Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc.cer
File:                     bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc.cer (raw, json)
Hash identifier:          FVdeVl1aUHEfAfTdDLzDUwDxmtuOyDR3yKjPvO7gMTc=
Subject key identifier:   57:9C:B3:8C:3C:06:8D:31:D8:BF:AE:46:4B:30:91:68:A3:48:08:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE5C80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2018 14:12:18 +0000
Certificate not after:    Tue 26 Nov 2024 22:27:31 +0000
Subordinate resources:    AS: 266711
                          IP: 45.229.247.0/24
                          IP: 2801:1b:b000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16669824 (0xfe5c80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  9 14:12:18 2018 GMT
            Not After : Nov 26 22:27:31 2024 GMT
        Subject: CN=bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:07:e6:7d:f7:c0:fa:6d:c1:40:c0:d3:ce:
                    51:8b:91:62:20:f3:80:b8:85:25:fe:94:72:c8:b4:
                    75:5e:ca:a7:70:00:aa:1a:8e:05:19:5a:27:86:99:
                    24:0a:47:1f:af:f2:d5:ad:ed:27:b5:e1:56:84:af:
                    9b:05:55:5d:77:04:15:a0:33:4a:9b:79:71:14:5b:
                    a2:7b:f7:9f:d3:a7:45:98:86:35:e4:4a:8f:3c:4c:
                    0f:cc:26:6a:fc:cc:ef:cb:4a:07:30:fc:aa:3c:95:
                    ed:cf:57:9d:02:f7:16:1b:e7:e1:9b:ef:83:6d:20:
                    df:96:2a:7b:17:ef:92:a8:f7:2f:5f:07:06:82:f6:
                    33:fd:36:84:5f:d6:17:ba:7c:8e:f2:a8:0f:9c:6a:
                    27:68:a5:66:e1:b2:e2:db:91:55:eb:2c:77:f9:3e:
                    b5:48:28:ae:5a:18:46:4d:0f:39:26:cf:d1:ec:fc:
                    89:e8:63:bc:a0:47:6b:3a:23:08:6f:c3:20:8e:dd:
                    ee:d6:e7:18:76:04:d5:a6:88:9a:da:eb:9c:43:ca:
                    5a:54:8d:87:da:6a:89:57:d1:1a:99:56:55:3c:f0:
                    19:ac:b0:bd:e7:93:28:be:27:80:e3:d1:cf:58:91:
                    7f:59:a7:16:11:c7:fe:79:fa:3b:e7:0c:14:b2:e0:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9C:B3:8C:3C:06:8D:31:D8:BF:AE:46:4B:30:91:68:A3:48:08:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.247.0/24
                IPv6:
                  2801:1b:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266711

    Signature Algorithm: sha256WithRSAEncryption
         4c:00:f9:60:75:29:33:54:ac:b8:97:c5:d5:df:e8:62:f0:c9:
         38:e5:fc:95:b2:22:a6:4c:ae:ec:06:7e:46:87:3a:a7:5a:42:
         6e:23:8a:17:17:9e:8f:9f:38:23:ef:c2:57:1e:72:75:6f:1b:
         b8:6b:c8:24:83:6d:04:79:7e:93:81:4b:28:65:3a:6e:27:5f:
         ce:5d:8c:c5:88:5f:83:6b:81:5d:24:79:4f:17:24:de:62:75:
         ab:66:e5:83:05:fe:45:14:dd:15:1c:40:30:ec:36:01:85:9d:
         4f:45:24:32:aa:2d:0f:c1:d4:29:f3:0a:2f:3c:34:bc:fc:cb:
         b7:87:b7:77:a0:3f:75:f9:e6:6b:29:95:83:e5:6b:f5:5f:55:
         38:7d:b9:eb:43:e1:8b:e6:cb:31:8d:58:fb:41:e7:0d:d2:55:
         6e:79:2a:46:a8:1a:c1:cb:99:17:1f:87:a3:e7:0e:7a:d3:ba:
         0f:71:26:a8:11:f1:f5:63:0d:04:08:ad:17:5e:f2:53:aa:02:
         a0:5b:81:a1:89:4c:ce:c4:03:ae:7e:ce:86:bf:a4:ad:dc:49:
         0e:7b:d7:2c:ba:1c:1d:f8:00:93:57:f6:02:c9:9b:6a:d2:fc:
         83:d2:76:ff:75:61:d6:7c:80:e5:40:c1:89:50:5a:a9:76:70:
         a7:3e:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----