Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5975b61013804d0b5c77d3a24e365daaa3c78573.cer
File:                     5975b61013804d0b5c77d3a24e365daaa3c78573.cer (raw, json)
Hash identifier:          oHTjSVJsrcIZ4lgGby4IZ5QRbz2DX0g7i9gqX+umWYg=
Subject key identifier:   A8:D7:72:13:9E:71:41:A0:43:36:62:50:F2:51:4D:78:4D:68:65:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7A7D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/5975b61013804d0b5c77d3a24e365daaa3c78573.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:22 +0000
Certificate not after:    Wed 29 May 2024 16:23:43 +0000
Subordinate resources:    AS: 52279
                          IP: 179.51.247.0/24
                          IP: 181.224.96.0/19
                          IP: 186.148.128.0/19
                          IP: 2803:900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15181784 (0xe7a7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:22 2017 GMT
            Not After : May 29 16:23:43 2024 GMT
        Subject: CN=5975b61013804d0b5c77d3a24e365daaa3c78573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:3e:40:30:aa:56:06:16:0a:e9:e5:b2:74:
                    e9:93:eb:3a:03:01:59:e5:b1:31:95:01:c4:86:e0:
                    e5:1b:a4:4d:8c:45:5a:5e:97:de:a6:8d:7e:ae:71:
                    5a:ed:fb:78:7a:4a:0a:3c:10:b5:ce:ee:e5:1f:e0:
                    7a:26:fa:50:c8:38:de:78:51:50:57:08:63:9f:da:
                    24:f8:eb:af:16:0d:60:54:92:a6:ef:f2:6a:89:2d:
                    d7:65:a7:d6:d4:3e:45:87:14:f3:67:3f:2c:28:40:
                    77:23:f6:04:cc:62:1b:e6:2b:99:bb:0e:52:ea:d0:
                    be:fb:94:12:c8:45:22:8d:a9:26:31:f1:92:4c:c7:
                    2d:8e:a9:84:5b:2f:7d:cf:b7:7c:71:c1:47:0b:da:
                    bb:d9:66:73:db:a2:dc:9f:15:e0:e4:ff:37:ed:0b:
                    da:71:1e:2e:ac:d6:f9:df:6d:bd:3f:b8:36:38:87:
                    84:7c:95:5a:91:05:26:0e:73:cb:d0:a1:da:cd:16:
                    18:df:42:fc:c4:d0:b4:14:03:f4:2d:4a:09:83:71:
                    5e:76:b9:5d:15:5c:e3:87:8f:d9:a2:8d:d8:47:55:
                    97:0a:13:d7:fd:45:57:c3:22:e5:e2:c4:0e:86:2f:
                    d3:36:84:ea:6b:eb:94:8c:71:aa:cf:57:61:b4:c9:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D7:72:13:9E:71:41:A0:43:36:62:50:F2:51:4D:78:4D:68:65:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/5975b61013804d0b5c77d3a24e365daaa3c78573.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.247.0/24
                  181.224.96.0/19
                  186.148.128.0/19
                IPv6:
                  2803:900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52279

    Signature Algorithm: sha256WithRSAEncryption
         08:12:b3:a8:ce:c7:dc:a2:63:eb:32:5b:a5:a8:71:2e:79:e5:
         0c:e6:73:cc:65:16:73:e3:04:a4:94:59:cb:a6:75:f7:cb:80:
         b7:c4:ae:f9:87:c5:2b:59:2e:3b:59:b4:53:b7:50:0c:dd:d9:
         81:b4:b2:a1:a3:ef:a4:14:89:ff:ec:41:47:e0:6f:ff:b8:24:
         40:a8:59:c2:74:0a:17:9b:e2:e2:0d:c0:f4:24:9a:22:60:b1:
         63:20:79:d0:d0:65:9f:a8:94:6d:91:25:e1:6b:35:9a:d2:ab:
         ae:c5:5a:14:46:59:ba:f0:5f:12:8b:d9:c6:dc:31:c0:c5:61:
         24:5e:a0:7a:20:8d:81:f1:97:f2:ae:ff:96:b4:0a:6b:7a:f5:
         c9:38:d1:3f:55:8b:46:ab:6e:4b:b8:bc:9a:f1:4c:ec:b2:b0:
         40:9e:f5:d8:19:66:29:07:4f:5e:37:b2:43:99:10:41:ca:b0:
         bc:91:a8:88:c7:76:c1:30:94:2e:c9:67:6c:d7:e8:e0:80:b8:
         0b:17:a3:cb:4e:9f:8a:0e:d8:9b:31:15:be:1a:dc:6a:9e:d7:
         c8:09:37:4e:df:37:2d:36:40:e2:ed:0e:b7:c2:6c:b5:30:8d:
         35:9d:5b:5b:50:2a:3d:cb:18:bb:0e:c5:29:ec:46:b2:4c:b4:
         d5:58:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----