Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer
File:                     1076b178dfcc599f8de3d8db587bc6a97166efe6.cer (raw, json)
Hash identifier:          OGP2h2V44d2u+ooC7pKYrikOK7dhpXab/Zsw6qHlJko=
Subject key identifier:   62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEBC1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1076b178dfcc599f8de3d8db587bc6a97166efe6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Mon 22 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 262187
                          IP: 131.100.180.0/22
                          IP: 190.211.80.0 -- 190.211.91.255
                          IP: 2800:a30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15645725 (0xeebc1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Jul 22 06:00:00 2024 GMT
        Subject: CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:47:56:4f:d0:3b:00:9f:ad:56:c5:cb:ce:
                    db:0d:df:6e:7b:69:3b:c6:83:68:17:08:5d:22:a6:
                    d6:cd:b1:9f:59:a4:39:8d:8f:e3:11:e3:40:17:4f:
                    9a:65:80:72:0c:79:a8:8a:0d:3d:46:cf:c8:2b:e4:
                    23:2f:cb:38:59:62:e6:45:87:66:44:65:24:27:3a:
                    dc:8d:0f:84:86:3a:ea:5e:bf:89:a3:a3:d1:84:f9:
                    4f:0a:9c:5b:0d:22:52:08:29:67:97:cf:c6:de:dd:
                    76:6f:9f:01:6d:26:d0:e6:e6:6e:ee:d3:a9:50:28:
                    a8:d6:8d:06:1a:8a:a3:55:01:16:10:b3:86:ff:2b:
                    e5:8b:96:42:53:4b:bf:7e:ed:41:28:df:d9:ce:64:
                    ba:e2:15:ea:54:3e:b7:e6:88:e2:a4:40:ee:32:43:
                    74:de:e1:3d:b9:9e:b5:14:c7:f3:32:db:05:a2:ef:
                    fe:b3:0f:fd:d4:31:3d:f3:30:7a:37:34:07:cf:07:
                    23:7b:ee:6f:34:02:8d:8f:2b:a3:08:5c:3a:49:b4:
                    24:0d:24:ac:44:d1:54:d4:22:42:1a:c6:89:7d:cc:
                    36:10:f6:73:73:86:6b:37:2a:df:e0:9d:a3:35:ed:
                    77:36:1d:43:c0:a9:c8:83:bb:35:cd:60:88:ca:b5:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1076b178dfcc599f8de3d8db587bc6a97166efe6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.180.0/22
                  190.211.80.0-190.211.91.255
                IPv6:
                  2800:a30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262187

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:f2:98:e6:5e:c6:77:82:a1:4e:21:46:fb:75:63:e3:cd:
         92:a0:98:29:0f:de:42:d7:d8:ad:9a:2b:60:b2:88:ca:9c:11:
         7a:7f:24:fe:80:ed:55:f6:a9:da:e4:7e:80:24:d7:5e:b4:15:
         49:44:47:64:e1:1e:11:f0:bb:4d:68:10:45:3a:ff:f4:2b:7a:
         87:69:ca:ca:8a:b0:f0:b4:d6:e3:47:0f:87:24:71:aa:c9:0b:
         be:ce:86:5e:97:f9:fc:2d:2d:15:63:b5:ee:0d:2f:95:7c:6c:
         67:d6:35:37:fc:d4:d3:a9:91:8a:50:e9:d6:53:3f:7b:90:59:
         2b:76:38:e8:62:a5:fd:18:c1:25:29:e1:10:83:1d:d2:3c:64:
         c3:5c:f3:60:cd:44:b8:bf:55:71:b4:49:00:45:18:f3:a2:3e:
         e2:9e:fb:f2:f6:21:29:7f:54:17:33:99:e9:60:be:38:9b:f5:
         db:11:ea:f2:01:fe:f0:46:47:65:47:57:7a:19:f0:e7:86:1c:
         d5:ae:c3:15:7f:02:59:bc:c2:97:82:dc:ee:c0:71:d4:79:40:
         08:78:68:04:13:b1:e5:76:d4:1d:13:a1:e7:c6:3d:8f:ae:2f:
         49:57:bc:f9:89:3d:bd:fa:8b:0e:89:7a:80:ec:10:17:6a:bc:
         7c:58:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----