Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/070040b1836f3353fb7f260224621c2deb277eb0.cer
File:                     070040b1836f3353fb7f260224621c2deb277eb0.cer (raw, json)
Hash identifier:          9i0suRxMewQRgbehb8Uk82VAOHZqxzqhNu3otUTWsQ0=
Subject key identifier:   23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0AA8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/070040b1836f3353fb7f260224621c2deb277eb0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:17 +0000
Certificate not after:    Sun 04 Aug 2024 18:43:20 +0000
Subordinate resources:    AS: 266672
                          IP: 45.71.0.0/22
                          IP: 2803:3c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15772300 (0xf0aa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:17 2017 GMT
            Not After : Aug  4 18:43:20 2024 GMT
        Subject: CN=070040b1836f3353fb7f260224621c2deb277eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:6c:69:22:2a:02:ad:d1:ff:7c:bc:e4:31:
                    12:c7:bb:bb:9e:b0:9a:f8:c4:58:cb:5e:13:e1:4b:
                    22:4d:60:d2:c1:32:70:62:53:d2:e2:9f:90:bc:92:
                    81:46:3e:87:ab:55:24:ef:74:60:4c:13:4e:39:6a:
                    a9:18:d9:b9:73:72:27:a7:54:76:ee:c2:a9:66:b9:
                    0e:46:93:61:c5:8a:5f:b6:f7:a6:ec:53:3b:07:07:
                    69:ae:81:9c:b5:2e:15:1b:f5:4f:5d:1a:04:3b:f8:
                    05:6a:86:55:51:b8:8c:2a:73:5f:d3:59:60:83:0c:
                    f0:55:13:25:30:3f:c3:d0:90:27:05:f8:40:29:bd:
                    d4:ed:8d:d6:a3:45:b5:85:48:68:48:7d:af:c8:b1:
                    9b:55:79:1f:d0:61:2f:10:44:c9:60:53:68:08:7f:
                    b0:c4:1c:19:78:ab:c5:c1:fd:12:59:a7:a3:33:63:
                    3a:f9:0f:a6:36:c9:f0:8b:e4:34:b0:cc:3c:44:3c:
                    8f:62:d9:c9:7f:b8:78:ae:43:14:eb:b8:d7:c5:b2:
                    b9:64:90:26:53:a1:e2:80:62:da:c3:bb:54:44:e3:
                    92:85:8c:78:bd:62:ec:f5:ae:39:33:58:d9:25:8c:
                    19:30:5a:75:31:23:d8:48:2e:02:26:b2:ae:04:c9:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/070040b1836f3353fb7f260224621c2deb277eb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.0.0/22
                IPv6:
                  2803:3c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266672

    Signature Algorithm: sha256WithRSAEncryption
         7b:ee:c8:cb:fb:e6:3a:88:04:90:61:8d:76:16:19:f4:b3:c2:
         1c:db:29:72:d4:d8:ec:5f:16:f3:d2:31:37:e1:6a:9c:d8:8f:
         91:63:2d:f2:fa:6a:56:1c:19:10:17:9b:02:30:4f:2b:b2:82:
         6d:3d:68:61:5c:3a:d4:18:c0:db:4e:fc:33:1a:cd:75:6b:e4:
         01:f0:1b:4b:a6:a9:78:63:26:72:07:ad:72:c2:43:d8:d2:a7:
         63:02:01:ae:5b:02:1e:8b:d3:82:c6:3a:c6:47:40:33:1a:cf:
         69:4a:a3:72:b1:a8:0d:20:fb:4d:8f:84:72:b8:36:ba:0b:14:
         85:95:cd:74:9c:91:1d:65:25:01:0c:fd:9e:61:a8:06:75:64:
         47:20:ec:e6:67:88:84:82:c5:26:cf:40:22:e7:1f:3a:80:38:
         2e:c4:c4:9d:5b:68:d8:93:2c:3e:61:49:48:d7:dd:a6:e0:cd:
         37:22:33:83:d9:88:32:7c:e4:d1:5c:96:45:7e:70:2b:0e:37:
         fb:3c:5f:5b:57:0a:fb:e1:f4:89:52:5b:08:13:70:71:44:ea:
         97:23:7a:ab:c2:07:2d:5b:5a:d3:b2:2e:72:a4:4f:e5:34:39:
         39:d2:0e:50:19:60:ee:62:4d:46:3a:12:c4:63:62:82:ac:b6:
         e2:d2:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----