Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
File:                     076e25208e9086c7775f52e507d559615ec76616.cer (raw, json)
Hash identifier:          V1uqK6azJWWZo75OlXOXZ4Q+NAArLae524HcdIE6gdM=
Subject key identifier:   6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECFC17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Sun 07 Jul 2024 22:31:31 +0000
Subordinate resources:    IP: 143.0.108.0/22
                          IP: 2803:2640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15531031 (0xecfc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : Jul  7 22:31:31 2024 GMT
        Subject: CN=076e25208e9086c7775f52e507d559615ec76616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:01:c3:d0:5c:d9:5d:a6:ba:6b:3c:45:29:
                    e1:5a:c7:6b:db:4b:72:a7:58:4a:8d:56:3c:8d:7d:
                    eb:07:db:9c:3c:fb:80:d5:af:2f:c3:f8:6e:ea:7d:
                    d9:9f:7d:a8:cd:23:c1:47:84:fe:75:b7:f7:0c:d0:
                    be:de:74:e2:9c:9f:e8:cb:b0:92:ea:f0:ee:4a:33:
                    2a:a9:0e:a9:da:f6:4a:67:18:8d:d1:5f:b7:d1:67:
                    d1:e7:f3:2d:84:86:1d:73:05:c2:0f:38:7e:a0:fe:
                    b7:4a:dc:98:1c:80:22:b7:01:3e:bd:c1:93:e5:9b:
                    29:67:65:ba:3a:23:b1:4c:84:0b:17:ef:ea:60:f6:
                    40:78:97:ea:4d:43:0e:8b:c1:f0:c0:8c:d3:cb:58:
                    e0:83:89:68:08:03:65:43:a3:a0:9d:13:0a:54:4a:
                    18:90:08:2f:c2:76:7c:51:7c:61:54:7a:c5:38:7d:
                    3b:9a:5a:49:22:02:db:eb:47:2b:2e:91:32:fc:71:
                    3f:ec:c7:36:85:18:10:7e:0b:48:19:f2:ad:17:52:
                    82:07:ad:45:93:3f:e1:51:6f:2f:05:f6:fe:0b:73:
                    f8:0f:65:56:fb:f2:ab:0a:4f:33:b9:ad:57:e0:86:
                    5d:b8:6c:0d:ce:f7:7f:6c:1d:bc:f7:41:e4:d3:45:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.108.0/22
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:df:a3:7c:20:dd:68:05:12:b9:0a:ff:d7:02:78:1f:12:
         f6:72:5e:ef:f8:e5:69:34:7a:72:26:f9:51:41:34:3d:ca:91:
         76:41:1f:dc:bf:55:40:21:e6:18:76:48:b4:01:1b:be:36:01:
         0f:b8:8a:ab:b3:1d:0e:ea:af:c5:c3:ae:d8:d1:46:6b:1e:de:
         1e:b2:53:b6:88:78:03:30:17:a0:ae:60:f0:47:4d:95:22:52:
         54:22:b6:73:24:f9:8e:34:04:62:88:02:81:47:f4:90:5c:1e:
         b9:cf:db:16:cd:24:fc:0f:3b:6c:76:3f:c3:8b:48:2a:7a:fa:
         79:08:9a:21:22:74:92:a8:21:58:94:da:32:de:6c:6c:24:73:
         81:b2:c8:49:a4:30:06:47:9f:14:45:d2:0a:e9:17:6c:3b:92:
         0b:d1:6f:f4:01:36:e5:6b:12:d8:69:22:95:b6:bf:f2:8c:27:
         be:54:92:68:93:96:f1:d1:1f:73:1c:ab:6c:44:b8:86:41:6d:
         50:0f:c3:60:be:b5:8a:e8:c8:84:b1:43:d4:20:7e:92:f8:c9:
         9e:c1:b9:10:d0:54:d6:4a:18:2c:4c:d3:28:3b:3b:b3:64:55:
         34:be:33:b2:7c:d6:44:f3:fc:f6:dd:f6:b2:18:00:89:f4:82:
         24:0c:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----