Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b4313984e00131c798f155a8a90f10275d4805b.cer
File:                     1b4313984e00131c798f155a8a90f10275d4805b.cer (raw, json)
Hash identifier:          MA2LcyH0qHJFEJ08BYDjwPzBPeMvTA4zdsg0akRxq0E=
Subject key identifier:   65:4B:75:43:D5:76:BC:26:24:4E:29:A6:AC:9B:67:79:80:74:F8:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100CDB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/1b4313984e00131c798f155a8a90f10275d4805b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:27 +0000
Certificate not after:    Tue 01 Apr 2025 18:45:52 +0000
Subordinate resources:    AS: 273129
                          IP: 45.7.240.0/22
                          IP: 2803:23c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16829881 (0x100cdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:27 2017 GMT
            Not After : Apr  1 18:45:52 2025 GMT
        Subject: CN=1b4313984e00131c798f155a8a90f10275d4805b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:97:b0:ff:da:2b:1f:f8:96:ed:0e:36:f5:b1:
                    d8:ba:c7:0c:de:0b:5b:e4:ac:b8:46:3b:b8:7d:cc:
                    e5:12:a2:80:73:34:13:5b:72:22:98:d0:78:d0:14:
                    f1:32:cb:38:62:f9:f2:58:ba:d4:6a:ef:44:ef:0d:
                    cd:1d:4e:8b:03:c6:0a:66:95:b1:a1:6d:cc:40:32:
                    d5:ef:4d:26:81:39:18:58:1b:3b:45:3b:30:e8:ee:
                    e4:3b:0d:d2:96:6b:78:b2:28:41:28:3f:ae:b9:e8:
                    bf:8d:04:b1:d4:36:1b:dc:16:df:8d:37:11:ac:d4:
                    44:7a:88:d0:18:6a:75:4a:9c:f5:76:a4:8f:12:12:
                    40:8f:2f:3c:e2:82:93:db:ab:07:d2:52:b1:65:89:
                    c8:a8:a4:db:03:31:1e:9f:03:8d:67:25:98:b3:5a:
                    ce:cf:59:59:1e:b7:d5:1b:29:96:ca:4d:f3:9b:89:
                    a8:a8:dd:04:75:c4:8c:fe:d1:d2:fb:20:2a:6c:d9:
                    93:02:1e:81:9e:12:20:dc:5e:4f:22:7f:c2:95:d3:
                    35:bb:24:55:da:56:a3:13:1e:14:5f:93:14:ec:2d:
                    4d:7d:cb:46:bb:a9:5e:53:e6:34:2e:13:85:b3:f6:
                    d6:be:e9:f8:6e:db:a0:63:f8:ce:f8:2e:c5:fe:ad:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:75:43:D5:76:BC:26:24:4E:29:A6:AC:9B:67:79:80:74:F8:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/1b4313984e00131c798f155a8a90f10275d4805b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.240.0/22
                IPv6:
                  2803:23c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273129

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:a7:2c:92:98:e1:4b:8b:b6:16:68:f3:5a:9b:d8:a4:1f:
         0c:e4:3f:22:1f:fd:97:c7:8f:a0:6b:b9:cb:5c:18:7b:90:81:
         bf:26:5b:4e:a2:6c:86:fd:ee:ef:87:8e:4b:10:13:c6:62:20:
         ca:d5:6e:75:ca:bc:f2:be:aa:14:3e:23:45:bc:11:c3:b3:68:
         f9:77:23:4d:0a:2b:28:1a:0f:42:a5:b3:87:f6:07:c5:92:00:
         89:2f:08:d9:ca:9d:d8:d2:bb:9e:e5:a3:bc:8f:d3:06:a9:2a:
         bb:49:58:55:29:6b:27:99:80:66:cf:cb:23:e1:ee:6a:21:d2:
         f4:c3:33:b3:fd:7c:41:4c:25:38:d3:8f:6e:53:39:55:e3:b0:
         c0:ff:88:89:20:30:fa:61:11:7e:e8:d0:f1:33:d1:94:57:59:
         fc:cf:f5:b5:1b:9c:39:39:ff:f1:ba:0e:5d:58:0a:ec:a6:11:
         97:33:df:5c:4e:ff:c7:b5:58:28:f1:4f:8d:34:0e:95:58:d7:
         ff:99:44:94:9f:84:24:73:15:92:83:0f:19:4d:02:dd:88:11:
         fb:62:67:f1:e8:2e:90:47:e0:40:76:54:3c:10:17:9f:53:42:
         f9:0d:b0:86:af:24:35:68:a8:2d:50:35:9f:5b:25:88:b1:22:
         f0:ca:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----