Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.cer
File:                     bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.cer (raw, json)
Hash identifier:          2cIhZpT4ULM5x0SJcAlMGSMs5dkno3HVUAKiwOoafDY=
Subject key identifier:   33:76:69:0E:95:80:A6:3C:1C:0F:0C:06:DC:94:FF:04:D1:33:68:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01021295
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:53 +0000
Certificate not after:    Mon 23 Dec 2024 20:26:29 +0000
Subordinate resources:    IP: 138.94.0.0/22
                          IP: 2803:6f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16913045 (0x1021295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:53 2017 GMT
            Not After : Dec 23 20:26:29 2024 GMT
        Subject: CN=bfbc3170ff4bbeef2a866c5733ee25ecd4102b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:92:cd:44:cf:ce:a4:94:6f:a7:96:63:89:
                    e7:e4:cd:f1:f3:49:ae:2f:aa:a1:bb:7f:84:44:c9:
                    a8:a9:ea:d7:87:58:e2:67:d2:5c:83:c1:70:76:75:
                    4f:50:55:d1:d1:19:b8:02:85:3d:8a:70:75:96:a3:
                    c3:3b:d2:51:1d:73:fe:a6:e8:10:d6:00:b8:da:8f:
                    11:61:a4:ae:87:49:75:e1:3d:99:1b:5e:a0:46:41:
                    80:bf:39:1d:64:0c:b2:26:88:53:0f:16:d5:e6:e6:
                    7d:26:c2:38:84:be:0e:8c:23:e7:a6:b9:8d:26:9e:
                    ad:e5:fd:5e:b6:7a:c6:12:c2:f4:5c:2d:fc:33:73:
                    0b:97:fb:69:f8:43:87:93:a6:03:8a:bf:05:b2:4b:
                    b7:64:7f:26:1a:b9:6f:86:cd:d9:a0:45:a2:48:33:
                    1d:60:54:40:88:77:d5:30:ee:e7:f0:59:d7:2c:cf:
                    c8:ad:2f:60:08:17:a0:09:af:5d:8d:bc:ee:8f:21:
                    fa:bf:e4:c5:6b:ad:ad:42:d6:23:9f:ed:df:e5:3f:
                    45:ec:f1:7b:56:de:87:c6:4b:a8:1a:f9:71:ca:f0:
                    6d:4f:52:45:e0:25:bf:a0:21:a6:20:a4:83:8c:6b:
                    3b:32:48:a7:93:8f:9f:88:70:7f:e0:b2:e3:11:7d:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:69:0E:95:80:A6:3C:1C:0F:0C:06:DC:94:FF:04:D1:33:68:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50036b12-f381-4198-9633-dd2cdc187946/bfbc3170ff4bbeef2a866c5733ee25ecd4102b47.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.0.0/22
                IPv6:
                  2803:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:88:d3:19:80:73:25:3d:7a:bc:f9:70:06:83:c4:94:5c:
         2f:d9:db:a0:39:28:a9:2e:de:93:8c:1a:ff:05:bb:c9:a0:24:
         02:ba:2a:ef:19:01:4c:51:f9:27:a5:72:f7:e5:1b:54:3b:8c:
         f7:12:d0:45:c8:32:67:2f:bd:8c:ce:5e:bf:6d:db:c2:8a:5b:
         7b:ad:f2:0e:52:67:29:6c:ea:18:2d:74:75:3a:b7:1e:04:ac:
         2c:e9:f9:69:84:8f:6f:79:05:34:ab:a2:0b:14:d8:0c:ac:7d:
         b0:03:5c:be:d8:bf:01:8b:2a:b5:47:c6:04:01:35:1f:66:d6:
         eb:f2:44:31:6c:9e:8a:76:f1:ae:89:56:00:df:e3:8a:2e:9a:
         81:4f:cc:2f:78:1f:ce:84:eb:7e:10:7a:0a:1d:b5:53:36:dc:
         7d:38:2e:4f:cc:43:1d:9c:db:cc:ff:9e:b9:c7:8f:97:35:46:
         9b:c1:8e:ee:6e:f8:a3:59:b3:73:c6:d5:d9:fa:9c:8f:7a:dc:
         60:93:e6:0d:78:16:1d:a2:3e:37:91:43:27:25:88:69:bd:0e:
         09:a8:34:2d:8a:45:f1:40:c1:90:9b:d1:db:e0:e6:69:57:a7:
         f0:dc:24:8e:40:0c:1f:ec:5b:c6:ed:24:70:88:e4:08:cd:9e:
         25:89:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----