Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer
File:                     63c3a21c71007155e6b7b013a30357703347965c.cer (raw, json)
Hash identifier:          rMq1FxK9pQkuPeuM/LObg0tsBAkqbf8r7LcpLYO9Gmo=
Subject key identifier:   DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1D4AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/63c3a21c71007155e6b7b013a30357703347965c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:48 +0000
Certificate not after:    Wed 14 Aug 2024 16:23:45 +0000
Subordinate resources:    AS: 52510
                          IP: 138.219.56.0/22
                          IP: 170.233.192.0/22
                          IP: 170.245.48.0/22
                          IP: 2803:5e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15848623 (0xf1d4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:48 2017 GMT
            Not After : Aug 14 16:23:45 2024 GMT
        Subject: CN=63c3a21c71007155e6b7b013a30357703347965c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:49:25:85:ee:b4:ab:44:a0:db:15:d2:40:
                    bc:3e:9f:23:bf:6f:82:2d:52:16:37:8a:ff:85:e6:
                    a0:44:7d:98:6d:a4:50:2d:dd:8b:6f:83:4f:9f:e5:
                    99:12:0f:97:42:d5:9a:51:69:6b:6f:17:2a:3c:37:
                    98:3f:9d:af:aa:f3:3c:b4:72:7e:5b:fc:2d:22:10:
                    34:64:d3:1b:a2:62:51:c4:cf:61:67:09:2b:80:20:
                    99:08:92:c7:cb:e9:6e:b4:d9:e3:9f:45:10:e4:e4:
                    b9:a1:6f:c9:06:f5:56:c0:43:9a:b6:c3:d3:23:86:
                    7d:8d:ff:9d:a2:f9:4b:08:8b:7d:e1:9e:b2:fc:2d:
                    cd:ca:d7:de:05:91:10:59:15:9d:85:74:08:08:ff:
                    2c:de:5e:e7:fb:06:ff:27:63:24:7e:4e:5b:0c:da:
                    43:3f:9a:d1:c7:49:33:0b:2c:08:a9:ba:ba:86:56:
                    77:ac:d6:32:ba:c6:8b:6d:71:42:d6:ac:8b:c3:17:
                    a3:c9:a6:ac:54:a7:bc:d5:0c:77:55:1e:90:b3:47:
                    81:95:19:79:5a:db:d8:0d:16:ac:0e:10:86:47:1d:
                    24:5b:14:a0:0e:51:bb:64:d2:30:7b:21:4e:d7:91:
                    20:8d:20:fa:b4:dc:16:c3:30:2e:6d:c1:66:0b:d1:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/63c3a21c71007155e6b7b013a30357703347965c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.56.0/22
                  170.233.192.0/22
                  170.245.48.0/22
                IPv6:
                  2803:5e40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52510

    Signature Algorithm: sha256WithRSAEncryption
         95:49:21:3d:0e:0c:fd:e7:ee:66:2e:f9:e6:33:29:ee:96:bc:
         a5:10:63:8a:b3:c9:92:3f:2a:79:3d:fd:23:61:2e:00:9d:94:
         78:b1:dc:54:79:15:93:ec:6e:ef:be:6a:d7:74:05:80:9c:d4:
         aa:2b:46:e2:40:59:be:9b:3a:9c:b2:43:4b:d9:c9:80:9a:cc:
         e4:8b:fd:4c:1f:d3:28:c4:58:55:9b:0d:74:78:63:4a:75:72:
         75:b7:80:7f:bc:1d:b7:f8:9a:c2:2b:8c:b1:07:c9:fa:a3:f4:
         06:53:d6:62:6e:73:b8:5d:d1:76:70:f3:64:0b:13:a0:d3:ee:
         94:f0:a5:e9:59:01:97:72:f5:1a:bb:38:46:d8:16:10:80:fe:
         c2:11:df:1d:f8:70:9a:41:66:be:b1:d3:0a:1d:09:fa:46:c7:
         76:e3:73:2f:86:4b:ab:93:c9:43:d2:fa:b4:44:c2:cc:45:60:
         ac:e2:1d:9f:ef:47:b2:1f:3e:b9:cc:79:0b:1e:cf:8a:b3:52:
         99:56:cf:5f:d1:b9:02:75:d8:5c:66:b5:76:e0:b5:46:ca:1b:
         a8:2f:70:85:f5:4f:ce:25:8d:01:30:99:56:73:3a:f7:e6:51:
         48:d4:1f:50:17:35:03:ca:3a:15:f1:13:c4:fc:c8:fb:e3:16:
         90:16:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----