Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
File:                     40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer (raw, json)
Hash identifier:          jlvwVWf8Q42NyFR176TpSc64WvaeuYXPxv8Pc9XEePA=
Subject key identifier:   DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC90DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:52 +0000
Certificate not after:    Sun 15 Jun 2025 18:58:43 +0000
Subordinate resources:    AS: 269918
                          IP: 131.72.168.0/22
                          IP: 2803:dd80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16552157 (0xfc90dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:52 2017 GMT
            Not After : Jun 15 18:58:43 2025 GMT
        Subject: CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:35:a8:42:26:e5:9e:c2:20:4f:5b:74:3f:
                    92:b1:e8:e1:e5:43:20:80:18:85:3b:7b:29:79:66:
                    52:7b:4d:75:8c:52:9c:82:49:42:20:8f:81:6d:40:
                    73:fe:7e:ef:78:20:81:a2:fe:f5:ad:86:d0:46:fd:
                    42:df:b5:c9:15:6b:80:9f:00:ac:e9:d5:d9:2c:c6:
                    e7:24:c5:36:48:97:43:f8:78:65:8e:19:d9:74:50:
                    75:07:d9:4e:a1:d9:30:86:4a:bb:a1:36:bc:94:d5:
                    ff:8a:bf:11:6e:85:7b:77:60:e3:04:c6:28:bc:62:
                    d4:77:69:80:fc:ed:99:16:3e:b2:37:79:7e:83:31:
                    b0:08:1c:39:a6:d0:5e:aa:7f:7d:56:c6:49:8c:1d:
                    4a:32:93:be:56:72:78:36:4d:c1:ee:d4:e9:ca:5d:
                    7d:87:33:2f:ae:07:6a:df:00:48:41:9b:a3:19:e6:
                    87:f4:56:7a:b7:98:f8:e4:76:08:f1:90:81:3d:bc:
                    73:e1:c6:35:aa:8a:22:eb:74:57:da:34:4f:63:19:
                    4b:c3:d3:57:a7:9f:69:35:17:a0:5d:6c:89:93:8e:
                    81:62:4e:12:8d:0c:b5:8e:de:e5:ba:3a:ca:60:36:
                    60:69:b8:93:8e:dc:85:43:ed:7e:62:a7:1b:c7:f2:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269918

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:a4:cb:1e:5b:53:93:c1:86:fe:1d:88:20:19:d9:c6:eb:
         6a:fa:4e:b5:d6:a4:6c:5e:44:be:ac:34:e8:4a:17:29:b8:64:
         c6:41:c2:bf:68:55:08:5d:01:53:2c:47:b2:7b:65:fb:7d:75:
         34:c6:06:cf:d2:a9:35:41:14:84:70:8d:09:e0:f4:24:74:91:
         3c:a1:47:7f:42:b0:34:f6:7e:d0:17:8a:94:ed:25:55:24:ef:
         b1:50:7f:8d:87:f0:67:93:47:16:73:06:67:3f:ac:92:0a:e4:
         b0:0d:04:6f:2c:f3:d3:6f:59:b8:d0:86:b8:63:2a:0f:a1:a8:
         b7:4b:be:b4:21:df:4a:24:47:fe:39:22:48:99:b6:07:55:a4:
         74:d3:42:8f:2b:83:f7:16:6e:fd:87:b6:4c:c1:29:e1:9b:78:
         af:bd:a0:c6:9c:a9:d9:4b:ea:04:43:b3:ab:a7:33:13:bd:83:
         19:3a:d8:b7:e0:80:de:f0:d6:56:69:4a:e2:36:ef:b4:61:1b:
         d7:04:3c:32:16:a5:11:74:52:b1:22:9b:84:02:0b:0e:bc:85:
         7f:08:1f:2c:f0:7c:da:70:3a:1c:5b:24:a9:a3:b9:46:04:3c:
         c8:42:dd:6d:21:35:6c:2a:15:2e:48:5e:d7:4b:4c:7b:c9:83:
         6f:f5:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----