Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfa6701821350c8e5bac2d02b86108200c25196.cer
File:                     1dfa6701821350c8e5bac2d02b86108200c25196.cer (raw, json)
Hash identifier:          RQe6GaPRA6mzAdAiz4ta6/+B2D52xEFLxyjyTgfZ8m8=
Subject key identifier:   F5:00:DD:0F:14:C1:6E:45:53:02:9D:88:D0:10:58:52:95:D2:B6:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F34367
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/1dfa6701821350c8e5bac2d02b86108200c25196.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 May 2018 16:05:00 +0000
Certificate not after:    Thu 29 Aug 2024 16:30:16 +0000
Subordinate resources:    AS: 52417
                          IP: 201.221.127.0/24
                          IP: 2801:0:410::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15942503 (0xf34367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 16:05:00 2018 GMT
            Not After : Aug 29 16:30:16 2024 GMT
        Subject: CN=1dfa6701821350c8e5bac2d02b86108200c25196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:6c:fe:72:52:0c:14:58:ba:18:88:dc:84:
                    45:bb:8f:61:4b:84:ee:06:a2:7e:d4:17:e5:90:79:
                    ec:bf:0d:ce:30:41:55:11:e2:cb:aa:6d:b4:a0:c7:
                    50:dd:08:76:61:4d:de:45:b6:04:44:9f:25:95:84:
                    5a:59:e7:e2:76:95:bc:08:72:08:d1:62:db:32:f6:
                    0c:24:8b:d0:3c:ea:ba:85:52:50:51:65:a9:96:35:
                    20:0d:05:bc:96:cd:bf:1f:7e:45:67:9e:62:1d:8e:
                    da:62:58:2f:83:8d:2c:f9:84:e0:68:f5:10:6f:75:
                    49:54:77:22:28:0f:42:fd:5b:18:63:f8:9f:a0:19:
                    c5:f4:8c:e7:83:86:6a:b7:56:e2:09:2d:f2:af:d3:
                    58:98:5a:b9:71:12:a6:b3:d7:f6:a8:75:ab:bd:44:
                    35:42:91:91:c9:c2:ba:f4:6a:f7:60:d1:ce:33:db:
                    69:4c:3b:b2:32:12:a2:fa:76:ac:5a:a6:2b:48:90:
                    2d:ff:e6:e0:1e:e4:b9:c0:a1:b6:c7:5d:c5:57:38:
                    0d:21:1f:a7:ee:c3:48:41:3c:fe:15:47:2a:b5:3c:
                    8b:26:22:6b:c8:97:86:a6:2f:4a:8b:43:ce:8b:58:
                    24:b2:5a:13:f3:37:0c:13:89:45:9c:d5:b0:ba:9f:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:DD:0F:14:C1:6E:45:53:02:9D:88:D0:10:58:52:95:D2:B6:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/1dfa6701821350c8e5bac2d02b86108200c25196.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.127.0/24
                IPv6:
                  2801:0:410::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52417

    Signature Algorithm: sha256WithRSAEncryption
         3d:22:6c:89:8e:8a:ab:90:39:64:20:a3:6e:7a:83:37:06:1f:
         79:9a:f7:ca:92:5a:1a:00:28:da:c9:cd:70:09:75:1f:02:34:
         bf:63:d1:1b:b5:11:af:73:5e:45:4c:f8:ae:9f:8c:e3:f2:ca:
         59:0d:5b:fb:1d:48:90:06:94:0d:1e:d5:36:14:e6:55:46:d4:
         51:72:86:63:18:30:67:a9:71:88:d3:e4:3f:31:20:19:e4:cc:
         9f:f5:4a:4b:0d:72:d9:53:d3:a3:a7:91:a9:b5:3e:cd:82:72:
         63:50:d5:2e:25:18:ef:bf:b7:f2:10:27:4d:bf:f7:02:65:1f:
         27:42:30:db:3e:1d:a6:be:92:75:13:93:56:80:62:3b:b2:a1:
         51:ff:24:c7:56:11:fe:f3:88:43:31:f5:7a:52:ae:8a:9e:03:
         a4:18:08:b4:4b:19:84:88:da:e7:38:f9:b1:d6:70:29:e7:7a:
         dd:4a:40:c2:40:3a:ec:31:a5:c1:a7:50:45:cb:21:74:a9:68:
         ed:8e:a9:70:e1:d3:16:d9:7e:ea:ba:81:3f:50:fb:f6:30:aa:
         3c:87:39:d9:14:45:66:7c:c7:16:27:88:60:59:bc:a7:db:aa:
         9f:a5:ce:d4:13:8b:82:0b:15:79:e5:28:75:40:4e:fe:65:d3:
         b6:a9:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----