Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
File:                     717bd4c365c04f4dd5d39ac6532c267af688e267.cer (raw, json)
Hash identifier:          q34IIesi2SE8gdgTT6YfOaRxSbq8QM+mDzYRJPRtHbc=
Subject key identifier:   37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB73FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:24 +0000
Certificate not after:    Tue 06 Feb 2024 19:18:45 +0000
Subordinate resources:    AS: 265819
                          IP: 45.6.8.0/22
                          IP: 2803:a9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14382074 (0xdb73fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:24 2017 GMT
            Not After : Feb  6 19:18:45 2024 GMT
        Subject: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:af:dc:41:e7:b6:90:0c:d6:98:7e:a1:fd:8b:
                    76:d9:12:19:e6:92:d5:b3:e6:78:79:8a:1b:a9:f7:
                    62:c3:51:5d:dd:2f:2c:51:50:3a:0a:3f:e9:28:56:
                    4b:7c:0e:f3:a7:69:98:22:5d:cf:78:03:c0:75:0a:
                    ce:7b:41:47:2c:4f:ee:5b:04:29:e9:0c:f3:7f:74:
                    e2:18:90:9a:8c:cf:22:0c:5d:e3:64:75:f2:28:d5:
                    f3:63:ff:93:cd:11:ef:3b:dd:39:15:c2:58:81:74:
                    b8:30:e7:54:20:66:04:23:a0:f1:2c:f5:0e:88:4c:
                    68:09:d6:16:00:37:f6:5f:fc:8b:90:9a:e1:35:09:
                    50:26:66:6b:54:16:3d:9d:b5:d3:4a:2c:11:1b:af:
                    04:9b:f2:d2:65:2a:31:aa:9d:63:63:7e:b3:6c:74:
                    6b:f9:8a:fb:a4:f3:b1:7c:f1:29:9d:f7:44:57:e4:
                    d9:54:7a:e1:c5:51:c2:32:cf:a6:0d:20:b3:11:a9:
                    33:3d:e8:39:04:67:dd:e4:fe:47:b7:d1:c4:e8:a4:
                    9a:0b:44:f0:db:e5:b7:4f:a0:70:08:fa:04:48:aa:
                    33:36:b0:75:b3:ae:ab:53:52:a7:61:b5:c9:c7:65:
                    cf:d4:72:51:f3:0d:06:40:cd:cc:9c:4c:62:fd:63:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/22
                IPv6:
                  2803:a9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265819

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:7c:4c:81:20:39:93:86:d7:6e:1d:4c:2d:ed:43:cb:25:
         85:d4:61:9b:78:0c:93:b9:09:55:4c:15:98:9e:55:d8:88:b7:
         05:ad:47:fd:89:90:78:b7:99:c9:ae:c1:6b:b9:9e:78:ec:59:
         eb:70:86:2c:db:69:6f:e2:76:c1:e6:92:fc:64:a5:07:65:6a:
         56:81:1b:a8:5b:5e:e7:40:54:a6:4d:17:c3:fb:26:26:04:34:
         c2:06:2f:d0:c9:f0:3d:17:b0:c9:cf:2a:13:6c:4d:d3:7b:e0:
         9c:85:05:ff:65:e4:dd:57:8a:3c:1f:f9:68:2f:cd:c8:9d:62:
         c2:ef:a0:62:4c:a5:84:99:0b:32:33:21:5d:c0:73:c8:d7:e0:
         f6:4d:d7:21:8d:bd:18:99:79:b3:cf:42:01:e4:1a:45:c6:1c:
         8e:28:67:c5:79:3b:4d:39:a1:cf:49:a5:86:f4:3e:fc:ae:cb:
         01:f7:03:43:0a:ed:1f:11:54:d0:5b:a2:a4:18:51:15:60:2b:
         d4:8c:e1:ec:2f:2f:ff:c4:c5:26:a2:bc:a4:66:0f:79:02:3d:
         00:bc:f7:d4:ec:98:2b:bc:6e:79:18:64:2c:97:be:d8:5a:68:
         8b:80:ba:23:ec:83:09:be:d2:08:c8:80:a4:42:80:a8:1e:54:
         ff:4e:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----