Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07167c10a73170e4f871f9b47b0a5fd8b4f0d32c.cer
File:                     07167c10a73170e4f871f9b47b0a5fd8b4f0d32c.cer (raw, json)
Hash identifier:          tJh6TQm25NqAH7SQWEfbYDlh/Wx1GuifGbbvUDVDBjw=
Subject key identifier:   07:71:47:F0:1F:6F:4A:0C:F5:DB:56:4A:B4:FB:E5:16:B5:09:E1:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F56568
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/71e50293-d771-4a91-9058-c67d2561a2ec/07167c10a73170e4f871f9b47b0a5fd8b4f0d32c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/71e50293-d771-4a91-9058-c67d2561a2ec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Sun 15 Sep 2024 17:51:00 +0000
Subordinate resources:    AS: 52290
                          IP: 190.105.164.0/22
                          IP: 190.184.192.0/22
                          IP: 2803:77c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16082280 (0xf56568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Sep 15 17:51:00 2024 GMT
        Subject: CN=07167c10a73170e4f871f9b47b0a5fd8b4f0d32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:5b:0b:dd:d3:71:58:d5:49:6a:71:3f:ca:
                    e1:15:cc:3b:71:34:13:8b:24:8c:c6:12:57:e9:ae:
                    b2:92:9f:34:fe:31:a2:8e:bd:74:9d:3f:2b:13:52:
                    db:5f:f4:11:fe:d3:20:51:a5:9a:37:ff:5d:6a:8a:
                    54:af:0c:a5:8b:48:c4:e0:33:7a:0f:ad:2c:ad:e2:
                    a5:b2:1a:d5:e6:fb:60:8f:1b:0f:14:1c:f0:b1:ca:
                    24:08:17:43:7d:db:cf:77:72:3e:72:19:84:93:e3:
                    5d:bf:cb:d6:b8:8d:42:90:13:d6:44:9d:80:a8:ce:
                    c6:91:27:4e:70:e5:12:79:b6:a6:bc:d8:5c:ec:2c:
                    c6:af:75:5b:aa:17:9c:46:72:7f:14:ca:a0:7d:46:
                    c2:dc:59:0e:b9:7a:9d:82:96:8e:92:ed:a1:1d:56:
                    7a:20:4e:9c:8d:9d:42:c3:63:e1:70:7e:0d:e4:ce:
                    dc:1f:01:e9:3b:56:9c:bb:54:9f:c1:1c:62:5a:7f:
                    cd:e2:93:80:c9:ac:5f:af:d0:19:07:33:e7:21:d9:
                    0f:cb:25:02:72:65:29:3f:30:5d:e0:bc:09:d2:fb:
                    3f:1f:85:bc:8f:6a:e2:db:c1:a5:51:9b:63:52:b5:
                    45:77:85:f4:1f:a1:85:87:42:21:67:37:35:7b:b6:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:47:F0:1F:6F:4A:0C:F5:DB:56:4A:B4:FB:E5:16:B5:09:E1:1C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/71e50293-d771-4a91-9058-c67d2561a2ec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/71e50293-d771-4a91-9058-c67d2561a2ec/07167c10a73170e4f871f9b47b0a5fd8b4f0d32c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.164.0/22
                  190.184.192.0/22
                IPv6:
                  2803:77c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52290

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:bb:dc:f1:73:1c:59:72:d1:be:b2:cc:0f:01:c8:f9:cd:
         0a:5e:c8:93:67:d5:7b:94:45:c6:c1:3f:b8:6b:15:24:13:45:
         5b:57:cd:9b:86:17:d7:b9:ef:f3:95:91:da:c4:76:71:2f:fa:
         1c:bc:35:00:e2:9b:4e:10:98:0f:a0:12:61:dc:e5:aa:5b:51:
         b6:38:2e:d5:c6:39:3a:f2:8a:d6:dd:27:07:57:4a:eb:16:9c:
         46:bb:95:18:8e:d4:0b:19:9d:1e:df:61:c9:5a:86:0c:c3:66:
         1d:71:42:41:f1:68:1c:ec:2b:12:0e:b3:e6:62:85:44:86:4c:
         a7:9d:67:36:a7:28:3d:81:1b:40:f2:4c:b0:b6:20:87:77:fc:
         c7:29:d0:80:be:fc:01:a5:88:f8:66:51:0a:f7:d1:37:24:41:
         fa:8d:5d:0f:1f:ea:27:78:c6:fa:c1:91:fe:b3:0b:99:e2:de:
         c7:23:76:46:6a:d7:f4:6f:44:87:84:4c:f7:a7:bc:01:09:08:
         1a:18:50:5d:d3:6d:b4:14:65:27:47:de:c4:22:da:6a:dc:92:
         f1:04:53:8f:68:4a:ca:8b:0e:77:c8:50:2a:90:4c:52:64:65:
         12:ff:c1:41:fa:80:28:4d:c3:7c:dc:05:d5:34:6d:f6:5d:76:
         b7:f8:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----