Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
File:                     41f7ad2592489a8e238bbf1d55399b9278c418a6.cer (raw, json)
Hash identifier:          RLYLdxE/seIYaVt7cyvQI2rBFqnyhcjvH8TVnxX5l3Y=
Subject key identifier:   08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5D859
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:00 +0000
Certificate not after:    Mon 27 Nov 2023 04:00:00 +0000
Subordinate resources:    AS: 16973
                          IP: 168.205.64.0/22
                          IP: 190.4.88.0/21
                          IP: 2803:3100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14014553 (0xd5d859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:00 2017 GMT
            Not After : Nov 27 04:00:00 2023 GMT
        Subject: CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:65:e7:4e:8b:84:c1:fd:15:99:70:67:52:
                    f9:24:8e:98:03:8a:fd:72:91:d4:5f:ed:bb:33:16:
                    5d:c9:1c:9b:02:65:0c:6d:07:30:ea:e8:1c:8f:34:
                    a9:10:f7:ed:0e:44:79:87:53:ce:41:c8:99:ca:11:
                    0f:ba:f7:f4:32:b3:c1:d8:57:62:7c:f9:81:2a:43:
                    9a:56:09:e6:60:ff:52:81:d1:ef:a3:22:a2:27:af:
                    b0:42:64:b3:ba:08:59:18:d1:aa:d2:20:86:42:e0:
                    b4:97:f4:e7:95:bf:07:e7:da:35:1f:36:27:de:71:
                    56:73:24:30:a7:06:fe:92:22:b2:8c:a8:6a:19:af:
                    2d:4d:1b:ad:a6:70:9b:53:ea:db:f6:f7:1f:ed:ea:
                    ae:3a:78:2d:5c:5e:95:b5:74:d9:0a:82:b6:83:48:
                    b1:31:80:c2:73:1c:b1:7a:a8:e8:1e:5b:87:c2:c6:
                    a6:17:a5:a3:14:4e:0a:45:72:15:b7:49:7c:b7:37:
                    23:df:65:b5:93:43:bd:8b:e4:82:2e:1f:96:65:f0:
                    4e:cc:e7:bf:9a:3d:9c:eb:6e:60:0b:c7:d4:92:17:
                    b3:92:2e:39:00:4c:9e:5d:97:3b:4f:d4:41:ef:66:
                    a6:91:ca:7a:2e:46:58:d7:e5:18:40:fe:89:00:ea:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.64.0/22
                  190.4.88.0/21
                IPv6:
                  2803:3100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16973

    Signature Algorithm: sha256WithRSAEncryption
         56:99:be:82:f1:29:f8:63:e3:0e:c4:cf:64:86:10:19:b3:70:
         50:fc:82:4e:55:5a:7a:19:21:9e:7d:86:dc:8c:54:1e:cb:6c:
         71:cf:50:50:24:99:e7:df:10:57:d5:19:ad:b4:08:e3:2f:ec:
         15:d4:12:b0:a8:50:aa:84:8d:4b:4f:0d:92:d1:cd:49:d0:16:
         1c:3f:1b:45:9f:b3:af:4d:de:3c:1d:05:80:30:7b:01:3b:46:
         57:45:33:f5:92:d9:71:ab:27:85:75:cb:a5:62:17:78:01:71:
         cc:2d:d2:c4:dd:69:70:db:9a:5a:dd:ff:bb:45:84:5f:bd:17:
         85:98:5b:d2:84:11:cd:e4:1b:49:2a:b3:6b:90:b0:b6:61:c4:
         e0:9f:5f:3c:06:ca:6c:54:af:99:34:f1:1b:13:7e:59:3b:34:
         39:b1:56:d8:ab:a1:6e:bd:03:94:5b:3f:dd:e3:5b:f9:a1:f3:
         44:9f:ae:fa:24:a5:45:e4:86:bb:2a:f1:af:19:4d:f1:9e:38:
         97:24:49:f6:c4:8d:de:5e:ef:30:6b:c9:4f:c1:c2:5c:03:53:
         f9:71:d7:7c:39:7e:95:db:11:7b:c1:3d:93:10:09:49:03:64:
         e6:38:38:52:c6:56:0b:99:27:25:2e:21:d4:d7:bc:d5:f3:18:
         9e:e2:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----