Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/651958ede4bb203b947582503c754f1f82a68b2e.cer
File:                     651958ede4bb203b947582503c754f1f82a68b2e.cer (raw, json)
Hash identifier:          DJB/TUtc4ULKTmlEmI02V5Cc4vBOkiGMHfcW/3dgor4=
Subject key identifier:   BC:04:89:C5:FE:CE:99:38:0D:E8:B5:7B:C3:64:83:EA:39:27:0B:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC645C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/addbeb31-942b-41f1-ab65-c73dcd136708/651958ede4bb203b947582503c754f1f82a68b2e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/addbeb31-942b-41f1-ab65-c73dcd136708/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 07 Jul 2018 09:04:00 +0000
Certificate not after:    Sat 17 Feb 2024 20:16:56 +0000
Subordinate resources:    AS: 266777
                          IP: 45.235.98.0/23
                          IP: 160.20.247.0/24
                          IP: 2803:1f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14443612 (0xdc645c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  7 09:04:00 2018 GMT
            Not After : Feb 17 20:16:56 2024 GMT
        Subject: CN=651958ede4bb203b947582503c754f1f82a68b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:17:e4:31:e6:2f:7d:ef:fd:31:30:bc:3f:
                    42:a1:bb:8f:e4:3d:60:33:91:33:a2:c5:35:42:4b:
                    14:80:49:45:d6:88:51:e0:12:76:86:1a:2b:2c:98:
                    56:66:73:c9:17:da:42:2f:55:56:b1:38:bd:3f:99:
                    86:2f:e2:30:0f:6c:b9:92:87:de:0f:44:c7:7d:8a:
                    1a:95:37:75:9a:71:00:2a:d8:34:13:85:e9:4b:08:
                    ed:0c:3c:25:83:72:dc:a5:ce:56:15:1c:4a:d3:d3:
                    de:3d:44:f2:a5:4a:17:41:29:a9:ed:13:ad:f5:b5:
                    b3:b4:88:e2:75:67:95:d0:76:5c:a4:fa:98:7e:de:
                    6c:15:b0:9c:79:0a:b0:4a:1e:04:e2:56:04:58:04:
                    82:2f:6a:2c:0b:3b:cc:b5:25:ca:01:98:ec:20:3e:
                    1b:eb:e8:47:b6:e4:98:ee:4f:d2:05:fa:13:52:3f:
                    37:ee:27:08:e0:f2:a7:b5:1d:c7:89:f7:60:30:12:
                    74:ce:88:c9:8c:b3:1b:44:e6:cc:53:a3:69:5b:dd:
                    70:6f:51:52:4a:44:bb:60:58:b6:bf:26:03:ed:a8:
                    c1:6d:d6:2e:61:67:ce:43:a3:20:1a:bb:4f:c5:3e:
                    a1:ea:a3:58:dc:f7:b3:96:74:06:49:01:09:87:97:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:04:89:C5:FE:CE:99:38:0D:E8:B5:7B:C3:64:83:EA:39:27:0B:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/addbeb31-942b-41f1-ab65-c73dcd136708/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/addbeb31-942b-41f1-ab65-c73dcd136708/651958ede4bb203b947582503c754f1f82a68b2e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.98.0/23
                  160.20.247.0/24
                IPv6:
                  2803:1f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266777

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:c9:55:a1:21:37:74:18:ef:bf:b5:1f:78:62:db:08:22:
         cb:f6:f8:da:d4:24:37:d0:5d:3d:2c:28:70:1a:84:b9:91:e6:
         f6:ed:e8:ae:c9:4f:a2:16:41:f2:bd:d5:e9:1a:13:1b:18:c0:
         3c:dd:d8:5f:5b:1d:97:87:0b:d1:28:2c:fa:0b:6d:51:72:ad:
         9f:b1:bc:54:da:c3:f0:22:e3:f6:74:3c:26:26:b2:75:d0:ae:
         69:05:08:29:94:e8:42:d6:fe:27:fc:05:7f:64:8e:d3:57:21:
         9d:3a:f9:3f:1b:7a:97:45:f7:7d:4d:f8:f2:64:d6:94:40:32:
         e1:6b:fd:27:96:04:fa:8d:06:22:18:9c:b8:8f:b1:6f:97:37:
         94:35:5e:fe:20:a3:1f:b5:16:bf:99:8c:42:20:1b:3c:fc:67:
         fc:09:a4:42:15:ff:b8:98:e9:ae:3e:d7:cb:35:bf:ad:89:f9:
         7e:7d:9d:40:b8:1d:40:97:68:8a:fc:41:02:6d:e4:e3:ae:17:
         f2:cd:c0:2e:5e:c5:02:8f:a1:c3:ac:f3:62:d6:5d:7f:8a:36:
         23:91:11:29:dc:b7:bb:95:53:df:55:5e:2c:1c:15:1b:fc:f9:
         4c:26:ce:b1:4b:bd:da:3e:da:21:98:ec:fb:7c:e6:48:7c:bd:
         e9:1e:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----