Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37891eaab39a53321626b241200bbc4960887f67.cer
File:                     37891eaab39a53321626b241200bbc4960887f67.cer (raw, json)
Hash identifier:          o8ZpoASatiAj4HzcAQQAer4Nqy277yZGYEo3sqzYdDY=
Subject key identifier:   1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6B399
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/37891eaab39a53321626b241200bbc4960887f67.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:28 +0000
Certificate not after:    Wed 22 May 2024 21:52:07 +0000
Subordinate resources:    AS: 64101
                          IP: 200.33.125.0/24
                          IP: 2801:138::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15119257 (0xe6b399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:28 2017 GMT
            Not After : May 22 21:52:07 2024 GMT
        Subject: CN=37891eaab39a53321626b241200bbc4960887f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:6e:55:95:6d:0b:b0:3a:41:ea:1f:4c:1f:
                    9b:59:dc:81:eb:60:0d:84:92:af:af:d4:c0:c1:83:
                    14:3d:06:4a:75:17:83:16:c0:26:92:3f:3b:62:95:
                    31:17:19:ef:e0:81:b5:8e:e9:c4:54:40:0b:97:f0:
                    75:41:3e:cd:be:b0:71:9d:40:3e:80:4e:f1:2e:f5:
                    33:80:d6:25:3d:79:88:01:35:87:6a:16:ef:8d:dd:
                    8a:6b:40:be:2c:e0:c4:f8:7e:98:04:01:74:b5:a9:
                    04:77:03:68:b1:71:67:6e:c4:51:55:08:94:d3:16:
                    2c:0e:36:f8:3d:57:69:48:1e:11:6d:c9:0a:f9:a9:
                    38:1e:ef:f6:8f:de:6c:91:1f:2e:ed:e6:10:a2:a5:
                    a1:5b:58:2d:77:c3:e7:f3:43:e2:9f:76:07:56:4c:
                    c6:b6:77:70:b9:98:d3:8f:50:c2:2a:38:7b:c6:62:
                    f1:26:b0:eb:cb:c8:dd:47:75:4f:4f:f1:c7:b8:07:
                    37:98:bf:60:e5:8c:21:17:c3:2b:d8:da:32:39:a9:
                    70:db:50:49:41:38:d7:5e:a0:e7:b7:70:05:63:ca:
                    9e:eb:a9:6e:7f:7c:70:5d:06:06:0d:aa:27:5a:03:
                    6d:56:92:2c:bc:0a:4a:43:22:26:7e:7e:c5:5e:fb:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/37891eaab39a53321626b241200bbc4960887f67.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.125.0/24
                IPv6:
                  2801:138::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64101

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:2f:a5:ad:e2:46:5c:5d:cd:4a:e5:2e:f0:95:2a:53:4d:
         2c:d5:78:60:67:12:a4:c6:b1:4b:2b:18:ad:1c:c3:d0:1e:01:
         eb:88:5d:fd:5b:8e:37:06:0f:6b:4e:1c:ce:f9:e5:2a:61:cf:
         00:ba:4e:ce:6d:d8:b1:96:b6:ea:5e:c4:b3:b4:db:06:e8:1b:
         4e:5a:22:69:d5:3d:a5:6e:47:48:b8:8d:58:12:79:05:9a:b6:
         2e:49:6d:8a:49:da:3a:f8:fa:ed:d2:e3:eb:0a:7d:cb:e5:4f:
         9e:67:ab:b9:96:e9:dd:4a:90:7f:6b:81:8a:60:53:5c:33:18:
         75:0e:bd:aa:32:74:fc:1d:99:54:4f:ff:01:0f:2a:8a:46:69:
         e6:c3:53:ad:4c:91:79:a8:2d:5b:01:e6:e5:e1:1f:32:1a:ff:
         d8:fc:42:0d:1d:cd:6f:36:31:47:bd:62:bb:9f:0f:19:57:60:
         a4:17:b8:48:10:2a:18:3f:2d:ff:93:01:e8:1b:d2:59:45:1d:
         9c:d6:55:a7:5b:e6:81:25:07:31:b7:85:b1:3a:76:e8:1b:08:
         11:3f:c2:8b:e0:1b:66:43:80:3c:60:ac:07:e7:49:f0:63:29:
         f7:13:e5:93:ac:6b:23:cb:84:e0:49:dc:67:4b:e5:2e:79:3a:
         e2:53:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----