Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.cer
File:                     b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.cer (raw, json)
Hash identifier:          Riet5g10tE7BxXUkM2EbGMe949n8YU6bHi2+7PLEv4Y=
Subject key identifier:   17:36:A6:7B:E0:AC:16:FA:79:A3:49:C6:56:7B:DE:60:D6:40:2F:F5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100F241
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:08 +0000
Certificate not after:    Thu 12 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 263216
                          IP: 191.98.208.0/21
                          IP: 2803:f280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16839233 (0x100f241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:08 2017 GMT
            Not After : Dec 12 04:00:00 2024 GMT
        Subject: CN=b16d3c6d8a5f9edb19cd942123042b1c20ae53f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:3e:f0:09:50:c9:f2:6e:74:79:82:9f:ad:
                    a9:d7:f3:99:75:cc:11:e7:d2:9b:8f:16:e1:e2:e7:
                    91:61:63:5f:e6:52:b6:f5:90:9a:eb:c1:49:ea:7e:
                    6f:1a:06:88:e6:17:c6:f2:8b:99:59:0e:c5:35:35:
                    7a:15:f0:44:fc:43:b4:c1:73:3e:9b:a6:dd:eb:1e:
                    6b:d5:66:4c:db:8f:b3:a1:69:73:37:ad:0e:41:a6:
                    86:69:3a:1a:0c:3f:67:a3:aa:90:0e:3b:d2:c7:2b:
                    ff:d1:89:0a:f2:1d:1e:c7:26:54:dc:69:c4:d3:56:
                    73:f4:80:fb:5d:34:27:d2:35:13:4e:4d:5d:e8:8c:
                    9f:ca:48:b2:f1:89:fb:82:b0:0c:99:cd:06:99:8d:
                    89:85:ad:77:ad:36:bd:85:f3:34:e2:12:b4:37:1a:
                    38:cf:8a:e0:34:0c:e9:fd:d7:6f:bb:d6:cf:56:83:
                    9b:9c:8f:8c:47:c5:90:98:b9:6d:b9:fe:85:86:8f:
                    92:1e:38:f3:b1:09:26:7c:a3:a0:41:9a:76:66:d6:
                    8d:b6:ff:55:ff:97:4c:23:95:24:01:39:fb:3e:3c:
                    f9:a6:6b:31:0d:50:32:dc:0a:13:07:76:90:36:e5:
                    b8:dc:4b:7e:05:a3:32:af:ad:05:ce:38:fe:b6:aa:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:A6:7B:E0:AC:16:FA:79:A3:49:C6:56:7B:DE:60:D6:40:2F:F5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.208.0/21
                IPv6:
                  2803:f280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263216

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:7b:a6:81:2d:51:bc:bf:da:8f:78:58:8c:3b:ff:cb:36:
         ed:fa:81:b4:11:3f:f2:ec:97:b2:82:19:9f:f1:de:f3:2e:e9:
         8a:05:80:37:5a:6d:a6:4b:f5:68:d4:fe:49:ba:95:53:42:a1:
         6e:11:2b:86:d1:a5:28:df:0b:bd:ba:2e:84:44:75:46:86:17:
         c0:f9:e1:07:d0:d7:a9:2a:02:a1:48:b1:7b:d4:c5:d3:d8:56:
         92:6c:51:2f:a3:85:42:0f:47:04:34:dc:f8:e0:66:6c:b7:d8:
         2f:1b:f0:fd:e5:48:91:ef:d4:ab:2e:69:1b:37:5a:22:f5:72:
         00:c1:62:c1:a9:33:fc:be:02:bc:d9:cb:b5:ec:5e:db:32:f8:
         d0:0f:04:e7:11:9a:5c:0a:85:6f:bc:ba:1c:23:23:4c:29:34:
         6b:c2:73:85:ce:80:77:68:c5:63:93:db:5e:cc:12:96:18:58:
         4d:d5:35:00:ae:f2:2f:00:a9:b9:46:f2:7d:7a:30:33:98:23:
         7f:00:91:6f:32:d9:95:67:43:cd:d3:bf:3b:02:a4:8b:ca:69:
         4b:bc:9b:45:e9:8c:ee:e0:0f:91:8f:65:70:9b:ea:80:2c:69:
         5a:34:16:64:8e:73:3d:57:7c:80:5a:ae:48:2a:77:cd:5a:63:
         87:2c:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----