Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/721835acbb5ec1cb7782ea740dc0072a11528d9a.cer
File:                     721835acbb5ec1cb7782ea740dc0072a11528d9a.cer (raw, json)
Hash identifier:          GcXNpZxSDrB5b19qov011Xz5M+CJEOhu3GDQ4MItYSU=
Subject key identifier:   C3:D3:77:D5:A9:20:7B:4E:31:BE:19:74:60:66:0F:97:C7:DA:00:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FDE964
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cd2da968-0ef9-4a84-a683-f371992c0053/721835acbb5ec1cb7782ea740dc0072a11528d9a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cd2da968-0ef9-4a84-a683-f371992c0053/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:44 +0000
Certificate not after:    Sat 23 Nov 2024 19:42:17 +0000
Subordinate resources:    AS: 264663
                          IP: 191.97.80.0/21
                          IP: 2803:2280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16640356 (0xfde964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:44 2017 GMT
            Not After : Nov 23 19:42:17 2024 GMT
        Subject: CN=721835acbb5ec1cb7782ea740dc0072a11528d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:7f:8b:90:9c:58:c1:74:12:34:82:3f:fe:
                    be:e7:e0:0d:a4:69:71:58:b6:d9:63:51:3f:82:14:
                    0d:6d:7f:94:cd:c4:06:c1:67:80:1c:ed:fd:e6:4d:
                    2d:03:22:80:48:9b:36:d1:2d:ba:83:7d:4e:b8:6a:
                    eb:05:9f:3d:29:e0:40:82:93:e4:c8:e0:f0:6f:9a:
                    9b:8c:fe:b6:98:d4:42:53:45:1e:94:70:b0:bc:d8:
                    89:7e:61:0e:63:f7:94:e8:35:b2:0c:a6:73:5e:77:
                    1f:15:2d:b9:94:a2:10:ad:5d:34:29:bd:37:b4:a3:
                    26:b4:bd:80:7b:7c:cc:75:52:70:1c:22:37:f1:97:
                    41:51:14:37:0e:a5:a4:a8:cc:44:5c:31:3f:78:45:
                    16:49:05:f2:80:01:2b:20:d5:b5:bc:db:b3:59:4b:
                    d5:d4:0b:93:b3:30:cf:ca:a9:c3:1f:af:4c:c8:cd:
                    a3:d5:32:03:ef:40:47:2f:34:58:1b:b8:9f:c0:76:
                    d9:89:ac:6b:c2:cb:23:6d:dd:45:bd:c8:ad:f9:f8:
                    80:c4:6b:31:13:09:17:60:6d:60:01:5d:17:a4:7b:
                    ba:d1:de:eb:3f:86:ec:b5:8b:35:30:35:aa:4c:91:
                    cd:e9:3e:56:bd:7e:f4:1e:31:0d:ff:a4:65:cd:b0:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D3:77:D5:A9:20:7B:4E:31:BE:19:74:60:66:0F:97:C7:DA:00:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cd2da968-0ef9-4a84-a683-f371992c0053/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cd2da968-0ef9-4a84-a683-f371992c0053/721835acbb5ec1cb7782ea740dc0072a11528d9a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.80.0/21
                IPv6:
                  2803:2280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264663

    Signature Algorithm: sha256WithRSAEncryption
         3f:f3:7c:48:39:ca:8d:69:b4:5e:ed:df:30:dc:88:ab:27:de:
         95:3b:b6:13:47:b8:3c:f5:e3:a6:3c:2a:de:70:eb:aa:3c:b9:
         63:33:12:d6:45:97:e7:6d:95:78:90:5c:1d:d7:51:a7:86:ac:
         7b:95:2f:90:3c:4a:f8:8f:9e:b8:1d:f6:7f:31:67:a3:d0:0a:
         97:04:aa:12:c8:82:9f:70:56:ab:38:f7:d8:1a:dd:30:6b:8e:
         73:68:06:d8:0f:1b:4c:bf:c9:bc:91:84:53:ef:17:87:1c:0e:
         6a:44:b4:f6:3c:e9:d6:4a:b2:f7:ef:a8:e1:ca:5b:50:3f:2e:
         35:a4:ac:bf:4f:76:97:55:0d:a8:c6:b6:5f:00:c9:24:95:f3:
         68:b8:03:ea:ee:11:20:0b:69:72:72:a0:d5:c9:e5:d9:2f:1f:
         f9:24:6d:97:55:57:b3:1b:48:30:5c:96:66:ab:98:f8:a0:83:
         7b:8b:05:4e:07:8c:13:78:f0:f2:47:01:9d:c1:e5:c0:8e:43:
         02:db:cf:ae:cf:9d:85:cb:93:f7:a0:47:4c:4f:f9:3b:67:fb:
         32:11:a5:23:11:32:e2:cc:a5:f3:77:12:16:d4:5f:d3:6b:ce:
         31:fd:ec:a0:3b:76:97:52:e7:d0:7a:a0:ea:98:0f:f8:52:27:
         a3:34:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----