Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer
File:                     e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer (raw, json)
Hash identifier:          eAliolA+P2U7t1Od43QOrxXkY/4hZ5jE9pTIhHPBhqs=
Subject key identifier:   5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101AA98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Fri 20 Dec 2024 15:00:42 +0000
Subordinate resources:    AS: 265659
                          IP: 170.247.96.0/22
                          IP: 2803:b6c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16886424 (0x101aa98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Dec 20 15:00:42 2024 GMT
        Subject: CN=e50dd9ef106afe1a2202d69bd6a27111b0ecc08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:2c:0c:52:4e:fb:c5:46:b4:ed:51:78:67:
                    de:78:6a:42:f3:4c:f4:b8:8d:1a:a0:db:c8:1a:a8:
                    05:21:b4:36:cc:da:5f:1c:d5:4c:20:72:28:f8:48:
                    25:20:6d:78:54:50:91:77:81:d1:50:21:74:61:a8:
                    b6:e7:7d:34:e8:4c:9c:c8:cb:08:ee:fa:c5:2b:d0:
                    b0:4a:d1:0d:22:0c:71:ce:3b:e3:21:02:98:0e:c5:
                    f6:e8:61:8b:20:a7:a5:85:9d:12:5a:e9:4c:d8:d3:
                    8d:65:6c:9c:bd:0e:ea:bc:af:c0:87:0f:11:d3:20:
                    1a:99:52:bb:d3:9d:80:24:f4:96:c0:2c:7f:34:82:
                    99:a6:9c:46:6f:98:cb:5b:8b:a6:00:40:06:fe:f2:
                    05:d9:e1:50:ff:d8:8f:8d:fd:dc:5f:35:90:8b:c0:
                    da:47:0a:f2:99:97:f3:3b:41:2b:d9:1e:33:f1:2c:
                    cf:66:32:87:b9:91:73:e7:35:e8:2a:81:28:52:c2:
                    f2:f9:b9:1b:b4:59:fd:84:26:88:53:77:87:2f:cc:
                    07:ca:f5:b3:93:85:66:40:38:61:6c:a6:52:20:20:
                    7e:d1:83:b6:18:b8:ed:73:7f:26:b0:3e:4b:3e:ba:
                    86:9a:45:0d:a7:45:97:86:e0:98:cf:b3:a9:86:4f:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.96.0/22
                IPv6:
                  2803:b6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265659

    Signature Algorithm: sha256WithRSAEncryption
         29:68:f1:68:09:a0:82:50:56:6f:b4:0e:2d:35:39:4f:86:d7:
         a8:49:24:2b:6d:33:66:3f:46:43:cc:1a:8d:66:a6:3c:fe:38:
         e3:b2:1f:a1:6f:74:1f:8b:96:5d:e6:7d:2f:75:d9:f1:f0:0b:
         07:ef:28:2b:df:e7:f9:79:c0:ce:fc:04:d9:ea:b8:63:8e:b9:
         b6:b4:7e:47:a0:71:d3:31:42:95:ee:aa:69:ee:d9:21:8b:7f:
         85:49:37:97:8c:bc:3c:72:16:b8:8b:54:2f:01:df:76:16:7d:
         c1:a6:36:83:9d:cb:de:41:9d:23:8a:70:3f:ba:67:a2:04:a9:
         4f:87:70:5f:27:72:ef:c2:8c:2b:92:f5:24:f8:7d:41:d3:5c:
         d3:48:f6:29:44:53:b3:cf:2d:5d:c3:1a:03:7f:7a:a1:28:03:
         b7:64:a0:0c:6e:a9:0b:93:75:0a:fb:d7:64:7b:b9:63:cb:ff:
         25:19:11:23:80:11:d4:61:7d:68:48:05:7d:99:56:12:1f:5e:
         53:e9:5f:af:9b:db:09:1d:d5:0e:f4:9b:c7:3e:ea:7e:19:54:
         9e:ae:6a:54:32:da:d1:51:82:8c:2c:fc:93:90:bf:d8:ad:4a:
         c1:83:40:a3:fe:e2:3f:19:2b:58:ac:12:9d:04:74:8d:26:d9:
         f2:5e:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----