Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be21124d3ce34b52854aa209258c68180877fe92.cer
File:                     be21124d3ce34b52854aa209258c68180877fe92.cer (raw, json)
Hash identifier:          0Z8o6hsRb6zFjKiA5Gtgfixax3fV1PAx8Ba6n/Mpubo=
Subject key identifier:   84:AF:28:E5:C8:EC:1A:A8:07:74:55:6F:BC:5B:A3:49:3C:9F:1C:36
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E45869
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43a7c6dd-9319-40b0-a8fb-9aee8cdf6554/be21124d3ce34b52854aa209258c68180877fe92.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43a7c6dd-9319-40b0-a8fb-9aee8cdf6554/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Fri 10 May 2024 00:25:37 +0000
Subordinate resources:    AS: 52377
                          IP: 200.112.216.0/21
                          IP: 2803:6a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14964841 (0xe45869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : May 10 00:25:37 2024 GMT
        Subject: CN=be21124d3ce34b52854aa209258c68180877fe92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:bd:82:e8:c4:45:c7:13:54:5d:91:94:90:
                    70:18:90:c3:c8:f8:db:44:12:16:06:01:b8:8f:9c:
                    78:61:0c:fd:5e:e9:1d:1e:32:db:aa:d0:20:25:7c:
                    74:e5:bd:c1:11:74:0c:a2:7f:9d:2b:be:49:5d:d3:
                    1f:a4:aa:94:83:fa:52:97:f0:4d:58:4a:76:f7:61:
                    80:f0:91:7f:41:3f:2d:a0:26:49:a9:40:b2:e0:5c:
                    45:89:59:5f:ef:4e:ec:00:d7:09:bb:3f:85:66:52:
                    6b:52:23:60:1d:3d:e6:22:ad:c7:08:a7:84:00:1d:
                    2c:ad:55:96:df:08:73:1c:df:94:0c:18:bd:67:23:
                    c5:04:cc:4e:89:97:62:71:68:ef:3a:72:73:25:40:
                    21:df:31:b2:2e:49:85:c7:21:8d:44:54:dc:a2:67:
                    fc:f7:1a:3c:eb:b4:58:60:09:aa:7c:ba:82:1b:ea:
                    9e:67:db:77:ff:22:2c:b1:1f:b3:e3:1c:dc:15:5e:
                    67:c5:6e:61:ba:79:c1:ea:5d:9c:a0:93:27:b6:a5:
                    ec:85:d6:14:40:49:aa:c4:45:8d:c7:56:0c:c4:ab:
                    30:85:5d:59:a6:b2:71:93:75:7f:1d:30:87:6c:95:
                    cf:d8:37:d3:eb:0f:6d:90:e9:a4:ca:32:9d:06:0b:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:28:E5:C8:EC:1A:A8:07:74:55:6F:BC:5B:A3:49:3C:9F:1C:36
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43a7c6dd-9319-40b0-a8fb-9aee8cdf6554/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43a7c6dd-9319-40b0-a8fb-9aee8cdf6554/be21124d3ce34b52854aa209258c68180877fe92.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.216.0/21
                IPv6:
                  2803:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52377

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:07:9b:f7:8e:61:46:7d:30:dd:2c:ab:11:72:0f:de:da:
         6c:63:cf:fa:3b:dc:31:28:7d:69:48:c2:4e:69:4a:b0:8d:91:
         5f:a4:9a:f4:93:5b:60:aa:c0:a7:41:f0:f0:91:8f:ac:91:bc:
         01:52:a2:da:73:cd:57:28:0a:32:8a:61:67:ee:4f:22:4b:d8:
         d6:fa:66:e5:75:61:31:62:48:61:36:4b:60:c5:8c:73:74:46:
         1a:7f:0e:09:fa:c5:35:7b:c4:a9:94:d1:8f:7b:12:ce:6e:c8:
         84:ad:34:83:3c:29:a0:7c:07:7c:d2:98:30:43:88:2b:1b:8e:
         fb:fb:19:20:03:02:19:47:35:7a:e2:a0:97:91:c7:81:b5:95:
         25:b0:8c:c1:54:c2:4c:45:a8:5b:49:c2:4f:6c:22:83:61:46:
         74:2f:a2:6e:ef:16:eb:2a:d3:c1:dd:71:d9:a2:aa:bd:c2:f8:
         ee:d8:3b:dc:be:30:f0:8b:e4:4e:b0:e6:ed:b8:5f:d4:16:36:
         c1:bf:20:ca:25:b8:e4:5d:1b:df:7b:c8:af:69:e7:bc:11:2f:
         55:d9:86:b4:5c:b3:41:2d:02:54:a0:78:84:dc:4f:ed:50:13:
         e8:54:dd:b1:cd:33:fa:3e:4f:4d:f3:7b:ed:03:6c:10:f9:f3:
         e4:72:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----