Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer
File:                     6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer (raw, json)
Hash identifier:          S7QBLDmB6pL5AUUd20rE+vIRqUq9bJmHseZsIC+iq8Y=
Subject key identifier:   55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD29A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:27 +0000
Certificate not after:    Mon 26 Feb 2024 22:18:52 +0000
Subordinate resources:    AS: 52242
                          IP: 143.137.24.0/22
                          IP: 190.181.128.0/18
                          IP: 2803:1640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14494121 (0xdd29a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:27 2017 GMT
            Not After : Feb 26 22:18:52 2024 GMT
        Subject: CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:40:17:8c:0f:92:47:d7:f0:96:75:98:dc:
                    dd:0d:e9:43:8f:10:6e:b3:29:85:9e:cb:56:54:96:
                    2b:0c:ec:5d:c2:8b:2c:97:5c:fb:96:bd:9f:6d:27:
                    a0:f9:e1:c0:43:b5:92:e2:31:d0:ad:cc:6d:08:1e:
                    18:6c:dc:a5:ad:39:4e:1f:eb:c6:d3:99:2d:f9:2b:
                    c6:07:fc:0c:5a:62:e0:09:92:a3:4d:ed:63:fe:43:
                    6e:c6:8a:90:56:e2:90:68:4d:64:8e:b2:34:25:eb:
                    32:a0:a3:c9:ad:8e:20:1c:4c:f8:66:13:36:ae:3a:
                    72:a6:df:9e:06:c6:07:be:06:15:07:0f:7e:36:19:
                    5c:3c:05:cc:5e:9e:a8:a4:2d:9b:8b:26:9e:7d:57:
                    8a:9f:cf:30:ee:d1:7f:fa:86:d5:41:b5:0d:21:b9:
                    b7:54:0c:67:0c:bb:78:cf:7c:8e:83:d5:25:bf:e5:
                    cd:b7:5e:ae:96:8c:1d:4a:94:97:80:d8:f2:a7:b0:
                    84:2c:b5:ce:78:61:21:16:b1:f3:3d:36:a1:5f:df:
                    d4:cf:4a:3c:cd:0d:fb:06:59:fe:d9:f1:36:1c:80:
                    08:d2:13:a5:a2:d0:c9:8b:38:14:bf:59:7a:07:3f:
                    14:f7:dc:16:ab:cf:72:9c:72:a9:6f:bc:ea:1f:b3:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.24.0/22
                  190.181.128.0/18
                IPv6:
                  2803:1640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52242

    Signature Algorithm: sha256WithRSAEncryption
         37:69:cb:20:c4:6a:c8:0c:da:99:2f:e3:df:0d:0f:a1:ef:91:
         a7:5e:6a:b6:51:bb:ce:5b:9a:9e:b2:70:49:9f:ea:c1:17:1b:
         c6:50:a3:cc:a8:08:44:b5:cc:32:df:1d:d0:a8:cb:b7:83:d2:
         b1:9e:9e:4b:36:e2:2f:e8:93:91:4d:02:6b:f0:e6:0c:6a:07:
         68:6f:51:dc:49:0d:ff:51:24:8f:8f:fa:18:a7:c0:94:05:17:
         60:ce:64:c8:5f:58:f3:67:77:3a:2f:b6:82:f3:53:3d:bf:59:
         f3:2a:a9:ef:f8:05:80:55:eb:fc:9b:42:33:d7:ad:ad:21:50:
         10:53:d6:a4:99:35:9c:9f:c0:26:b7:d7:69:5f:bb:90:63:56:
         90:9f:b4:d9:07:b4:d5:77:44:ad:1d:df:79:7e:84:a9:12:3e:
         0d:89:96:1c:d6:bf:3c:da:e1:92:fc:de:41:bc:dc:5d:de:66:
         25:46:13:b5:4f:2d:2f:11:e6:be:bd:41:c0:32:21:f3:29:c2:
         26:c4:51:f0:a6:3a:92:51:a5:5c:07:f6:60:c8:43:56:0b:b4:
         4e:e0:2c:31:4b:80:45:b9:fc:5a:da:63:e2:1b:ef:14:89:ed:
         af:59:81:5e:92:a6:0f:42:be:1a:54:3f:00:6f:8c:54:30:36:
         65:b8:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----