Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
File:                     4ba834aeb520331d21c768e13e7564e705630d2c.cer (raw, json)
Hash identifier:          Ac52oZMWd1xIzJDbsEWvUKx1XTdiggNRPz39wdkzoS0=
Subject key identifier:   4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E61645
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Sun 19 May 2024 17:34:58 +0000
Subordinate resources:    AS: 52347
                          IP: 186.177.224.0/19
                          IP: 190.93.40.0/22
                          IP: 190.111.32.0/19
                          IP: 2803:5400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15078981 (0xe61645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : May 19 17:34:58 2024 GMT
        Subject: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:7a:74:d7:97:e4:0e:81:49:55:80:77:83:
                    c7:9f:6c:b6:83:81:22:4f:db:20:1d:90:92:f3:ea:
                    ea:44:f0:a6:be:74:a3:0d:5c:3b:96:b9:ca:3a:bf:
                    bc:6d:17:57:b8:f2:ea:db:1b:67:33:d1:65:38:5c:
                    5f:ba:13:2c:49:6b:76:68:ed:71:24:10:83:73:d9:
                    cc:76:e2:7c:84:bb:2b:ed:a3:8f:30:91:39:6a:55:
                    44:35:09:38:65:4d:81:46:c1:8c:f3:eb:68:e6:b7:
                    8f:15:d8:72:84:c3:a2:d6:66:13:25:07:9c:24:69:
                    aa:03:c7:a9:42:d2:c5:f7:22:64:fe:6f:b0:e5:48:
                    96:0d:f2:5c:38:31:f5:b6:af:8e:48:49:4a:16:a3:
                    f2:6a:dc:0e:48:3e:9c:56:71:73:74:8d:24:a9:3e:
                    7e:7d:8b:a4:99:6b:b0:17:a3:fc:c3:d0:e6:a3:00:
                    ab:cc:a9:ca:ba:ff:95:92:80:ad:75:60:55:8f:62:
                    6a:ec:64:57:b8:92:27:ea:b3:68:94:6d:bd:92:74:
                    1f:5a:f0:48:09:de:e8:7e:3a:7a:17:0e:08:90:02:
                    88:87:b2:67:02:24:ce:7b:0b:71:c5:07:7c:34:a6:
                    28:b0:e6:20:ae:75:e0:db:63:09:37:e0:86:bd:63:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.224.0/19
                  190.93.40.0/22
                  190.111.32.0/19
                IPv6:
                  2803:5400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52347

    Signature Algorithm: sha256WithRSAEncryption
         25:40:1a:29:c8:b7:25:8e:e1:4f:01:b6:6c:09:93:08:76:36:
         9d:89:9a:c6:83:2c:a1:6c:cf:b8:0c:d6:3d:c6:7b:f3:59:a7:
         83:fe:cf:26:f8:85:80:bb:ac:e5:6b:37:c8:32:1e:8d:68:94:
         04:19:a5:c0:f1:12:12:55:f6:46:4e:67:43:16:2c:ed:ee:c8:
         9c:7a:c3:00:6c:fa:d8:e2:2e:09:25:98:b6:b2:7c:30:df:f6:
         3d:90:84:3b:84:d1:25:9d:26:20:9c:1b:0e:56:c5:9e:0a:4d:
         cc:cd:2f:fb:d9:40:67:50:42:40:88:fc:56:88:dd:da:22:e1:
         e6:dd:ec:4e:69:d4:54:76:8f:69:ec:9b:aa:95:6c:29:a7:dc:
         a4:be:6f:f5:f2:77:de:65:f4:64:09:ba:b3:89:51:76:f1:11:
         9c:70:b9:8d:ec:ef:f1:a2:b0:fe:06:2b:d2:ff:14:68:ef:9a:
         c0:aa:1b:d9:a5:0e:6b:c0:63:f8:5e:46:02:31:e8:d2:fe:81:
         a6:6c:c7:81:d3:93:7f:dc:7c:4f:7d:5b:a1:54:44:60:84:e4:
         68:f4:7a:d7:c3:6a:c7:43:d6:28:35:52:b8:62:dc:5c:d8:e2:
         ff:75:d2:79:84:22:7d:99:d9:9f:95:ab:f1:b4:cd:7a:f1:f8:
         54:83:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----