Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer
File:                     eaec8ce2b33df137eb80bce3bc979b817d27173e.cer (raw, json)
Hash identifier:          s3+yS8qllKW/af2oKNB9U0eLoq4fIESBLgnulZA23R4=
Subject key identifier:   84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01020372
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/eaec8ce2b33df137eb80bce3bc979b817d27173e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Mon 23 Dec 2024 16:40:13 +0000
Subordinate resources:    AS: 263732
                          IP: 138.59.164.0/22
                          IP: 2803:af80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16909170 (0x1020372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Dec 23 16:40:13 2024 GMT
        Subject: CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:2d:35:d3:9a:1b:6a:e7:83:20:ff:f6:af:
                    5a:17:5c:d7:d9:cd:e4:64:e0:b9:5f:d2:1e:b0:80:
                    06:d0:f2:d8:52:56:ef:44:64:46:99:91:bc:59:c8:
                    a2:3e:4f:28:c0:a7:aa:a1:9e:34:de:11:bc:9c:2b:
                    19:16:16:26:58:cc:ee:28:4f:cf:35:30:35:16:e3:
                    72:3f:32:bd:f3:06:63:80:dd:66:bd:2a:f5:a4:3d:
                    36:bb:ef:c9:31:51:6d:4c:76:8b:aa:85:df:dd:f9:
                    f6:85:db:9c:47:24:65:98:ba:48:1c:0a:a0:3d:22:
                    cf:95:af:08:ed:72:f1:92:db:fb:a9:26:e4:5d:d9:
                    6b:76:76:2e:90:be:f4:ca:82:cc:c7:87:16:25:10:
                    ab:28:25:4a:27:67:ba:28:51:59:c4:e5:9d:9f:8d:
                    62:a0:07:25:86:18:4d:6b:d0:87:77:76:91:ee:1b:
                    ef:e5:32:47:fb:dd:c7:04:dd:08:8b:ea:8c:78:99:
                    f8:60:ec:b3:2e:56:8b:8c:7d:3a:50:bf:b0:a9:6e:
                    32:f9:bb:15:f8:1f:11:74:47:28:d8:ff:be:ad:f5:
                    6a:60:96:62:5b:fd:eb:9e:a2:7c:10:92:51:08:eb:
                    1c:ce:d9:89:08:1b:61:b3:e2:f0:46:41:6f:b6:01:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/eaec8ce2b33df137eb80bce3bc979b817d27173e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.164.0/22
                IPv6:
                  2803:af80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263732

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:bd:3e:53:83:17:05:7c:8d:33:43:e8:41:0f:2b:3f:ce:
         02:0b:d8:ef:94:9f:a2:61:1b:34:83:4b:57:1a:5d:2f:da:17:
         fb:ae:ad:8d:fb:8e:68:b3:61:99:ee:53:94:01:bc:26:04:e9:
         03:66:3e:83:47:ce:0a:b4:33:21:ee:5f:71:7e:83:de:0a:17:
         ba:88:ee:3f:e0:0d:b8:48:82:43:ef:8a:6d:ec:19:e7:70:60:
         8f:74:55:9b:b6:4f:5b:9a:a5:39:41:0c:7f:11:5b:f9:f7:88:
         80:fd:8a:24:4b:d7:24:67:86:7a:c5:ba:a9:91:b1:42:8e:23:
         75:25:9a:64:69:ca:89:99:6b:6f:20:84:34:57:3c:a0:14:db:
         89:f4:af:10:47:03:b3:46:a1:f6:63:85:0f:31:16:c4:b0:67:
         8e:82:91:7c:33:15:5d:d4:6c:9c:a6:bd:cc:8b:e2:a1:e0:6c:
         b6:e8:70:de:66:e3:28:8e:bb:90:e0:36:bb:67:59:2b:50:b7:
         d7:b3:80:91:8c:7e:29:e4:7c:d0:89:07:03:e6:63:20:54:f7:
         12:65:eb:c0:1e:4b:68:24:6d:85:d9:34:af:58:8b:70:93:dd:
         49:77:c2:83:1f:6e:6f:9e:cc:7d:b0:9c:e4:85:4f:22:3c:de:
         1a:73:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----