Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c324b9f3696db0b05fc93d5f4753d83e5fd9a52.cer
File:                     0c324b9f3696db0b05fc93d5f4753d83e5fd9a52.cer (raw, json)
Hash identifier:          decyBLmAGDY4/NuCcYSvWAWLvpP/I0WKmMmtBprpp5w=
Subject key identifier:   73:2D:F5:D6:B6:AD:B2:B2:A1:7A:67:61:46:A5:F0:FC:FB:A4:12:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB05C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/882ae3a6-7eb1-438b-a209-8325beb00895/0c324b9f3696db0b05fc93d5f4753d83e5fd9a52.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/882ae3a6-7eb1-438b-a209-8325beb00895/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:27 +0000
Certificate not after:    Wed 31 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 262935
                          IP: 161.0.64.0/22
                          IP: 2803:680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14353861 (0xdb05c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:27 2017 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=0c324b9f3696db0b05fc93d5f4753d83e5fd9a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:dc:50:5f:17:d6:44:ba:1e:db:a1:38:3f:
                    77:ec:fd:17:0e:48:cf:9e:31:e8:98:b4:bd:ab:9e:
                    3f:0b:08:b8:c8:54:30:d4:45:73:3e:38:aa:21:bd:
                    11:91:da:27:a0:68:81:84:52:45:c8:97:ef:4f:7d:
                    4d:45:14:89:42:ac:1f:e0:3d:0b:37:d1:98:15:5f:
                    89:4f:fd:f1:1e:b0:93:1c:26:fe:d7:d2:a9:0d:5e:
                    eb:49:46:36:08:73:b5:5a:5c:1e:18:44:2b:c0:19:
                    a7:ac:73:16:ec:07:df:cd:8c:ed:39:61:1f:9d:56:
                    e2:15:09:4f:58:86:ae:7c:26:83:11:f7:08:fa:5d:
                    b4:77:a7:13:bc:0e:24:01:86:87:a0:f2:5e:89:30:
                    ac:18:eb:e1:83:4f:e6:d4:11:26:11:81:c6:f6:aa:
                    7d:6e:87:e0:da:f3:48:36:9b:1e:d3:c8:cc:b5:99:
                    9a:df:0c:33:b6:8a:94:62:19:b8:60:d0:a1:97:cc:
                    4e:ca:6b:3b:da:f9:a1:48:89:e1:c9:49:4c:4e:6b:
                    ab:53:1e:83:c9:a2:08:62:a5:05:0e:98:8e:d8:3d:
                    08:bb:36:a2:ac:4b:fc:40:e1:a4:05:01:2d:2c:c6:
                    da:5d:26:a0:b8:0d:da:fc:cc:67:cf:23:95:49:33:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2D:F5:D6:B6:AD:B2:B2:A1:7A:67:61:46:A5:F0:FC:FB:A4:12:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/882ae3a6-7eb1-438b-a209-8325beb00895/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/882ae3a6-7eb1-438b-a209-8325beb00895/0c324b9f3696db0b05fc93d5f4753d83e5fd9a52.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.64.0/22
                IPv6:
                  2803:680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262935

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:d1:9d:28:6f:fb:18:6c:23:a2:bc:0e:3f:99:a3:6a:d0:
         52:27:2c:a2:f3:a7:c2:bf:d6:32:f8:fa:16:c8:5a:43:ef:68:
         fe:b9:86:62:48:ba:2f:cb:bc:d6:a7:f4:20:97:29:1a:b6:6e:
         6f:d6:d8:cf:a2:39:ad:c9:43:47:48:05:8c:99:3f:44:99:01:
         c6:fc:6b:f0:9e:d7:87:95:b4:b4:e5:63:17:37:22:15:b9:c4:
         da:57:9c:9b:db:12:8c:ec:a4:1d:66:83:05:0b:34:da:71:d7:
         bf:b6:d6:50:a5:ca:2d:46:fd:27:b3:42:a6:ed:f1:6b:42:54:
         7c:95:6b:23:83:89:b0:08:10:a6:c1:e2:54:b8:50:e2:ce:70:
         f4:a2:40:c6:49:c0:f8:56:c3:32:d8:f5:ab:ff:71:ed:82:36:
         fe:4d:d3:6e:3d:ae:c8:54:28:7f:06:3e:e6:e6:d5:8d:f1:c2:
         a9:9d:d0:a0:32:53:be:29:1c:b9:6d:c0:28:0e:5f:81:84:95:
         b5:2a:98:e8:c6:d5:53:a5:d7:25:07:3d:1f:ed:57:0e:c6:b8:
         b8:cf:ed:fb:84:d4:12:39:49:22:ce:e4:61:02:5d:fe:40:7e:
         ee:71:18:28:ed:63:67:59:46:14:53:0a:f9:36:8b:f7:82:7e:
         07:14:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----