Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2517095121faa6073add3a9666dceab830ea578a.cer
File:                     2517095121faa6073add3a9666dceab830ea578a.cer (raw, json)
Hash identifier:          UPfcZbqlLBi26N4mjG4BVwz1VgrQ42KEGBg455yQPug=
Subject key identifier:   D6:DF:0D:11:12:00:67:B8:13:4A:88:38:E0:74:B2:29:29:50:28:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBC41D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a60ec23-aea9-4ecb-bb92-b948e2bb03a6/2517095121faa6073add3a9666dceab830ea578a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a60ec23-aea9-4ecb-bb92-b948e2bb03a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:21 +0000
Certificate not after:    Sat 10 Feb 2024 20:11:35 +0000
Subordinate resources:    AS: 52384
                          IP: 186.5.224.0/22
                          IP: 2803:d400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14402589 (0xdbc41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:21 2017 GMT
            Not After : Feb 10 20:11:35 2024 GMT
        Subject: CN=2517095121faa6073add3a9666dceab830ea578a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:fe:f4:3a:2a:8f:cf:42:d7:1b:c7:b9:e4:
                    f5:3e:25:04:97:87:ae:87:39:06:32:05:d2:8b:ab:
                    f0:fb:40:e2:59:b6:6a:e2:a0:8e:47:0d:57:89:6c:
                    1a:fe:26:10:38:95:83:ff:c8:d4:aa:74:9d:7c:93:
                    73:c8:dc:06:7a:97:d3:ad:b9:07:43:dc:34:b4:b3:
                    64:44:85:39:36:bb:71:31:cd:7e:1d:f2:25:e3:b1:
                    d2:36:f3:24:3d:a0:22:86:6f:39:f3:b4:80:f3:98:
                    89:ad:88:9a:6b:3b:92:d0:08:55:2a:a1:41:12:35:
                    c1:1e:7e:22:87:92:0b:05:8f:ef:29:41:80:50:3b:
                    2f:c1:68:73:4c:18:04:48:27:d7:e4:c4:36:11:7a:
                    60:3d:bd:7b:44:96:62:60:8f:9a:9f:23:04:8f:2d:
                    62:e9:80:ea:96:bc:bc:47:74:2c:3a:34:e5:25:73:
                    b9:f7:d2:92:d8:49:d5:1e:5f:a5:fb:96:32:f3:16:
                    9f:ab:01:88:8d:ed:31:02:6c:ab:71:55:fe:30:40:
                    82:c4:18:7c:64:75:a0:cb:24:af:44:a4:60:ac:b8:
                    5d:5a:e3:5a:b3:02:96:4a:79:4e:fa:45:18:ff:15:
                    71:3e:39:6c:fc:53:87:72:b0:08:a0:1b:f7:f1:bb:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:0D:11:12:00:67:B8:13:4A:88:38:E0:74:B2:29:29:50:28:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a60ec23-aea9-4ecb-bb92-b948e2bb03a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a60ec23-aea9-4ecb-bb92-b948e2bb03a6/2517095121faa6073add3a9666dceab830ea578a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.224.0/22
                IPv6:
                  2803:d400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52384

    Signature Algorithm: sha256WithRSAEncryption
         00:be:b1:a1:79:74:a9:cd:4d:3a:0d:61:e9:dd:34:52:6a:47:
         41:cb:19:00:39:fe:f3:d4:ed:8a:a5:d2:2b:a3:d7:8f:1e:86:
         cc:9a:59:25:8c:b4:58:15:77:04:01:64:8a:9f:3f:e0:74:4d:
         8e:d9:d5:da:60:80:94:8e:7e:7f:d7:63:64:2f:37:e7:45:54:
         70:9f:53:ba:05:2e:c6:16:fc:ab:24:3e:1a:a8:de:5c:71:50:
         e2:a2:83:4f:05:dd:62:1a:0f:51:2c:ae:90:92:30:42:9e:0c:
         af:88:8a:e4:47:66:4b:8d:1b:0c:81:5a:48:0f:9e:37:1e:dc:
         76:76:68:13:6c:73:27:3d:b7:29:b4:6d:09:6e:a0:90:13:14:
         dd:c5:b3:02:d1:df:c1:ee:79:2a:e0:ff:15:39:a7:3c:cf:23:
         49:66:82:39:5d:0f:8b:5e:e0:08:a9:82:04:15:93:6a:7b:9b:
         f6:9f:14:c8:c8:3c:bb:7c:3d:2f:7e:f6:b6:09:6a:c2:29:5d:
         7b:2b:1b:e6:23:9d:93:69:24:d7:9f:92:2e:03:40:f3:0c:7f:
         66:ac:f1:47:51:ca:b0:c1:b2:1c:16:24:a4:c1:0d:ec:36:35:
         9e:d5:13:8c:10:71:0c:b6:4e:28:c2:be:af:2d:f2:6a:54:78:
         be:ce:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----