Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer
File:                     b33596c5bda819ba4815e88789b6d43c8973f503.cer (raw, json)
Hash identifier:          S0lDEFMXZXVHMLzJUye6DFVgXptdgm8uuctpGHEHX0o=
Subject key identifier:   B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9571E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Thu 11 Jan 2024 16:04:09 +0000
Subordinate resources:    AS: 263698
                          IP: 191.102.36.0/22
                          IP: 2803:aa80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14243614 (0xd9571e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Jan 11 16:04:09 2024 GMT
        Subject: CN=b33596c5bda819ba4815e88789b6d43c8973f503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:d7:cc:82:ff:21:4b:d0:9c:61:3f:bd:9e:
                    d6:22:5e:f6:2a:85:17:64:ce:7d:d0:dc:88:44:f1:
                    ad:cf:98:f9:28:6f:93:54:e5:2e:96:e4:2d:48:61:
                    60:d2:a5:03:be:e3:51:9e:ad:32:4a:65:0f:4f:41:
                    22:99:a2:ea:36:0b:28:48:d3:d0:b6:66:89:4f:ba:
                    ef:d5:23:28:d5:0b:dd:4a:f9:9d:fa:08:d0:7e:47:
                    9f:27:42:ff:11:f5:00:86:a4:8a:4b:38:e2:a3:67:
                    f0:41:84:28:c0:08:d4:6a:43:11:63:80:6f:ea:3f:
                    d8:ae:aa:40:ea:bf:07:b2:3f:af:da:d9:26:aa:06:
                    92:f9:b8:5c:62:76:70:aa:eb:46:51:d1:f7:5a:90:
                    f9:c4:02:47:f1:75:c8:84:e1:48:45:7d:b6:f8:b3:
                    fc:e6:2e:a1:fa:0f:2e:7f:e4:c1:14:36:de:8f:ef:
                    db:a4:0f:04:ba:35:3b:c8:79:76:d2:e8:ad:4b:e6:
                    e1:20:ce:d0:c1:13:98:87:6c:78:e5:04:b2:6f:16:
                    76:ea:53:14:37:74:48:43:98:95:17:2d:15:91:f1:
                    33:8c:96:ec:d6:54:61:d4:e0:fd:15:6b:0c:dc:34:
                    e3:2d:af:0d:4d:3b:72:ef:39:1f:4e:97:8a:e2:21:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.36.0/22
                IPv6:
                  2803:aa80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263698

    Signature Algorithm: sha256WithRSAEncryption
         1c:e7:1c:62:d1:90:f6:e2:9e:2a:13:23:e5:55:3c:44:86:78:
         ed:82:43:1e:92:bc:bb:37:b6:31:55:08:35:8a:54:fb:56:e1:
         39:92:4e:4a:28:e0:bd:af:a0:66:16:e9:6a:b0:f7:71:4a:08:
         ea:8f:92:2c:74:bd:01:22:bf:16:43:50:59:32:b9:46:20:a1:
         39:79:00:d2:d8:a4:45:80:d3:70:2f:e2:0b:94:7d:63:77:36:
         c0:ab:e5:40:ba:db:b6:fe:2f:59:c5:de:f2:3b:d2:49:0f:cd:
         e5:77:70:30:32:f7:08:79:b0:c9:4a:70:38:48:20:3e:33:3a:
         7f:aa:9b:8d:cb:b8:1b:d7:bc:16:7f:0d:ab:06:fa:97:ae:3c:
         2e:cc:5c:05:b2:dd:70:f9:cd:1b:aa:f0:f1:74:af:92:c8:e6:
         79:bd:6c:df:97:2e:b3:12:7d:aa:84:7c:d9:d2:b6:89:b5:69:
         1d:f1:0f:2d:e5:90:f2:ec:c8:e3:a0:26:70:97:32:b6:be:74:
         c7:ab:6c:3a:93:31:da:02:4b:06:0a:e6:e1:99:66:c2:c4:44:
         65:9a:fc:8d:09:7e:6f:bd:0e:35:56:9c:ae:9e:31:05:36:68:
         71:3f:d4:a7:3c:e6:ca:94:64:e5:c2:a4:a4:a0:90:83:f7:6c:
         b3:04:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----