Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2405c3da8e57043485597aab583bd992bc059347.cer
File:                     2405c3da8e57043485597aab583bd992bc059347.cer (raw, json)
Hash identifier:          MXezJhAH1Lr/LWAY+Vezh9Xjqn81OjKxjdLB+hOb0Zs=
Subject key identifier:   D1:FD:5B:00:A9:09:7C:57:72:22:0F:46:97:6B:18:45:E3:DB:8D:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D898DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/2405c3da8e57043485597aab583bd992bc059347.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:34 +0000
Certificate not after:    Mon 01 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 266686
                          IP: 190.122.176.0/22
                          IP: 2803:9d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14194907 (0xd898db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:34 2017 GMT
            Not After : Jan  1 05:00:00 2024 GMT
        Subject: CN=2405c3da8e57043485597aab583bd992bc059347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:6c:e2:38:fd:51:7a:3f:3e:79:e0:45:8c:
                    f5:ff:4c:7f:62:5f:13:ed:34:8d:df:64:4a:66:4e:
                    9f:52:a2:4f:5c:df:e8:88:39:a8:d8:72:b6:95:82:
                    13:32:77:41:8c:b3:0d:5b:c0:1b:b2:91:e9:d4:4b:
                    ae:06:e2:17:13:5c:db:0b:c8:8b:23:40:bd:76:f8:
                    b1:de:94:3f:7a:f4:c8:d3:bc:3c:08:2b:49:7f:5e:
                    8c:d2:d2:d9:db:4c:ae:97:4b:78:41:59:f8:82:40:
                    54:e8:b2:ab:05:08:1e:c8:d2:1e:aa:1f:89:21:62:
                    f5:b3:db:26:95:fd:fa:ec:b9:0a:b7:37:47:83:cd:
                    ba:46:0f:b1:6d:af:a2:51:54:2d:79:5a:c2:80:24:
                    54:1e:59:dc:c2:13:1d:4a:36:01:0b:6f:67:6a:b7:
                    2d:c5:69:dc:67:d6:94:34:73:23:bb:a0:93:a1:7d:
                    25:f1:0a:91:f6:a7:d3:00:71:ec:08:b7:1b:05:3c:
                    6f:ca:b6:03:d2:c1:92:33:cc:34:91:17:51:42:8e:
                    35:ab:e7:ee:f0:f2:7f:95:cd:1a:cf:c6:53:80:bb:
                    eb:d5:46:7d:18:9d:64:40:42:39:7f:ef:8d:e4:de:
                    0d:ec:78:26:04:e5:94:44:d6:b9:6d:49:5d:30:bb:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:5B:00:A9:09:7C:57:72:22:0F:46:97:6B:18:45:E3:DB:8D:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/2405c3da8e57043485597aab583bd992bc059347.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.176.0/22
                IPv6:
                  2803:9d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266686

    Signature Algorithm: sha256WithRSAEncryption
         c4:ef:98:6a:47:25:c8:41:61:98:53:6f:09:57:3e:50:74:13:
         1a:09:9e:39:1c:06:55:c8:64:dc:f2:0e:2e:74:34:43:b5:3e:
         d5:65:89:bc:f8:74:d3:4e:26:af:94:a3:b3:86:e9:71:e2:cf:
         c5:20:0f:1e:46:16:6a:a3:8d:68:3f:5d:05:a7:11:a2:36:46:
         11:61:03:54:ac:60:87:a8:15:32:37:36:8f:2a:f0:88:cb:12:
         2a:89:04:88:fa:e1:93:f3:6b:8a:48:ee:b8:3c:b9:75:5f:6b:
         b1:5f:93:5e:39:c9:22:23:23:46:53:6e:a8:f4:3a:88:89:46:
         5c:c4:77:18:91:e8:ba:20:7b:92:79:bb:e4:03:fa:d5:95:07:
         ad:d6:5e:45:63:62:90:fc:d3:1e:f9:e7:ba:13:5c:9d:6a:03:
         27:a8:a0:e3:a2:00:97:b7:7c:7f:05:85:04:88:d3:b8:a7:2f:
         3a:27:15:45:8d:7e:61:05:2e:74:da:ac:dd:73:11:a5:6c:96:
         00:4a:27:ef:6c:62:df:d0:20:87:b2:b8:e0:ec:f7:64:f6:00:
         8d:63:35:69:1f:04:a0:27:18:f3:62:c5:1f:93:cc:1c:92:2a:
         e8:ea:4f:76:a4:aa:3f:61:16:20:6d:d9:6c:24:ae:2e:cf:df:
         3d:65:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----