Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71551dc34af40822e5acdd443b22d6450fe5317b.cer
File:                     71551dc34af40822e5acdd443b22d6450fe5317b.cer (raw, json)
Hash identifier:          Mm4n6FRDgdl+uzaFjpfpmHw8LN6frCuySP43nTyA17s=
Subject key identifier:   7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC9CE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 Apr 2018 22:45:27 +0000
Certificate not after:    Tue 20 Feb 2024 15:11:35 +0000
Subordinate resources:    AS: 266782
                          IP: 45.234.84.0 -- 45.234.86.255
                          IP: 2803:3f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14458081 (0xdc9ce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 22:45:27 2018 GMT
            Not After : Feb 20 15:11:35 2024 GMT
        Subject: CN=71551dc34af40822e5acdd443b22d6450fe5317b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:d2:18:4c:51:c8:fd:9f:9e:c3:ab:44:b4:
                    cf:5e:05:36:f9:86:91:f4:78:a6:ea:94:b1:10:3b:
                    41:03:22:b7:29:54:bd:0a:ca:4d:52:b5:26:43:d0:
                    8d:c6:a1:83:ba:a6:37:65:1d:a1:4b:c3:c0:d1:3c:
                    eb:ed:4f:1d:57:ec:c4:7a:8a:e3:a6:29:bb:0c:d6:
                    e9:33:89:52:34:92:b4:6d:59:f0:73:b6:bf:96:ee:
                    a4:88:03:19:1e:e2:61:e3:15:49:00:5b:ac:82:c2:
                    86:20:c8:e0:ac:e5:2b:84:66:9c:8f:cc:5d:a6:3a:
                    af:1e:10:a8:be:4c:5c:ed:f2:2b:3e:8f:21:21:9b:
                    32:e9:4a:7e:90:66:ca:72:eb:0c:5b:f8:da:d0:c0:
                    f5:e6:e2:cd:45:e5:32:c3:52:c3:5e:6b:09:00:a2:
                    20:87:e3:b1:1b:8c:7e:88:b2:32:ec:6e:e3:f1:a8:
                    92:0a:6b:91:2a:f1:5c:df:e3:d1:8b:9d:ba:d9:88:
                    b2:e0:af:68:41:15:98:55:00:07:ad:e3:46:06:57:
                    cb:95:e7:0a:e2:e1:30:ff:50:53:0d:fe:2e:66:6c:
                    17:96:d4:2a:a4:fe:2f:3b:05:d7:b3:92:07:eb:44:
                    f5:b5:9a:4d:bf:f2:db:a0:24:8c:35:be:86:a5:2b:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.84.0-45.234.86.255
                IPv6:
                  2803:3f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266782

    Signature Algorithm: sha256WithRSAEncryption
         28:26:31:8e:69:4f:fe:3a:45:14:2d:85:2d:cb:6c:57:24:b5:
         4b:d0:a5:b9:b8:6e:7f:d6:50:20:7d:33:31:13:13:15:4b:fa:
         3d:75:76:9c:20:4a:36:3b:78:b4:92:03:02:79:40:e0:0c:de:
         39:8c:10:25:10:cb:53:1f:0c:5e:d2:15:f3:ef:55:52:16:34:
         f6:ac:d0:e0:bc:b3:7c:9f:54:2a:e1:46:59:f4:46:10:7a:e8:
         4a:8e:5a:8b:2b:29:da:84:d7:62:42:d9:0a:fe:99:be:b8:11:
         61:94:73:65:91:78:20:77:27:84:d5:c0:e2:66:5d:39:d1:1b:
         05:36:b1:d3:94:5c:58:72:4f:10:37:52:f4:d3:1e:43:3b:33:
         d6:11:1f:74:a1:e0:61:4b:61:c2:d7:29:7b:7b:40:80:7d:72:
         90:67:78:6a:5b:77:f8:f2:f7:13:ee:25:7d:5f:73:1f:c8:b2:
         91:8e:e5:4f:e2:fe:d9:08:69:a4:80:5b:e2:9f:7a:0d:81:17:
         52:77:d7:3f:3a:1e:15:b1:a3:9e:87:23:8d:6b:bf:12:9f:b6:
         30:df:87:65:fd:4b:51:8d:4d:ff:4e:7d:8d:b1:46:74:f7:6a:
         4c:90:1d:00:77:70:cc:90:af:ce:ad:71:bb:66:65:9f:6a:d5:
         30:d6:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----