Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer
File:                     ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer (raw, json)
Hash identifier:          2KhEROyo87GLwKPUMgmlRF0j59MqRDV2PFJlkk9nCbc=
Subject key identifier:   05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD6D86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Sat 02 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 52495
                          IP: 190.103.64.0/20
                          IP: 190.109.224.0/19
                          IP: 2803:fa00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14511494 (0xdd6d86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Mar  2 06:00:00 2024 GMT
        Subject: CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:c9:e2:ff:49:98:02:df:81:ca:e0:71:9e:
                    6d:3d:f1:b4:77:cd:86:c9:56:97:63:47:eb:1a:1d:
                    35:b5:3d:b5:32:e2:fd:d4:82:e7:f3:16:7e:90:d0:
                    62:31:98:41:64:da:bc:3b:d1:fc:9b:ea:f0:01:65:
                    08:1c:bc:b5:fb:d3:aa:67:eb:f3:d2:26:56:be:5f:
                    81:4f:73:8c:f6:ab:06:be:92:76:d0:31:4c:f7:0c:
                    36:72:c4:98:d9:f4:ce:e8:e1:01:fe:27:d4:db:81:
                    f6:84:ea:49:0c:fd:1b:f7:83:e2:84:e9:6f:36:92:
                    ec:63:cc:e3:c0:42:28:dd:8c:b6:42:e7:0b:52:8a:
                    3f:cf:f5:53:e5:f2:11:48:23:f5:3e:53:dc:4d:d3:
                    52:ac:cc:3e:fe:ba:89:84:2d:d3:4c:d5:0b:9a:3b:
                    ea:b5:b6:dc:9c:fb:c5:df:72:c6:9f:aa:eb:ff:7d:
                    cb:e6:29:cf:df:31:64:c9:df:ec:9b:9a:9e:3a:30:
                    17:9b:64:e7:44:0f:a8:a0:a6:50:05:1d:b2:d2:be:
                    04:d9:19:9f:31:a1:91:b3:52:0b:01:d9:a9:47:7d:
                    c1:5b:42:d5:70:83:8d:2e:1f:a9:66:58:7b:9e:7e:
                    03:f4:b4:57:6f:ef:c7:b1:3a:55:3b:fc:ba:73:71:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.64.0/20
                  190.109.224.0/19
                IPv6:
                  2803:fa00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52495

    Signature Algorithm: sha256WithRSAEncryption
         7c:b6:9e:d4:0a:24:dc:03:07:18:d3:e4:12:8c:0e:87:46:98:
         03:06:07:78:9b:fb:74:a1:ff:81:6c:49:c7:5e:6e:1b:40:5d:
         35:18:df:e6:ee:e7:f6:e6:77:cd:aa:48:f8:34:70:4a:69:05:
         7d:de:c0:e2:ef:8d:1a:ea:82:e3:b4:24:7f:8e:70:34:d3:fa:
         d8:e8:eb:4c:42:b6:23:9b:ef:60:5e:a6:11:52:6a:46:23:21:
         10:34:f3:2a:22:7d:11:f0:ed:7d:56:26:12:f6:c9:08:0d:83:
         2b:73:21:34:81:72:2c:fb:90:62:23:ba:da:62:97:ea:bb:77:
         f6:4d:f0:72:55:57:98:c5:4d:67:64:92:b4:5f:d2:00:ae:20:
         b7:50:dc:97:80:8d:3c:91:06:c6:38:36:a4:d1:af:d6:e1:7f:
         06:6e:79:9b:62:48:04:c3:7b:92:58:a9:00:16:62:36:f9:af:
         bb:76:e1:94:5e:16:99:68:fe:e3:d3:59:79:aa:35:58:64:55:
         43:41:23:07:a5:d8:13:0e:56:6a:0f:54:01:83:37:fd:69:f4:
         a4:ed:ce:db:21:21:9f:ca:0e:2f:2c:be:1a:3c:26:f7:07:6e:
         92:7c:07:23:f9:f1:7c:3f:a5:13:b1:38:62:31:18:ef:bb:28:
         8b:34:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----