33:5b:36:80:2a:5f:e1:e5:ba:54:93:bb:ac:2d:de:
         e9:b8:20:9e:55:33:35:43:d3:c6:5f:ae:35:82:37:45:3f:c1:
         06:98:9f:29:de:fe:2f:2f:ab:73:8a:c0:e8:5c:97:82:94:0c:
         1e:04:0f:75:33:06:33:c5:85:b5:4c:28:dd:fc:bf:85:7e:cd:
         74:aa:52:50:3a:1f:da:ac:aa:ea:30:50:02:da:0c:b8:29:8c:
         7f:65:50:05:e7:7e:85:1e:3f:b0:8d:2a:98:c4:20:60:6b:b1:
         dd:19:8a:c7:d7:54:a3:c5:6a:76:7e:38:81:26:a9:35:73:00:
         8b:d0:ad:f5:51:f0:0c:4c:5f:b7:0f:ee:46:fd:17:9d:80:a0:
         d3:2f:e2:c4:41:9f:57:73:62:bc:8d:f7:c4:a8:50:22:30:db:
         9e:0c:aa:96:bc:7c:8f:31:61:40:72:c6:87:40:65:a5:79:ca:
         ea:c5:b4:1a:9a:a1:56:5e:4e:63:3f:33:45:a7:2a:e3:e1:c3:
         98:bf:26:e1:0a:b0:28:6d:ca:1d:68:57:3f:50:37:7f:7e:4b:
         31:14:aa:80:32:92:21:59:43:d1:0b:71:83:f3:23:31:4d:f3:
         71:0d:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----