Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
File:                     14544d678d65a7bfc793373410f1c5964d13b336.cer (raw, json)
Hash identifier:          KXX2Z4/mQO94vMZkx20qTUZakYs6xWLNa5/ZIiR2G2I=
Subject key identifier:   4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F23020
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/14544d678d65a7bfc793373410f1c5964d13b336.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:32 +0000
Certificate not after:    Sun 18 Aug 2024 16:16:00 +0000
Subordinate resources:    AS: 262196
                          IP: 168.121.208.0/22
                          IP: 181.118.208.0/20
                          IP: 190.4.112.0/20
                          IP: 190.184.240.0/20
                          IP: 2800:ab0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15872032 (0xf23020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:32 2017 GMT
            Not After : Aug 18 16:16:00 2024 GMT
        Subject: CN=14544d678d65a7bfc793373410f1c5964d13b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:9c:59:38:c6:30:a4:b7:ea:ed:30:d0:17:
                    12:85:63:a3:1b:fe:ef:69:6c:7b:f6:4b:5b:55:83:
                    a7:a8:28:35:d5:0c:9f:9d:93:fd:44:86:a2:2a:90:
                    c8:9b:0b:0c:3c:63:81:a8:c5:f4:7f:e5:72:36:af:
                    53:fa:6e:92:2b:6d:1d:d4:57:64:d7:7d:2f:49:a2:
                    d8:67:28:b3:ff:83:af:d0:a9:0b:df:40:27:1c:67:
                    e3:f3:8c:c0:81:aa:ff:53:22:01:8d:92:33:b2:c6:
                    7b:09:9d:a2:52:8f:8d:bc:83:3a:9f:76:29:01:14:
                    2f:c7:e8:63:e0:74:00:c1:73:37:ed:b7:c3:07:ec:
                    91:9e:79:d6:be:02:3c:05:84:36:b0:66:b8:02:ef:
                    e4:ee:82:f7:69:b0:19:3c:03:c6:1d:35:1d:15:5c:
                    64:0d:38:4a:2b:7e:3a:fa:f0:67:58:09:db:a4:4b:
                    e9:c7:ab:70:00:c9:d4:a1:86:cb:94:72:97:ed:dc:
                    a2:8f:0f:f6:71:45:c5:04:9e:ab:ef:37:26:8e:d4:
                    a5:0d:42:a6:c4:62:96:a9:ec:f3:29:8a:0e:ec:0c:
                    7c:a1:8f:76:28:6d:e6:ab:31:98:67:d7:14:c2:c9:
                    3d:a1:0e:ac:d8:f6:61:31:37:b2:0a:69:08:02:2a:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/14544d678d65a7bfc793373410f1c5964d13b336.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.208.0/22
                  181.118.208.0/20
                  190.4.112.0/20
                  190.184.240.0/20
                IPv6:
                  2800:ab0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262196

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:49:69:33:bf:db:4b:4f:63:9f:49:50:3c:fb:1f:21:95:
         f0:e0:5d:ad:49:d2:c1:be:98:e4:03:98:a9:ec:f5:db:f6:d5:
         04:7d:e5:96:e3:49:43:7f:90:50:16:9a:e8:cd:e9:18:31:22:
         d5:b2:34:d3:19:40:0f:0b:4b:f3:5b:91:72:f9:3f:8c:8b:a6:
         a8:b2:c0:3f:4d:2f:d9:4c:bf:48:76:da:5f:f9:0c:34:2f:a1:
         37:d9:92:1a:5d:54:57:4f:47:6f:11:25:a3:0b:2c:3a:75:a1:
         c9:42:71:ff:34:ad:a9:f8:66:e6:a5:05:55:3c:e3:63:8c:34:
         db:74:f3:98:dd:f8:4c:aa:b8:c9:8e:a4:f3:e6:d9:a2:c3:40:
         02:d0:bc:64:be:60:fb:55:ca:d7:0a:2f:7c:27:eb:68:af:2e:
         50:ad:94:b0:c6:6a:61:cf:6c:a3:b9:9c:f6:8d:61:f2:4d:2a:
         53:14:a7:3b:42:b0:26:62:73:31:8b:3d:73:25:4b:e2:99:bd:
         72:47:4f:0a:5f:75:f0:b5:45:ad:cd:0e:fd:e7:e5:56:72:e0:
         c4:0b:62:d6:15:d0:a2:fc:d8:6e:72:0d:30:54:a1:4e:cd:b7:
         55:e7:88:87:72:7d:27:ba:bb:f0:e9:ba:c7:8d:4d:0b:36:75:
         f4:d5:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----