Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c7aa2461fd621e3fbf1d5f744eb5dadd577d684.cer
File:                     1c7aa2461fd621e3fbf1d5f744eb5dadd577d684.cer (raw, json)
Hash identifier:          3w+7lb4dgDcsfLN7hkLzLbTxK7IV0Hpryqym32gh3UA=
Subject key identifier:   26:7A:70:F8:D7:68:13:CB:9D:5F:F4:03:09:4D:E2:91:55:78:4E:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CE3B43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/1c7aa2461fd621e3fbf1d5f744eb5dadd577d684.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Sun 27 Aug 2023 06:00:00 +0000
Subordinate resources:    AS: 27868
                          IP: 190.123.0.0/23
                          IP: 190.123.14.0/24
                          IP: 200.110.232.0/21
                          IP: 2803:b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13515587 (0xce3b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Aug 27 06:00:00 2023 GMT
        Subject: CN=1c7aa2461fd621e3fbf1d5f744eb5dadd577d684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:31:81:b0:b3:4e:d5:d1:ea:f3:1e:f0:ad:
                    5c:d9:27:81:8b:59:dc:65:db:7b:7a:4f:96:64:3c:
                    3f:73:95:03:87:c5:fd:30:0b:2a:5d:7e:ca:7e:60:
                    93:fa:63:b2:99:be:6f:33:59:e8:d9:ef:fe:c0:f9:
                    58:8f:e4:7c:a9:bd:bc:66:21:70:5c:54:20:68:de:
                    29:20:f7:64:e2:87:c2:38:85:ac:44:78:85:f7:4d:
                    1e:cb:b1:d9:32:a8:c6:4a:9d:2f:44:19:9f:e3:ac:
                    bd:c4:d1:e4:45:dc:4b:46:55:52:d0:db:06:c7:b5:
                    c5:b1:6f:3c:a5:c2:45:70:f4:62:c4:c1:38:3a:54:
                    9d:1c:dd:28:b9:fa:29:d2:26:95:1d:c9:7d:0a:ba:
                    e6:2e:74:52:b8:fd:61:ac:86:8b:88:13:37:53:c4:
                    65:bb:0e:1b:87:4c:f4:3d:49:9a:8d:e0:0f:69:1c:
                    cd:da:49:d6:3c:75:e8:fe:33:54:b5:cb:d6:ae:24:
                    e6:51:fc:54:f2:85:17:e2:a3:2c:7d:c0:13:a7:bb:
                    c4:fb:8a:29:72:ab:5f:23:1b:68:8e:26:eb:b6:ae:
                    f3:55:30:7b:89:3b:14:34:3d:61:62:67:86:ea:a2:
                    0f:83:33:29:55:62:90:6f:a8:86:d6:47:c7:7a:92:
                    4c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:70:F8:D7:68:13:CB:9D:5F:F4:03:09:4D:E2:91:55:78:4E:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/1c7aa2461fd621e3fbf1d5f744eb5dadd577d684.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.0.0/23
                  190.123.14.0/24
                  200.110.232.0/21
                IPv6:
                  2803:b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27868

    Signature Algorithm: sha256WithRSAEncryption
         30:6c:f2:bd:af:b5:65:ac:06:99:9c:ad:13:be:a5:12:76:26:
         5f:42:c3:8a:45:74:e6:31:55:fe:43:2f:2d:46:f0:b4:59:7f:
         52:19:84:14:62:66:b2:a8:6d:00:bd:a9:45:ee:0b:de:80:a4:
         46:46:01:00:ae:ea:8c:e8:95:8a:cf:38:11:ac:c6:63:8d:8b:
         2e:02:3a:93:a9:09:96:6d:d6:9a:00:a2:d6:60:0f:2f:89:78:
         cb:81:fb:88:e0:76:c8:c5:16:d5:bd:e9:03:68:65:0f:25:a6:
         41:5b:c0:95:ae:d8:8d:4f:fb:1d:44:86:51:71:45:7e:0f:3d:
         98:36:04:f3:dc:00:2a:fd:40:46:a1:ef:59:14:a0:ca:40:e4:
         da:3a:e7:41:18:04:11:af:20:6b:f2:77:12:0d:1e:1e:0a:b2:
         93:5d:74:54:98:1e:49:0f:f3:24:2f:1b:55:8c:44:20:a5:f1:
         4d:2a:fc:7b:0c:9a:af:4f:f8:6e:10:66:6b:be:4e:7e:c0:f4:
         d9:e1:56:d4:58:6c:39:e6:83:2a:5d:0e:0a:e4:28:75:c6:1d:
         b8:3c:c6:d6:08:11:31:75:71:39:5f:ef:18:c9:f9:ed:0b:db:
         43:52:00:49:bc:60:bd:0d:70:d5:67:50:86:b2:c8:78:cc:1c:
         e3:0b:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----