Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer
File:                     790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer (raw, json)
Hash identifier:          J3AvgqFVTOystclU6l561hfLPtw+n0col6QhacF4344=
Subject key identifier:   0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9043F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Sun 07 Jan 2024 14:00:00 +0000
Subordinate resources:    AS: 27813
                          IP: 170.238.124.0/22
                          IP: 181.199.144.0/20
                          IP: 190.2.96.0/19
                          IP: 190.151.160.0/20
                          IP: 200.3.216.0/21
                          IP: 200.81.120.0/21
                          IP: 2803:9f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14222399 (0xd9043f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Jan  7 14:00:00 2024 GMT
        Subject: CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:12:09:7f:38:79:ec:3d:cf:97:e5:7c:22:
                    d0:a7:3d:a5:46:d3:a0:0e:6e:da:d8:48:0a:5a:0c:
                    16:9a:76:03:b1:31:86:81:a8:75:1c:8a:4c:4c:14:
                    d1:4f:16:64:e2:08:ab:80:35:b9:24:5d:78:18:ae:
                    96:e4:e4:02:35:22:6c:aa:a4:d2:d1:93:a4:79:30:
                    7d:ff:22:c9:77:73:e5:64:79:29:6e:25:37:6e:4a:
                    46:84:e6:34:bf:dc:cb:9c:32:56:70:9b:fd:29:4c:
                    a4:94:22:f2:0a:c6:1e:10:85:4e:14:08:e0:ed:30:
                    9a:34:61:bb:a7:1b:03:7a:da:05:e4:3b:3e:aa:70:
                    9e:4b:b2:20:62:79:ab:ce:65:78:0a:3d:4c:59:79:
                    fe:cf:84:9c:c9:5c:4e:73:2b:2f:05:1f:70:04:d2:
                    d9:5b:62:cb:3d:aa:98:fb:64:4b:98:70:f0:50:3e:
                    f9:a3:65:2c:4e:6f:61:f9:bb:65:a0:af:28:cc:ba:
                    1a:91:c5:7e:d3:3d:a1:cc:81:b9:ce:e8:d4:e6:26:
                    fa:49:79:5c:83:17:cc:e1:0b:af:88:66:4e:fb:56:
                    70:7b:d0:44:f6:9f:b4:07:76:85:2b:58:10:04:84:
                    54:db:f5:50:5c:36:8f:28:fc:c3:db:88:9a:cc:08:
                    08:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.124.0/22
                  181.199.144.0/20
                  190.2.96.0/19
                  190.151.160.0/20
                  200.3.216.0/21
                  200.81.120.0/21
                IPv6:
                  2803:9f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27813

    Signature Algorithm: sha256WithRSAEncryption
         aa:c6:7d:aa:17:56:3f:09:5d:a3:b8:57:6b:52:80:35:85:89:
         25:a9:51:d9:56:4e:c4:7a:ea:9b:27:7a:4a:77:8a:dd:88:02:
         cd:30:29:29:33:98:e7:d6:0d:ce:76:1c:f6:c3:79:c0:9d:b6:
         2d:8f:8f:26:fe:2e:b2:04:f9:b6:3a:02:e2:46:37:5c:d6:ab:
         19:d3:e9:08:5b:9b:9d:9e:c6:9e:aa:08:b3:97:60:31:e3:0b:
         b2:87:86:56:fb:cd:bd:f4:e1:02:bb:60:fb:92:69:b5:ba:bc:
         9c:c7:59:ef:51:92:e3:2f:5c:3d:e3:dd:fb:ae:77:ef:80:06:
         24:38:a6:a8:7b:e7:f6:10:8c:8c:42:0c:fa:20:84:05:be:4a:
         b5:aa:f9:a5:9e:bd:85:97:25:92:0e:f7:12:60:0e:cd:50:a7:
         4e:c3:be:b2:e6:2f:65:70:19:26:bd:0b:9d:34:a2:28:56:be:
         be:d3:25:d2:9f:60:6a:eb:39:d2:b1:1b:12:29:12:2f:f5:c7:
         07:0f:03:b9:2e:34:9f:61:d7:51:1f:20:bd:19:92:ec:51:af:
         e6:9e:15:1a:93:cb:ee:8d:0c:b4:f1:be:6a:4f:02:40:bd:e7:
         76:a7:f3:eb:9c:f8:d1:a7:7e:8b:54:c6:9f:01:6e:1b:36:85:
         eb:b1:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----