Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer
File:                     0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer (raw, json)
Hash identifier:          87tzv6d7c0Hob9t6Er/ZmUmQwrALDam+JZ6DOeuTG8c=
Subject key identifier:   BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01035ECD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Fri 10 Jan 2025 17:50:10 +0000
Subordinate resources:    AS: 262184
                          IP: 45.5.60.0/22
                          IP: 187.49.248.0/21
                          IP: 190.5.212.0/22
                          IP: 190.211.92.0/22
                          IP: 2803:9ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16998093 (0x1035ecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : Jan 10 17:50:10 2025 GMT
        Subject: CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:bd:23:20:d4:e6:96:36:22:c6:4d:cf:1c:
                    3d:88:ba:d9:dc:2c:28:ce:78:01:b5:e2:b9:4f:68:
                    21:75:49:13:c5:0a:cb:88:cb:ff:72:34:e7:5e:3e:
                    58:c7:34:df:d4:81:8e:f8:d4:66:eb:1d:cb:16:a8:
                    28:0e:12:46:c3:b6:ad:71:6f:74:b8:5b:e3:1e:e7:
                    22:86:c8:f5:90:53:7b:2d:cd:2c:be:b1:5c:f2:0c:
                    f8:41:69:53:03:a6:4e:97:db:ea:87:7d:82:05:9a:
                    b4:d0:40:ea:71:c0:d2:7b:5e:33:ab:69:06:24:1c:
                    43:c3:47:05:28:59:33:43:19:a2:3e:32:3c:2b:af:
                    dc:80:a8:7d:76:f9:5a:d9:79:c4:df:fe:45:91:b7:
                    ae:e8:3d:1d:79:da:41:58:11:cd:8c:df:86:58:f2:
                    bd:41:10:6e:96:47:5e:e0:b7:42:b2:c0:e7:7a:ee:
                    91:7c:c7:a5:62:90:b0:77:ae:25:82:09:be:92:a6:
                    b8:f3:d5:8e:9c:c1:a7:c3:83:0c:e8:28:da:e3:1a:
                    b3:24:93:62:e4:4f:0e:de:b9:08:c9:3c:5d:03:92:
                    19:7b:50:e0:26:59:89:2a:ce:05:3f:94:28:78:2b:
                    aa:4c:7b:bd:1c:c5:a7:3f:7b:4d:c8:03:2a:32:8b:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.60.0/22
                  187.49.248.0/21
                  190.5.212.0/22
                  190.211.92.0/22
                IPv6:
                  2803:9ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262184

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:90:ce:90:85:3d:6e:27:0f:83:83:e4:18:0c:99:93:3b:
         0a:f3:7b:e2:cb:37:71:57:d5:8f:0d:4a:88:f5:d3:2f:b4:f8:
         27:54:7a:7f:0e:36:92:03:a4:8c:86:35:a8:13:75:ea:db:fc:
         72:cd:9c:39:fc:aa:88:a0:57:9b:e2:9d:43:6d:12:69:6d:ca:
         04:1a:c0:51:b3:24:5c:b5:68:6b:c5:62:0e:23:7f:59:13:3c:
         8a:62:65:df:10:e3:b8:1a:f9:34:c7:36:b2:58:44:33:6f:91:
         68:4f:2f:66:1a:7c:c1:ae:f2:f1:d6:7e:b5:5c:15:21:a9:69:
         54:65:57:e8:a3:41:14:26:76:c8:8b:d3:55:25:18:64:a0:4b:
         18:78:e3:e5:b4:26:8c:0b:17:8f:c6:9a:ff:18:40:c8:71:fc:
         18:f5:94:18:1d:d6:f0:5b:f0:c9:3e:e6:b2:fe:5e:30:59:79:
         44:f8:a5:25:a8:2b:e7:61:54:50:0f:e0:c6:c7:ec:9c:1a:ef:
         f1:67:69:f8:94:10:bb:47:ed:e7:a5:9d:3f:61:21:cb:90:5b:
         a7:fa:e0:66:60:a5:56:8e:21:a9:f1:76:cc:ba:34:50:6d:58:
         aa:6f:3e:c0:50:b2:1b:15:e9:cb:9f:5d:b5:6e:da:6a:82:fa:
         0e:9c:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----