Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/100cb7f51ba3d4bc601b39d5aedc436c843b106a.cer
File:                     100cb7f51ba3d4bc601b39d5aedc436c843b106a.cer (raw, json)
Hash identifier:          CcgYXWeDm8EFKkcxz6BErq8A7tN+3YPBKDjSYZCtVf4=
Subject key identifier:   5B:F3:E1:B6:AE:43:37:57:91:B7:DE:85:1D:CC:48:1B:58:C4:97:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE8ADB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/100cb7f51ba3d4bc601b39d5aedc436c843b106a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:06 +0000
Certificate not after:    Thu 14 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 27896
                          IP: 190.8.32.0/20
                          IP: 2803:a640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14584539 (0xde8adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:06 2017 GMT
            Not After : Mar 14 06:00:00 2024 GMT
        Subject: CN=100cb7f51ba3d4bc601b39d5aedc436c843b106a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d6:d9:e8:e0:ae:18:16:e7:6a:71:4f:f1:df:
                    b8:00:4d:27:fd:40:2f:11:c0:92:61:24:c6:8d:19:
                    2e:a0:e1:25:57:37:ea:1e:8b:47:3c:2c:ff:58:a4:
                    a5:e3:42:92:a4:75:3f:93:f6:77:11:33:98:be:94:
                    c1:7f:c2:75:ed:a5:8e:09:1c:3a:28:2f:b5:a5:ba:
                    0a:aa:47:ab:a9:2c:16:4f:bd:60:50:20:8d:f5:bd:
                    cd:ca:15:d3:c8:5a:c8:cb:a3:a7:b8:74:95:b7:49:
                    b7:2a:d3:42:c0:7b:2f:8c:52:a3:7b:8c:44:2f:02:
                    ad:dc:47:18:12:e2:e5:0c:86:91:80:c6:42:e8:25:
                    a1:05:d6:0a:4c:e4:69:5c:60:f6:8f:fa:83:ef:87:
                    43:9e:12:d2:58:fa:5f:78:79:2b:44:be:46:7e:ba:
                    9b:1b:e7:a2:1f:8c:8e:dc:6c:1e:1c:a9:96:23:de:
                    66:5b:a5:4a:c6:3b:8a:6e:86:d3:66:e8:a4:02:8d:
                    5d:b5:31:48:7a:6e:ef:8c:c8:d6:5d:70:17:a2:e4:
                    8f:78:86:80:52:88:92:5f:69:a5:8c:f1:e2:b7:e5:
                    54:d3:55:58:e4:92:5c:ef:90:ab:34:c6:02:0a:aa:
                    17:d5:1a:d4:ba:df:45:13:ed:12:37:40:8c:10:c7:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:E1:B6:AE:43:37:57:91:B7:DE:85:1D:CC:48:1B:58:C4:97:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/100cb7f51ba3d4bc601b39d5aedc436c843b106a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.32.0/20
                IPv6:
                  2803:a640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27896

    Signature Algorithm: sha256WithRSAEncryption
         47:62:71:7a:3f:b4:0c:65:b1:53:eb:a2:56:a2:1b:a9:22:75:
         2f:29:7d:aa:15:ea:7f:3c:e7:fd:1f:f8:fe:59:8d:9d:03:12:
         eb:e9:5d:44:33:c9:56:a4:22:60:b7:dd:b2:85:d2:66:b9:73:
         a5:eb:29:e7:b1:94:bb:47:2b:f1:22:a3:a2:66:32:68:c7:82:
         30:f6:46:ac:d0:7b:1f:13:ed:13:bb:d6:1f:08:e2:51:43:cd:
         76:d5:b9:f3:2d:b7:ce:65:e1:1e:ee:dd:62:3d:96:15:0d:65:
         26:7c:86:a9:fd:cb:cb:7f:24:30:43:d6:17:06:8a:9a:c8:af:
         b1:ca:07:93:c3:ba:5d:02:55:fa:da:dc:61:a1:59:6b:23:5c:
         dd:98:14:f4:3d:65:21:59:e2:37:76:eb:16:93:fd:9a:26:a6:
         e4:46:7a:f2:b8:41:94:87:89:04:f0:76:08:89:a5:24:9e:c5:
         81:df:79:81:ec:10:16:ae:b4:94:4d:76:af:0b:51:01:ef:61:
         b2:dc:46:85:dc:97:74:3e:fd:fa:22:7f:81:0e:3b:1e:60:83:
         9a:34:69:83:3d:be:d7:71:73:ff:6d:79:8f:98:ba:3f:0b:64:
         f7:47:d0:b1:93:4c:67:51:73:b7:4b:77:11:d1:d2:be:92:7f:
         6c:73:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----