Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
File:                     33b7a43fc33bfc7ff5ea592decadde645288705e.cer (raw, json)
Hash identifier:          vo1t2O4Kej0VK5PAp1/WTpGLzYwb7VMxbvAphXEGzlc=
Subject key identifier:   C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2DA1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Mon 29 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 10697
                          IP: 190.110.224.0/19
                          IP: 190.114.96.0/19
                          IP: 200.50.160.0/19
                          IP: 200.123.32.0/19
                          IP: 2800:820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14866975 (0xe2da1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Apr 29 06:00:00 2024 GMT
        Subject: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:b9:e9:6b:8e:9f:77:48:02:16:67:1a:6c:
                    b9:25:2b:c8:79:11:a5:0b:d3:86:48:ce:79:bb:e4:
                    51:d9:ef:86:88:dc:3c:81:ef:0e:5b:8e:34:e7:d1:
                    d0:bf:0e:8b:ad:a5:54:2c:26:bf:ec:74:3d:80:06:
                    dd:79:69:20:68:00:b2:3e:d9:55:60:52:ea:28:e0:
                    19:1d:06:03:84:fb:ca:a3:f7:b2:55:9c:cf:01:1c:
                    d6:af:c4:d8:39:5d:33:dd:a3:cd:47:ba:b7:24:81:
                    be:6b:28:e0:a3:ba:3b:78:f7:a5:e7:1d:0f:8b:39:
                    1e:59:02:e8:28:38:ba:01:f5:76:37:d5:0a:9c:54:
                    79:ca:5e:bd:93:31:cf:78:0f:0b:9b:b9:ae:26:bd:
                    d7:08:c4:bd:d9:30:cf:ff:93:f8:d5:19:82:51:28:
                    7d:82:0f:64:f2:b8:08:83:a9:7d:90:28:12:98:1a:
                    bc:4a:67:24:c9:7d:0e:81:74:61:36:14:3e:d6:4c:
                    3f:d4:b9:ae:d9:dd:e1:82:db:f3:70:f6:10:38:4e:
                    d0:02:4c:78:5c:60:a7:42:46:00:3b:6f:c8:b9:ed:
                    64:fe:3b:3e:6e:a6:04:fc:7e:98:53:8a:35:cb:66:
                    89:d9:56:4b:34:9b:7f:16:80:fb:60:c8:1d:f7:27:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/19
                  190.114.96.0/19
                  200.50.160.0/19
                  200.123.32.0/19
                IPv6:
                  2800:820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10697

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:80:bc:6c:16:76:b7:29:21:2c:48:b0:05:56:21:d8:da:
         d9:d1:5d:22:d3:11:19:ce:4b:67:f3:c3:ba:41:73:12:fe:46:
         55:3e:28:5c:d3:63:fa:4b:cf:32:0d:cb:a1:fa:5a:65:ef:b4:
         37:52:8b:e4:c2:b6:47:59:fe:4c:e4:57:84:4f:24:cd:eb:dc:
         8b:50:08:26:94:e2:bd:37:c6:62:c7:c7:fa:67:df:62:a2:af:
         48:81:28:1f:6a:fb:18:8d:be:47:73:46:a6:ce:96:2a:cb:91:
         dc:84:90:c7:55:e2:8d:f2:35:0a:bd:5f:3e:1b:2f:24:2c:e6:
         de:1a:9a:53:99:78:15:a6:be:15:57:64:7d:b3:2a:bf:e1:b4:
         8e:bf:f1:7d:fa:47:ce:ad:8c:24:fa:db:f9:03:b8:87:f3:73:
         6a:3e:ed:6a:55:15:27:b2:14:bd:97:cd:74:8f:74:be:80:7c:
         52:24:8d:ae:7d:36:bf:04:31:f6:1a:90:50:80:10:f4:1f:74:
         9e:89:85:4d:0e:ed:4b:5a:54:62:4e:e6:82:d5:25:82:9f:26:
         67:35:cd:4d:51:d5:ea:7e:fb:58:58:bf:bb:7c:9d:a0:eb:0b:
         96:a9:95:46:10:13:cd:ad:34:98:a2:1f:83:50:e6:ff:4f:b6:
         0c:55:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----