Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e.cer
File:                     1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e.cer (raw, json)
Hash identifier:          /M5kuYCJ5XC6K9O0g8Ex1L3agIxgWYGxIFnDdU+l4+E=
Subject key identifier:   D6:4E:26:8F:FF:30:F3:E3:DA:F8:48:06:71:CA:67:84:2D:99:21:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D0C57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:23 +0000
Certificate not after:    Sun 06 Apr 2025 17:07:16 +0000
Subordinate resources:    AS: 263686
                          IP: 131.161.52.0/22
                          IP: 138.59.176.0/22
                          IP: 179.63.252.0/22
                          IP: 2803:a700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17632343 (0x10d0c57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:23 2017 GMT
            Not After : Apr  6 17:07:16 2025 GMT
        Subject: CN=1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b3:7b:e6:eb:68:ab:ee:ec:d0:62:b5:e5:30:
                    02:8e:1f:50:55:af:2b:25:87:70:5a:66:a0:23:23:
                    43:a7:18:16:58:f7:80:c2:80:76:bc:72:5a:10:c4:
                    34:1c:68:7b:a1:e2:05:c9:e5:16:bd:b1:c6:b9:53:
                    06:e2:ca:d9:e4:40:51:d5:91:d9:52:32:d5:65:2e:
                    83:4d:22:41:7f:ea:37:91:8a:f8:6f:60:5f:e8:26:
                    f4:18:83:07:27:f7:43:67:38:f9:32:5b:37:9b:c9:
                    8b:e0:47:89:d0:c2:87:0f:fb:d8:9d:c8:8d:8c:ef:
                    05:82:f3:63:a3:7c:f9:f9:90:47:73:80:21:9f:06:
                    b4:04:ed:39:65:5f:1d:dd:e4:f9:13:91:38:86:7a:
                    ed:3c:07:24:96:cc:f1:bc:3e:2c:c8:f8:b4:61:dc:
                    81:6c:51:b5:40:fd:af:dc:a0:90:45:01:e7:e0:4d:
                    44:0c:9e:e1:07:f1:e9:33:80:5f:73:92:62:6b:92:
                    63:ae:f6:d3:cf:30:d0:c7:81:5c:df:1d:ac:94:06:
                    69:f4:6e:78:6c:eb:01:0c:0a:24:65:da:17:c7:a3:
                    bd:9d:8e:6b:31:d4:8d:0f:28:14:ad:7f:df:af:d8:
                    f3:6c:f6:ca:a5:07:02:35:08:f8:23:44:11:90:f9:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4E:26:8F:FF:30:F3:E3:DA:F8:48:06:71:CA:67:84:2D:99:21:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/1c33cd9619c7fbfcfdb2a30f4e85ebf5ad97dc5e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.52.0/22
                  138.59.176.0/22
                  179.63.252.0/22
                IPv6:
                  2803:a700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263686

    Signature Algorithm: sha256WithRSAEncryption
         be:f5:09:85:bb:cd:3f:74:f6:f9:3b:cd:95:bc:30:66:d1:ac:
         b4:02:93:a0:51:2f:fd:16:7c:f1:90:75:4a:b4:59:7b:52:39:
         c1:1c:64:ed:7d:66:cb:e0:55:11:09:92:33:d8:9e:03:d8:3d:
         79:e9:ff:a3:e2:fd:e1:93:06:04:b5:fd:d5:b8:cd:69:4b:32:
         73:15:87:4d:7f:f8:65:1c:c6:7f:f4:f4:af:c7:6c:d9:cf:d5:
         59:01:a8:04:c4:f6:e5:eb:7d:eb:95:84:36:9e:72:d5:74:0e:
         4e:46:88:80:d2:28:8a:a7:bc:f9:dd:73:ad:d6:b4:6c:e2:ac:
         30:69:67:74:68:16:8c:ca:36:2e:c4:7a:b7:a7:17:72:e7:cb:
         b6:f9:42:00:7f:4b:bd:1b:82:4c:43:6d:98:cf:c6:91:fe:ed:
         08:e5:db:40:24:71:32:06:18:5c:d5:e5:53:db:88:b0:0e:26:
         68:cf:70:17:b1:3c:ab:bc:58:93:16:8b:3d:fd:50:14:e1:ad:
         49:d5:aa:c6:5a:3f:e8:19:03:4f:e4:d3:96:b7:b7:59:68:02:
         ab:f5:21:55:2a:9e:98:6b:40:92:9f:dd:6d:c1:9e:0b:cd:8d:
         15:b5:b7:1f:11:bd:87:8d:df:50:d3:0e:6b:2b:a9:4d:df:72:
         e7:a6:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----