Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/761577f750dd5c1869cff694003f5100c983c02d.cer
File:                     761577f750dd5c1869cff694003f5100c983c02d.cer (raw, json)
Hash identifier:          piDf++Y1iRUi5kZdpu4aDwcZEAT5PrgswicoU7RXhoc=
Subject key identifier:   0E:16:8A:50:A0:9D:68:6A:A9:7F:28:E3:12:47:AB:E6:5B:10:94:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE7217
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8945b6f3-2ee2-4a4f-8216-f41467118d4b/761577f750dd5c1869cff694003f5100c983c02d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8945b6f3-2ee2-4a4f-8216-f41467118d4b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:23 +0000
Certificate not after:    Tue 12 Mar 2024 23:32:04 +0000
Subordinate resources:    AS: 263234
                          IP: 192.100.171.0/24
                          IP: 2801:12:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14578199 (0xde7217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:23 2017 GMT
            Not After : Mar 12 23:32:04 2024 GMT
        Subject: CN=761577f750dd5c1869cff694003f5100c983c02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:b3:28:70:07:0b:81:1f:96:4a:43:cf:2b:
                    1f:59:93:de:9c:97:0c:f2:7f:c0:92:b7:c2:9c:06:
                    cf:28:bf:e4:eb:39:13:1e:25:56:c0:3f:df:3b:dd:
                    3e:90:35:74:53:9e:d2:09:ed:9c:60:00:82:a6:2b:
                    6b:92:d1:50:c1:b3:02:43:ca:2a:fd:ca:dc:3e:ea:
                    13:03:3a:cd:0d:04:c2:6b:9f:71:61:7f:70:d5:54:
                    d1:53:10:0f:b3:44:35:24:f3:09:6c:70:3f:6e:ab:
                    fb:7b:c5:d6:01:37:db:85:af:d8:fc:42:00:0b:fa:
                    50:e1:75:72:4d:29:cc:9f:4a:1c:6e:60:ae:28:9e:
                    96:13:15:06:d2:cc:25:3d:0c:23:2a:e4:f6:bf:db:
                    58:21:59:65:b6:97:ec:78:49:9e:14:1f:5f:38:1c:
                    51:56:8b:44:d2:b3:21:52:6f:31:68:8b:da:47:59:
                    59:a5:fe:57:4c:73:83:cd:c1:ae:2a:ff:ca:67:8c:
                    bc:04:51:59:32:e9:cf:da:5e:5e:38:e4:b7:b9:65:
                    de:68:18:17:5e:01:2a:62:33:1a:55:0a:fe:da:1e:
                    ac:54:c6:27:b7:4e:47:77:73:38:59:9e:36:31:4f:
                    fc:2f:f8:6d:c2:c9:6b:9e:78:8d:10:ca:13:10:c9:
                    3c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:16:8A:50:A0:9D:68:6A:A9:7F:28:E3:12:47:AB:E6:5B:10:94:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8945b6f3-2ee2-4a4f-8216-f41467118d4b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8945b6f3-2ee2-4a4f-8216-f41467118d4b/761577f750dd5c1869cff694003f5100c983c02d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.171.0/24
                IPv6:
                  2801:12:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263234

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:38:fa:0a:c2:e2:5a:f3:a7:8e:7d:be:d7:44:e6:51:e2:
         19:a4:e4:f9:9c:47:a3:62:af:90:99:ca:df:6f:fc:91:91:2c:
         8a:af:32:9b:92:40:0d:e0:9e:3b:01:a7:a7:bc:12:03:75:68:
         40:c3:10:ec:16:cb:43:75:93:bc:07:60:c4:6d:d5:92:a1:b6:
         5b:50:d1:90:29:24:a6:98:29:0e:2d:51:31:c1:b6:90:c6:2a:
         6c:e9:a0:df:a3:ba:38:87:8f:2f:41:ad:90:13:d1:7e:38:aa:
         91:3a:5a:74:38:4a:de:b5:b2:15:b5:1a:bc:b9:24:b2:73:96:
         08:e4:d5:be:45:91:13:de:1f:7c:ec:33:b3:0b:91:3b:84:54:
         de:de:7d:ae:52:72:48:f8:45:cb:26:1a:6d:26:dc:3b:50:65:
         aa:6d:83:e2:79:db:36:f6:c3:e3:7f:e1:51:6b:6e:de:b5:98:
         e0:09:41:5c:ac:89:a5:19:ce:1d:d2:e8:b5:48:f9:6e:c5:d0:
         4e:9e:1d:6e:35:69:1f:b0:18:4a:fa:30:ed:21:48:a5:b3:79:
         49:74:9a:91:35:ce:8b:f2:fc:89:af:9e:d8:28:35:13:ca:f3:
         21:14:59:82:dc:9d:c3:dc:f8:3e:23:0c:b6:44:a8:8e:71:e8:
         75:0a:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----