Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer
File:                     453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer (raw, json)
Hash identifier:          SdoI9654EuKeNdw82uLO6to04wLBju0PXG8Tu/M0xcI=
Subject key identifier:   30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F404AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Thu 05 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 263713
                          IP: 190.0.224.0/21
                          IP: 2803:7a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15991981 (0xf404ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Sep  5 05:00:00 2024 GMT
        Subject: CN=453ebe59acb9a5bd47a22d24fb3018768bbf22c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:7f:8a:79:02:ed:2d:5e:18:be:13:30:1d:
                    b1:4b:2d:28:6f:a8:5e:a4:7b:ee:aa:da:67:2a:25:
                    74:d5:9d:4d:ef:c3:1a:e3:ce:3e:c2:6d:cd:81:88:
                    e2:40:39:38:17:15:18:fb:89:80:b5:22:68:56:c2:
                    39:69:7d:43:49:bf:9a:67:14:27:96:84:53:da:47:
                    58:12:0b:27:48:07:ca:c7:c2:12:a9:b0:6f:31:ea:
                    ca:58:2e:60:2e:2b:1c:0f:d3:c3:df:be:b7:cc:a0:
                    6d:d2:f6:10:2e:be:3b:74:73:10:33:d7:53:f3:33:
                    96:cb:52:85:96:1d:64:ee:1a:c3:0b:e6:44:24:f6:
                    6e:16:99:a0:83:32:4b:66:d9:df:6f:53:b6:e8:8f:
                    e2:54:81:4c:be:da:40:4c:68:24:49:cb:94:ba:78:
                    a7:a1:82:5c:31:b9:8c:9c:30:35:de:ab:b1:9f:d3:
                    c6:0c:4d:5a:69:70:2d:90:fb:91:e4:c3:36:53:9e:
                    85:e0:ef:c0:04:20:7a:24:d7:50:53:b7:d8:6c:b2:
                    de:6b:46:ef:72:d8:00:4e:26:f7:78:0a:61:1c:84:
                    5e:77:97:23:41:db:f2:e2:13:3f:39:54:4d:e9:20:
                    99:d2:ea:4b:d5:d8:3b:28:1b:70:c6:de:1d:fb:30:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.224.0/21
                IPv6:
                  2803:7a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263713

    Signature Algorithm: sha256WithRSAEncryption
         b0:22:57:1c:fe:3e:ff:cf:ba:e0:96:d9:47:b7:94:29:2c:04:
         a0:19:34:bc:1f:90:f2:e2:cd:71:6d:67:86:61:8f:68:2c:cf:
         6b:40:c1:6b:3d:65:cd:1c:53:dc:ac:3e:2d:e3:3d:9f:83:f0:
         55:3a:4a:fc:09:f8:45:93:ca:8f:a2:14:c0:7e:2e:72:75:a2:
         4d:2c:55:ba:26:01:16:ec:e8:80:ec:cc:a5:4d:f9:56:ea:ef:
         eb:dd:30:af:a0:6d:41:16:51:70:31:fd:1e:a4:b6:9c:ea:fd:
         79:a3:5b:98:4c:54:7d:29:eb:be:02:70:fb:3a:20:a6:38:95:
         65:68:a9:19:ae:54:6b:62:a6:7f:ed:f4:17:08:3a:2f:3c:52:
         af:4e:37:fd:0f:03:bb:ec:f8:69:5b:44:26:89:6b:1c:0f:f7:
         2e:1c:19:a0:c1:9a:da:aa:04:fb:8f:7f:2e:be:45:ca:73:1f:
         36:fe:0b:65:97:3b:bb:2d:5f:bf:e5:04:39:7a:de:40:33:f3:
         6f:cc:6a:46:d0:bf:03:08:7f:d9:bc:48:04:61:bb:69:9d:d8:
         02:7f:e6:45:90:f2:91:42:8d:86:e0:d3:af:c8:fb:02:f6:4e:
         d6:72:ae:0c:b0:99:bf:04:5a:32:ae:5d:92:1b:af:22:ea:ba:
         91:7a:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----