Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0c214130f740bba205b8de452fb57587e3b6e3c.cer
File:                     a0c214130f740bba205b8de452fb57587e3b6e3c.cer (raw, json)
Hash identifier:          6Oe4bjSk5vg15zWKurLetXYFxIb54aUKHfkSkhGMnG0=
Subject key identifier:   79:C0:6A:9B:66:1C:80:5F:D1:C3:A8:B1:D2:C6:C8:DA:F6:95:B8:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010275A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/a0c214130f740bba205b8de452fb57587e3b6e3c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:27 +0000
Certificate not after:    Sat 28 Dec 2024 16:25:04 +0000
Subordinate resources:    AS: 52501
                          IP: 2803:b780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16938409 (0x10275a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:27 2017 GMT
            Not After : Dec 28 16:25:04 2024 GMT
        Subject: CN=a0c214130f740bba205b8de452fb57587e3b6e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:5a:fe:af:95:6e:5b:bd:ca:2b:85:a2:6e:
                    1f:9d:ed:2f:a1:7e:76:23:03:f4:1d:5b:a3:9b:bf:
                    62:39:54:36:87:18:66:dc:b2:34:29:89:5e:5e:47:
                    3f:18:c6:9a:21:57:9a:5d:06:c7:e9:c9:9e:4c:0e:
                    52:41:f9:5a:54:85:07:23:37:89:36:b3:00:3e:3d:
                    e0:8b:f4:e3:a6:20:75:4a:70:50:08:a6:19:50:ce:
                    af:7d:4d:ce:3b:de:c2:0e:90:fd:a5:68:87:84:5e:
                    bb:bd:c2:c7:88:c4:8e:2e:84:5e:94:06:27:f9:eb:
                    03:65:7f:d2:cf:33:3b:ed:ad:45:46:a1:05:dc:68:
                    58:08:58:71:b9:cb:86:83:0e:6a:fd:1f:d1:f3:65:
                    ca:92:db:84:be:34:25:38:02:b7:3e:08:5c:d8:9a:
                    c1:54:ee:55:db:83:85:4b:ab:8b:2b:aa:b9:e6:3f:
                    2d:4f:33:44:68:51:dc:e7:f5:67:52:5b:99:06:b6:
                    28:1b:7c:7d:ea:ff:bd:99:46:a4:92:43:91:22:b3:
                    43:7b:a6:01:a4:d6:db:95:85:63:f4:48:ba:dd:52:
                    de:47:50:40:7f:6f:ac:22:73:58:6d:99:6b:bc:21:
                    a8:ec:ec:5e:13:88:f8:36:31:20:c0:d0:2d:39:57:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:6A:9B:66:1C:80:5F:D1:C3:A8:B1:D2:C6:C8:DA:F6:95:B8:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/a0c214130f740bba205b8de452fb57587e3b6e3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52501

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:23:d9:a6:b3:10:f4:f6:37:3e:5d:cf:a6:5a:95:9b:f7:
         77:76:0c:a8:ee:75:d2:d5:66:3b:c9:53:f5:82:e8:f8:23:89:
         a8:d1:67:e6:4e:58:6c:18:25:0d:4b:48:ff:5c:fc:9c:2b:b3:
         1c:91:72:06:5b:2b:31:af:19:00:60:c8:0b:0e:53:e5:e2:50:
         a9:a0:59:99:48:36:4c:fb:86:f4:f0:6a:cf:4b:1a:77:71:1d:
         31:4e:91:9d:dc:43:3e:36:52:6e:ad:48:5d:54:1c:68:06:ff:
         59:60:54:5f:63:cd:2e:b6:1f:c1:eb:77:1c:b0:f6:1f:f3:6c:
         24:48:d1:b7:b1:eb:b1:82:24:08:b9:70:8f:cc:bb:00:95:4f:
         15:46:f8:81:ba:17:7b:99:2b:26:a0:3e:fb:25:32:c7:96:51:
         9c:85:26:3b:0f:e1:94:f4:1e:b4:2b:ff:55:2b:4b:0f:46:22:
         f9:45:90:b5:b5:7b:b7:b7:3e:6c:f3:ed:35:64:53:58:a2:6b:
         42:57:4f:c3:ac:07:cd:e6:83:e0:3f:b2:28:74:c1:db:14:50:
         71:4c:0a:6f:77:77:05:e2:84:88:7c:b4:ca:ed:68:97:aa:a3:
         a4:47:8a:5f:a1:ec:aa:39:34:64:29:92:ee:91:54:64:9d:4f:
         64:1a:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----