Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42d833fb782302730970e820540573000b142c93.cer
File:                     42d833fb782302730970e820540573000b142c93.cer (raw, json)
Hash identifier:          c2ChImZV0PnbmA55TNrptP8DMgWfzUVnv6hZfo2yAnQ=
Subject key identifier:   B8:65:B3:C8:E0:2E:2A:62:99:3D:4C:FB:27:B1:FD:2F:6B:D9:BA:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5E06F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/42d833fb782302730970e820540573000b142c93.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Thu 19 Sep 2024 16:09:23 +0000
Subordinate resources:    AS: 264641
                          IP: 143.255.176.0/22
                          IP: 2803:940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16113775 (0xf5e06f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : Sep 19 16:09:23 2024 GMT
        Subject: CN=42d833fb782302730970e820540573000b142c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a7:f0:1b:6c:b1:98:2d:9e:7b:2c:6c:c1:a1:
                    49:39:a1:7d:e3:ef:5d:b9:14:7b:01:54:03:b4:77:
                    73:79:c0:9c:0f:82:30:06:bc:4f:f1:c3:f5:22:d3:
                    2b:e1:ee:77:62:b7:aa:a3:98:3f:e5:d1:54:0e:7a:
                    f5:ae:30:de:4b:12:03:83:95:a4:70:14:99:97:38:
                    bf:47:15:2f:d2:71:88:21:56:fa:a0:dc:9a:8c:52:
                    fb:9e:69:9b:10:36:d8:ac:a9:1c:c6:6a:a7:00:a1:
                    10:76:d8:f2:d7:c5:2b:35:e1:25:ca:9e:7a:9b:1f:
                    f6:58:21:52:81:36:68:73:42:7c:24:9c:c5:35:a8:
                    3a:13:48:52:a5:46:89:b4:f7:a2:e9:6e:f5:7d:c6:
                    9d:26:3a:96:5d:35:39:4d:6b:45:cf:45:a5:1e:4b:
                    ae:36:b8:c6:4c:17:43:a3:a4:d3:47:84:4d:8c:b9:
                    18:a7:1b:5d:2a:0c:e9:af:48:71:5e:4e:32:18:5f:
                    91:d7:28:35:1e:da:c7:f3:23:7b:ec:f3:56:a7:21:
                    a7:b2:fb:1f:30:7b:03:e6:b4:81:e3:d0:37:b7:4d:
                    12:aa:a5:26:f5:bc:f2:2e:6e:35:18:d0:ea:b5:16:
                    f4:91:e2:76:5f:2f:3a:e6:13:d3:c1:ac:cd:8e:f6:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:65:B3:C8:E0:2E:2A:62:99:3D:4C:FB:27:B1:FD:2F:6B:D9:BA:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/42d833fb782302730970e820540573000b142c93.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.176.0/22
                IPv6:
                  2803:940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264641

    Signature Algorithm: sha256WithRSAEncryption
         29:01:18:84:7a:0a:e7:7f:98:cc:b0:ca:4b:d7:38:83:99:33:
         57:eb:fa:db:ff:63:17:6f:7b:ad:af:27:57:ee:9a:28:a8:60:
         c7:e5:e2:00:91:35:d6:ec:97:51:82:c5:21:9a:d0:ae:2f:7b:
         4b:88:44:18:f5:a2:26:ca:1b:d6:5e:ef:4e:a3:b8:37:c9:cb:
         a7:4a:a5:32:ea:7b:c9:0e:95:27:9f:01:dc:4e:e8:9c:e3:6e:
         69:8a:87:08:43:bc:63:37:fc:4d:45:2f:ef:41:d5:3a:95:91:
         d9:e6:c8:04:7e:a3:8b:f2:02:84:98:f2:f0:31:30:b9:f7:a9:
         03:79:63:f2:82:a5:ed:9b:db:f6:ef:3f:bd:a9:66:35:ec:e7:
         bb:42:93:84:b1:44:60:c6:f3:1a:0d:87:91:ee:df:64:35:a5:
         c6:33:40:03:e2:fa:3b:64:8b:d9:fb:6c:ce:6b:f9:25:7b:b6:
         9e:bd:29:0b:f0:7c:20:e3:33:d0:39:d1:44:63:16:38:5f:5d:
         dd:38:14:c2:d4:09:c4:c9:c7:f6:8e:74:5b:71:a9:26:30:e1:
         b7:f6:31:ef:49:2c:93:9f:bc:11:37:12:1c:08:dc:e4:31:08:
         51:ba:83:4f:cb:5b:af:6a:09:93:7f:43:a0:b6:72:79:56:6a:
         2a:af:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----