Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a73c2640b87c02edde7ff9424425bd136edffe32.cer
File:                     a73c2640b87c02edde7ff9424425bd136edffe32.cer (raw, json)
Hash identifier:          muv69lKrL9ZaJCDs4OLO6TQFSFX6oJWN655ojHWhmhY=
Subject key identifier:   65:6D:DE:B4:82:27:25:10:6D:0E:D3:ED:EE:78:9C:AE:19:D3:CF:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E23520
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/a73c2640b87c02edde7ff9424425bd136edffe32.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:01 +0000
Certificate not after:    Mon 22 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 262241
                          IP: 138.185.248.0/22
                          IP: 168.195.124.0/22
                          IP: 179.60.160.0/21
                          IP: 190.113.248.0/21
                          IP: 2803:3200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14824736 (0xe23520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:01 2017 GMT
            Not After : Apr 22 06:00:00 2024 GMT
        Subject: CN=a73c2640b87c02edde7ff9424425bd136edffe32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:b5:f0:c4:a3:1b:3b:ad:1a:6d:cc:45:58:
                    4c:c0:6d:ec:66:c4:b0:d3:ab:f9:a6:3c:49:07:d6:
                    77:83:dc:97:84:97:00:2c:c0:f7:65:6f:f3:c1:64:
                    74:ac:9a:3f:bc:bb:c0:cc:ad:06:ad:3d:0f:15:c5:
                    25:a3:f4:5c:4d:98:98:57:c9:8e:65:b9:d9:c1:d0:
                    9b:8b:27:cb:5b:36:c5:37:de:3f:5d:68:df:54:61:
                    6e:ad:c4:28:f4:8c:79:84:8e:e9:37:51:64:dd:e0:
                    f5:90:e4:1e:7e:9b:eb:12:97:b7:67:56:a0:49:30:
                    26:7b:89:4f:67:c1:be:ec:4e:58:22:f9:48:3b:7c:
                    8d:15:20:41:64:d1:cb:57:d5:7b:06:9a:c6:58:79:
                    f1:1f:69:a7:75:65:bf:f8:e8:f6:81:1f:f9:89:a4:
                    31:5c:f8:28:b6:83:4c:96:1e:5d:a7:8e:2c:f3:1a:
                    39:26:16:3d:77:47:24:f9:47:b4:62:54:bf:ec:3a:
                    62:f2:93:2f:c5:0d:32:bd:f6:2b:84:ba:e0:d0:d6:
                    fa:41:b1:43:91:ab:8a:eb:3e:5c:0e:19:b2:d6:ca:
                    cb:62:42:08:49:54:f1:3f:53:2b:9b:84:c9:70:f1:
                    b3:7c:f8:04:7e:57:ea:64:57:90:95:84:59:73:9e:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6D:DE:B4:82:27:25:10:6D:0E:D3:ED:EE:78:9C:AE:19:D3:CF:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/a73c2640b87c02edde7ff9424425bd136edffe32.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.248.0/22
                  168.195.124.0/22
                  179.60.160.0/21
                  190.113.248.0/21
                IPv6:
                  2803:3200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262241

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:6c:d7:bb:19:1b:fd:c2:d9:4b:cb:50:cc:19:0c:c9:7e:
         de:08:27:87:df:3c:94:d0:4a:cf:63:1f:cb:55:b5:7f:46:06:
         9c:96:09:b8:95:3c:4e:50:e3:37:a5:fe:f5:dc:69:2c:35:23:
         74:87:82:0a:49:a1:9e:a3:a0:e1:05:76:8c:b9:9d:aa:d6:c4:
         0b:0d:9e:c6:da:31:90:53:5c:32:0f:d9:ba:08:9e:b4:6d:68:
         e9:47:bd:fb:c7:6d:13:a7:2c:22:5e:ef:43:bc:99:7c:07:97:
         00:c7:ad:8d:f8:04:1e:04:8c:0f:a9:56:4b:1a:c7:49:74:b4:
         88:b5:a7:4c:61:1f:a7:f8:4a:1f:83:aa:e4:36:de:07:ef:8d:
         34:bf:f6:da:09:2c:64:7f:7b:47:48:35:af:f8:10:df:32:86:
         ab:7b:67:fc:db:4c:35:2f:a4:17:96:03:01:a3:11:17:a8:e6:
         e9:78:2c:5a:67:e4:37:4c:99:67:1a:ee:9a:22:88:6d:06:6c:
         aa:2b:00:cf:53:ac:2e:97:28:37:8f:e4:20:d1:fb:80:40:d1:
         3d:3f:e8:7b:46:75:d4:2d:85:aa:42:79:f7:1f:75:bb:ff:66:
         ab:0a:5e:73:16:f5:86:1d:7c:7f:ad:09:75:4e:94:5f:85:6a:
         77:7c:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----