Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
File:                     49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer (raw, json)
Hash identifier:          kS90wzKaKsir29S8K7cjN0dNMKwHc0/v5YB+Mcapkg8=
Subject key identifier:   86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01050436
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Wed 17 Sep 2025 05:00:00 +0000
Subordinate resources:    AS: 262191
                          IP: 138.121.12.0/22
                          IP: 168.228.124.0/22
                          IP: 177.8.72.0/21
                          IP: 190.131.192.0/18
                          IP: 2800:b70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17105974 (0x1050436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Sep 17 05:00:00 2025 GMT
        Subject: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:b8:45:6e:5b:98:9f:84:6d:52:7a:58:62:
                    c9:b0:c7:00:bf:a7:42:51:21:94:a8:57:bd:f5:da:
                    af:b5:78:fe:f7:50:d4:f2:44:14:e7:fd:b6:d2:7c:
                    81:ab:85:d3:ed:57:b4:40:5c:53:fa:b0:33:8f:6d:
                    ff:9f:12:b0:cf:6e:0b:86:de:89:d6:06:f2:8e:85:
                    9a:b9:7c:fb:00:fd:27:7c:60:0f:97:9f:43:cb:fe:
                    22:21:63:9f:af:8f:5e:62:9e:6d:c7:9a:72:e5:8a:
                    78:45:f9:65:e6:1d:0e:9c:33:33:ef:f3:6a:6c:84:
                    a2:78:40:d8:4f:91:67:23:bb:64:8e:ee:36:2f:24:
                    10:69:c6:86:3d:e9:43:6e:19:2a:61:bb:55:82:63:
                    d0:eb:c5:57:3a:08:eb:45:e6:d4:5d:fb:c5:1b:3f:
                    a5:94:20:8f:ae:3f:30:2d:eb:8b:98:a9:7d:27:f7:
                    e3:e3:ae:01:95:fc:d6:54:dc:aa:7c:9a:fe:1f:b3:
                    96:a6:2f:f9:01:8c:9e:69:ba:cd:0e:61:27:df:63:
                    b1:a7:ec:49:4f:04:a6:7e:93:5e:aa:08:86:e9:d2:
                    db:14:e2:64:37:c5:bf:8f:2b:8a:96:ca:ed:15:2a:
                    18:1a:c8:d4:fa:51:2b:43:ff:27:9f:52:49:0f:aa:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.12.0/22
                  168.228.124.0/22
                  177.8.72.0/21
                  190.131.192.0/18
                IPv6:
                  2800:b70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262191

    Signature Algorithm: sha256WithRSAEncryption
         0c:2f:20:97:df:28:24:42:b9:01:b3:9b:20:1f:71:05:01:43:
         98:c0:6f:6f:dd:d4:5b:21:7c:c1:d1:e7:49:02:4d:6f:81:04:
         31:ca:4a:9d:7e:08:48:0d:8e:1c:ef:a3:b6:2b:93:25:4d:5c:
         fa:56:b3:ab:72:68:58:a7:78:3f:7c:e8:d2:3b:25:65:01:68:
         de:ec:ca:5b:de:28:83:31:79:eb:95:f1:ff:f5:00:f0:5c:72:
         1a:de:d3:67:35:5d:ec:95:2a:70:1d:9d:94:ec:3c:4d:dd:82:
         73:e3:8d:33:1a:76:9f:a6:c2:f5:3a:a8:a7:40:f3:d8:b5:1e:
         43:72:63:85:5e:79:d5:fa:2a:e4:30:87:4d:b7:91:c0:a6:b1:
         e5:ab:84:1a:a0:e1:ed:59:86:d8:4f:20:a6:f0:c6:a2:44:de:
         2a:db:92:16:70:e3:a1:c9:57:28:e1:4a:2e:ed:da:bb:82:e9:
         60:e5:99:60:e5:e5:a2:21:19:5e:59:ba:cc:ee:9e:1a:22:02:
         f1:55:e9:b7:be:5d:24:9a:2d:11:06:36:aa:98:0f:76:86:6d:
         c0:9b:fd:40:47:5f:35:49:f0:f5:6b:f5:60:b1:30:bb:e5:66:
         09:a6:ea:a2:90:d1:c3:98:2c:5e:ca:e9:d0:ab:cf:f8:27:0a:
         ae:42:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----