Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
File:                     138405134343f63286b605fe9165839fd04a4252.cer (raw, json)
Hash identifier:          FnCmOSQIoRkQo40yH1Ks6dswyMbdrXRffVbK7HkhgdA=
Subject key identifier:   13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC9A7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:18 +0000
Certificate not after:    Tue 20 Feb 2024 15:00:00 +0000
Subordinate resources:    AS: 27820
                          IP: 192.188.50.0/24
                          IP: 200.0.28.0/22
                          IP: 2800:130::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14457467 (0xdc9a7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:18 2017 GMT
            Not After : Feb 20 15:00:00 2024 GMT
        Subject: CN=138405134343f63286b605fe9165839fd04a4252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:fa:ab:73:bd:d4:1c:8b:1d:41:0e:d0:8f:
                    47:08:18:3a:82:ce:9c:86:d4:e5:db:03:50:c0:eb:
                    d4:06:9e:49:d1:74:33:09:8d:10:ef:38:6e:d1:8c:
                    97:97:db:4b:ae:cd:dd:61:0f:c8:12:53:99:84:cf:
                    91:08:76:ed:d5:40:23:79:6f:ed:94:1c:7e:91:62:
                    f4:6b:82:99:c2:5d:4d:6f:36:a6:94:87:b6:90:aa:
                    83:dd:c2:19:9e:c1:d2:ed:54:cf:19:a6:20:ff:e1:
                    5b:55:f2:6b:ce:0a:1c:0a:c2:85:f4:a8:b3:8b:36:
                    d9:af:0b:af:46:0b:b8:aa:cc:40:9f:73:20:43:9c:
                    60:bc:b6:c7:62:8e:cc:4d:6f:e3:72:15:25:55:d7:
                    c2:33:6e:c2:1f:70:02:17:f6:54:89:58:ce:ca:b6:
                    66:08:d1:6b:f3:09:91:48:8d:9d:6c:42:77:a4:20:
                    98:d2:97:3a:e1:49:12:36:07:90:6d:73:c1:39:d7:
                    a2:c9:77:b2:23:23:be:72:cd:95:84:16:1b:72:d8:
                    f6:5b:45:03:83:a4:4e:25:64:b2:c9:a9:bb:d3:db:
                    d0:8d:f9:6a:2d:e1:fd:87:98:68:8e:64:83:d0:8c:
                    1a:f0:97:47:1d:7e:5a:c9:37:6b:ef:1d:1a:6f:e5:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24
                  200.0.28.0/22
                IPv6:
                  2800:130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27820

    Signature Algorithm: sha256WithRSAEncryption
         71:41:97:b7:55:b3:83:2a:80:ee:4b:e4:b9:73:92:f3:20:89:
         e6:00:82:3d:54:2c:b4:e4:d9:e3:5a:c8:53:e2:a3:12:f4:8e:
         0f:6d:b8:95:dd:01:7d:2d:e4:59:4f:60:49:89:84:a6:39:05:
         94:4a:90:64:c6:4d:12:71:cc:ac:cf:63:d3:7f:fc:11:25:b6:
         58:11:a8:90:6e:8d:14:ee:c0:8f:b6:b9:39:22:94:f2:4c:0c:
         6b:7c:8a:e3:8c:bf:28:2b:ce:52:26:ee:96:c6:1b:4e:28:3b:
         a3:d8:39:62:81:5c:39:b0:8b:9e:60:03:bf:8e:36:56:11:17:
         3a:f4:e9:49:69:d3:c9:6d:96:9c:e0:ce:94:6f:27:09:0d:6b:
         8b:ac:cc:35:40:52:08:36:f5:ea:66:32:62:99:02:dd:e4:ab:
         c2:00:c3:b9:4c:8f:4c:7a:ff:5b:04:a5:fd:74:15:e7:3a:ff:
         f4:56:e8:0e:42:79:c2:c5:c9:5c:6d:74:cf:67:90:88:dd:1c:
         89:91:ca:0b:96:dd:fa:c0:a5:32:fe:c2:b4:0d:39:20:80:8f:
         dc:54:fe:9b:60:90:76:ef:cf:02:11:1c:37:57:76:0e:1d:d2:
         bd:ef:16:b1:dd:37:fb:6e:79:d8:90:17:c5:41:65:2e:6a:06:
         00:82:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----