Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer
File:                     32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer (raw, json)
Hash identifier:          T7lfMzHmoeOaqJ4IMOiTbnS37DXcTiQeAzCgRIYxC0I=
Subject key identifier:   81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D96DE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Mar 2018 12:27:55 +0000
Certificate not after:    Fri 12 Jan 2024 18:38:20 +0000
Subordinate resources:    AS: 266753
                          IP: 45.232.96.0/22
                          IP: 2803:7b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14249446 (0xd96de6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 12:27:55 2018 GMT
            Not After : Jan 12 18:38:20 2024 GMT
        Subject: CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:b7:57:2c:8b:2d:c3:ef:92:7a:16:c4:d9:
                    a6:71:f9:51:09:78:51:5b:8f:c3:87:5f:23:6c:44:
                    13:c1:28:c8:b6:ff:20:d9:d0:e7:20:2a:c5:e9:e6:
                    27:17:1e:f1:4b:5e:78:d9:61:50:63:5f:c9:0c:de:
                    61:ea:76:7f:a7:05:01:b6:0a:68:dd:09:7f:ba:67:
                    b3:49:66:df:e5:b4:97:5c:e8:ae:51:4e:6a:b4:25:
                    10:83:ff:08:d8:0f:db:79:db:f3:92:9c:3e:19:3a:
                    86:c4:cb:af:a0:b8:8e:62:1b:51:39:7a:fc:8b:41:
                    e0:18:82:17:72:2a:84:02:c5:53:ee:91:73:2f:fc:
                    ad:58:69:c7:63:f7:9b:8b:b8:76:ae:d9:78:cf:fb:
                    f7:ea:88:66:e4:95:ae:03:21:5d:e6:6c:0d:b9:e5:
                    ac:e6:1a:4b:4d:30:81:cb:fb:19:91:42:2d:b5:06:
                    b8:c3:f6:c0:d4:3d:77:50:e1:3c:8b:11:94:69:3e:
                    37:8a:0c:a9:2d:5c:9c:aa:30:ad:bd:61:6a:c8:06:
                    83:38:a5:01:1e:7d:e7:c7:79:be:98:3b:07:4d:60:
                    e4:5a:23:4b:1c:17:43:1d:ec:ad:e6:6d:22:87:b0:
                    79:6e:03:fe:90:06:12:a9:36:b4:a9:84:ad:65:4b:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.96.0/22
                IPv6:
                  2803:7b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266753

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:18:f7:44:2e:e4:73:44:18:8a:90:56:08:00:38:be:98:
         03:b1:aa:75:97:18:94:0f:8a:1c:63:63:f7:6e:5d:a2:6b:e2:
         73:68:5a:4e:19:86:e1:35:93:f9:a2:b6:95:c7:31:12:67:65:
         ba:5e:2f:41:74:68:2c:8e:a1:ff:44:40:15:ef:6c:13:24:df:
         38:c6:83:a2:ba:23:9e:9d:fc:26:f4:96:13:42:0e:a2:60:65:
         01:39:74:0e:6d:26:62:0e:78:2b:50:e0:f4:5c:ec:67:83:cd:
         67:38:ef:82:87:49:49:68:02:d6:98:8e:9d:29:2f:48:70:cb:
         a9:79:91:49:66:28:ca:9e:ee:3b:c2:7a:63:4d:b1:df:85:b6:
         5c:7c:9f:50:5a:6a:69:95:39:fb:bf:dd:ca:59:cf:14:0f:76:
         f9:e3:62:5a:5d:b6:2e:9e:a7:66:20:2f:c3:e0:b5:03:9d:ab:
         f4:c4:86:0c:e0:0f:6c:e5:c8:7b:42:68:18:69:76:1e:03:3b:
         69:b8:7b:5c:1c:ba:8b:8f:8f:95:e9:98:1e:d2:ff:a4:76:00:
         49:a4:fb:2e:c4:76:92:ee:3b:fe:8c:11:46:d5:23:cb:a2:7b:
         29:2c:c7:d9:07:c7:e7:6c:d1:3c:3b:85:db:41:6f:97:b5:8f:
         b3:76:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----