Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
File:                     592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer (raw, json)
Hash identifier:          x3UJtb3KB5Rv6Kj+J0GkMAi1Zp6QLDpKt7ZPLBdl/f8=
Subject key identifier:   C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF0FD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2017 17:24:12 +0000
Certificate not after:    Tue 19 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 265724
                          IP: 45.6.224.0/22
                          IP: 2803:9dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14618584 (0xdf0fd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 27 17:24:12 2017 GMT
            Not After : Mar 19 06:00:00 2024 GMT
        Subject: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:86:a0:1f:95:d2:96:92:8d:84:01:0b:44:
                    b3:5c:fe:8b:be:46:b4:7d:ce:a4:f1:c1:21:77:9c:
                    ce:5c:25:e2:ea:79:0d:86:50:63:67:a2:6b:3b:de:
                    2b:37:bb:cf:3e:e3:98:b7:3c:38:58:78:23:76:c1:
                    d8:92:80:08:b0:3a:c4:4b:29:f5:0a:4d:37:fe:4a:
                    eb:cd:f5:43:77:3e:45:73:5f:1f:1b:19:7a:38:ef:
                    41:06:3e:d9:5b:b0:7e:57:35:ea:87:52:2f:ae:ef:
                    b5:a8:ca:ee:fc:a0:ab:34:2f:43:34:09:29:1b:46:
                    ad:a2:fd:0b:be:4a:66:b2:a7:c7:1c:8f:74:e6:71:
                    15:91:7d:1a:8f:e5:72:9e:f5:9f:5e:29:30:4f:af:
                    6b:ba:5f:a6:48:8d:6b:c6:13:0d:3b:2c:d0:dc:0e:
                    a1:69:bc:32:c0:ac:05:69:8f:3f:8b:6e:a3:81:f7:
                    5b:c2:d4:42:b2:6e:4c:fb:b0:28:38:ba:7a:cb:20:
                    20:bd:64:f7:57:ff:a9:04:21:c9:39:5b:a3:9a:b4:
                    5d:d7:60:8a:95:fb:18:2e:98:40:d0:5e:58:7d:ba:
                    f5:dc:ac:d4:6d:52:21:76:d6:a7:86:a7:08:fd:dc:
                    33:97:d1:43:44:65:13:1f:0c:82:73:8f:5c:c5:d5:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.224.0/22
                IPv6:
                  2803:9dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265724

    Signature Algorithm: sha256WithRSAEncryption
         c3:c0:8a:75:72:5f:99:47:7c:a5:4f:33:77:1e:cd:74:70:c6:
         32:02:66:eb:ae:6e:d5:85:c6:52:f8:1e:5d:7f:7f:d7:63:af:
         b0:39:59:e9:0a:cf:bc:02:36:3b:95:03:21:05:f1:93:ae:18:
         f9:b6:74:a0:47:ba:71:75:22:5b:aa:bc:38:f2:0f:89:3a:b1:
         cd:67:6e:e7:37:7f:ec:97:7a:66:53:8b:9e:bc:2a:86:37:23:
         c8:40:e2:77:6d:17:a3:2b:21:ed:9c:82:ac:56:5a:45:00:82:
         58:9f:96:12:ed:8e:60:d3:fd:ad:37:b1:43:c2:d0:83:c9:e1:
         81:a4:1b:20:d1:91:e0:0c:90:9f:bf:27:e2:3b:41:0b:60:a7:
         0c:8a:06:17:24:9c:f3:31:8c:4a:4b:7a:75:ef:f7:9c:fd:11:
         4b:18:04:51:6f:88:d3:a9:b2:3d:38:50:5e:32:8e:cc:1f:66:
         42:11:2c:f9:8b:d4:d1:36:aa:52:1b:ef:5b:b5:d3:5b:e0:a6:
         fe:94:89:e3:e6:67:70:8a:6c:53:05:dd:6d:de:52:9b:9e:47:
         e6:c8:78:fa:ec:04:7a:df:f8:5c:83:3c:62:0e:a7:c6:c5:fc:
         8e:1c:63:03:b5:d5:b2:53:89:e3:dd:a9:81:78:49:e0:e4:66:
         d8:5c:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----