Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51bd6b25bca04c4927105828dced1067fd2b5b6e.cer
File:                     51bd6b25bca04c4927105828dced1067fd2b5b6e.cer (raw, json)
Hash identifier:          MPuI4LPQV3iSO3hGJQhiW9tzclq81W3tiBF4UHyIvck=
Subject key identifier:   95:C5:3D:86:80:B4:A8:24:69:B9:14:7E:15:1B:42:E7:D4:D6:55:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD1263
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e792202-fab5-4edf-9240-4c28ddc955d3/51bd6b25bca04c4927105828dced1067fd2b5b6e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e792202-fab5-4edf-9240-4c28ddc955d3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:36 +0000
Certificate not after:    Sun 17 Nov 2024 15:27:40 +0000
Subordinate resources:    AS: 264665
                          IP: 201.219.224.0/21
                          IP: 2801:0:2000::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16585315 (0xfd1263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:36 2017 GMT
            Not After : Nov 17 15:27:40 2024 GMT
        Subject: CN=51bd6b25bca04c4927105828dced1067fd2b5b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1f:c1:a0:72:41:c9:6a:ba:06:fe:66:54:9c:
                    83:ca:c7:88:d7:17:1d:22:c9:ca:bf:16:09:7f:5e:
                    e1:ee:c3:4d:15:fe:7b:e9:48:40:c2:20:f7:7c:b0:
                    dd:bb:33:df:6a:63:05:54:4f:bc:f5:0d:7f:bd:9a:
                    48:41:20:7e:29:0b:89:55:63:0d:bf:e5:4f:94:46:
                    61:4a:52:8a:6b:fd:69:28:c5:81:b1:6f:e2:f8:c0:
                    7f:89:05:a4:8f:97:dd:66:20:e7:62:d7:37:cc:c8:
                    45:ea:c6:6b:bf:68:03:68:04:51:df:2f:4d:29:7d:
                    ab:26:4a:f4:a3:26:1a:0e:f6:68:d7:68:11:b7:21:
                    72:2d:fd:f6:6c:e9:e2:9d:c2:1a:5b:12:83:a9:b9:
                    a9:03:4c:d4:e7:a7:2c:3e:37:b6:c0:9e:f8:b6:43:
                    4f:81:ac:17:ff:b9:62:d0:fa:85:10:db:33:de:07:
                    bd:24:82:46:4d:02:2b:7a:60:15:33:87:c8:7c:e8:
                    cf:17:6b:62:4b:c7:d6:d5:06:7a:08:3e:5b:c6:c1:
                    9c:09:d7:a1:f3:c2:cc:63:84:83:8f:04:08:fe:f6:
                    82:14:a3:5d:bd:42:5e:a2:8d:b4:bb:d5:d1:52:e4:
                    fc:06:b1:cd:e4:0e:c5:41:bf:d5:ee:27:f5:af:c1:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:3D:86:80:B4:A8:24:69:B9:14:7E:15:1B:42:E7:D4:D6:55:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e792202-fab5-4edf-9240-4c28ddc955d3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e792202-fab5-4edf-9240-4c28ddc955d3/51bd6b25bca04c4927105828dced1067fd2b5b6e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.224.0/21
                IPv6:
                  2801:0:2000::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264665

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:56:b8:17:f3:f0:53:3a:3c:42:39:a5:d0:fa:7a:09:8c:
         04:a1:1d:b7:fd:86:ba:05:82:47:b8:e6:e5:c6:27:3f:84:a2:
         54:ce:b6:74:12:cd:c4:36:7f:49:e5:54:c4:96:cb:0d:d7:9a:
         71:02:34:37:76:dc:42:96:39:af:4e:64:99:9a:d5:c4:d6:cb:
         cb:f0:b8:88:e1:e4:80:8e:a0:cf:f8:b0:52:14:55:8a:95:29:
         22:bd:bc:e4:e0:8a:2e:3b:51:ac:d4:b5:d4:86:2f:1f:45:20:
         e2:e7:d6:31:54:1a:af:ca:b2:2c:f9:83:7c:e0:4f:39:2f:d5:
         4d:02:e2:a4:af:26:9a:1e:a8:89:03:d2:d9:e8:c2:63:40:52:
         04:e8:8a:9a:43:d9:d0:1e:28:ba:eb:f0:a4:b7:f3:ab:f5:fa:
         34:6c:7b:6e:f3:81:b4:68:d0:28:f1:7b:a5:e2:35:a7:89:6d:
         7c:93:a4:fa:a0:e8:6d:98:b9:cb:b6:86:8d:e2:36:99:8a:54:
         4c:45:90:1a:77:be:b2:63:62:63:38:9a:14:d0:1c:3b:c4:26:
         8c:86:a2:80:b5:6b:d5:85:aa:29:f4:02:65:de:8a:b1:82:ad:
         38:b7:93:9f:38:f0:f1:39:36:1e:9a:3e:3b:37:fc:98:19:23:
         7b:d9:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----