Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4c5765f74fbd78fb02b1160119afeb4a096d71.cer
File:                     4b4c5765f74fbd78fb02b1160119afeb4a096d71.cer (raw, json)
Hash identifier:          nukHZGdi8ra52iRdMkWGIkqoEbPhuyRi5IZo6EVE1m0=
Subject key identifier:   29:47:4A:87:AC:6D:B5:04:5C:58:EB:56:12:B3:12:49:24:5A:17:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9E141
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/4b4c5765f74fbd78fb02b1160119afeb4a096d71.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:26 +0000
Certificate not after:    Sat 15 Jun 2024 16:31:32 +0000
Subordinate resources:    AS: 52473
                          IP: 186.148.120.0/21
                          IP: 190.8.184.0/21
                          IP: 2803:eb00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15327553 (0xe9e141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:26 2017 GMT
            Not After : Jun 15 16:31:32 2024 GMT
        Subject: CN=4b4c5765f74fbd78fb02b1160119afeb4a096d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:c3:ac:fe:a0:22:2e:02:fd:94:cb:88:22:
                    4c:4f:98:3c:94:b9:7a:b6:a8:60:43:0b:2b:5f:92:
                    7a:23:e1:19:77:dd:01:db:f9:24:ca:96:0b:3b:de:
                    2c:8e:30:64:da:9d:ce:1d:18:e2:ce:64:a3:04:3d:
                    ac:d0:31:7c:b5:03:e1:c9:28:85:96:1a:04:9d:86:
                    e2:35:30:f1:c5:de:4d:2f:64:6c:81:d3:42:3c:21:
                    60:a8:a7:3e:11:c9:82:4b:78:1b:d3:4d:1e:87:7b:
                    72:c7:da:22:33:29:b9:a9:61:85:09:ff:3d:17:aa:
                    e7:61:27:5e:4d:da:36:cf:e3:24:6c:85:95:c7:44:
                    c3:0b:4c:da:55:c9:fd:1d:64:c9:63:2d:b4:54:7e:
                    39:81:91:4c:92:aa:1b:e2:9d:e9:0b:e8:33:37:1b:
                    99:2f:46:a3:4b:ab:5f:4f:a7:d8:15:87:6b:82:b0:
                    65:b9:95:4e:98:5e:0f:73:ca:5c:8c:4d:4a:6a:33:
                    17:cf:43:eb:19:9f:26:18:3d:0e:00:2c:f1:55:49:
                    58:06:9a:18:a6:52:e8:0c:ec:06:6a:48:d2:ec:bc:
                    1b:ed:23:cc:38:56:86:b6:7e:98:64:5a:62:c8:db:
                    fb:f1:b9:b4:55:dd:75:13:f9:8a:d1:e6:05:38:37:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:4A:87:AC:6D:B5:04:5C:58:EB:56:12:B3:12:49:24:5A:17:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbf373a-055e-4035-b035-f752b0ba5013/4b4c5765f74fbd78fb02b1160119afeb4a096d71.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.120.0/21
                  190.8.184.0/21
                IPv6:
                  2803:eb00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52473

    Signature Algorithm: sha256WithRSAEncryption
         03:91:86:93:39:10:de:f9:7c:1f:f6:59:30:54:f6:76:34:d4:
         ad:c6:00:ef:49:e9:fa:c0:f6:64:e4:17:51:48:99:d5:77:de:
         59:c7:56:89:93:81:75:a5:ca:f3:ab:c4:36:e9:52:ce:5f:ab:
         dd:bc:e8:0b:28:40:29:49:38:c6:3d:5c:8a:c1:a8:19:c0:2c:
         63:1b:aa:9f:f2:1f:53:4b:fa:ec:d1:ef:3a:a1:e9:98:71:22:
         8c:5e:8f:c9:e0:ac:7b:55:38:6a:16:98:0d:b8:f6:16:e5:20:
         07:e5:86:c3:d5:e9:62:cc:ac:ea:fc:47:fb:cf:89:70:7d:12:
         71:95:6e:27:30:14:ab:97:6a:5c:04:a8:9f:32:c2:d1:2a:11:
         5a:ac:82:7d:cc:86:a3:66:a7:39:43:b0:d3:f9:52:ca:9d:99:
         71:2a:f9:29:e0:b2:98:c8:e5:f9:e7:ba:cd:66:c9:aa:39:81:
         6c:ff:1e:9b:c0:b4:db:9f:ad:a3:3b:aa:67:14:c1:4d:bb:4a:
         bb:06:2f:5e:7a:62:24:66:0a:a9:73:24:6d:19:96:a7:2f:8d:
         db:ae:bf:d1:5a:eb:ba:65:c8:16:b2:b9:53:29:a2:76:52:37:
         d3:c6:31:39:2e:63:5e:24:50:3a:f8:6a:19:e4:3d:ad:c9:51:
         99:39:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----