Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
File:                     c355af2587e04fcb2db519de3ca0af885d613b77.cer (raw, json)
Hash identifier:          618jQJInd1ikzGnT0Cyrwxdl3tMuCat1mBSL95DcHFA=
Subject key identifier:   BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D93B70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:34 +0000
Certificate not after:    Wed 10 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 265780
                          IP: 168.227.20.0/22
                          IP: 2803:fd40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14236528 (0xd93b70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:34 2017 GMT
            Not After : Jan 10 05:00:00 2024 GMT
        Subject: CN=c355af2587e04fcb2db519de3ca0af885d613b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:a3:83:03:64:54:6a:7e:ce:65:c1:c2:99:
                    65:7d:b3:3f:e1:ee:bd:4c:ab:94:f5:ed:02:f5:e3:
                    37:f0:7c:3c:c8:d4:20:fa:e7:d6:cd:8b:d9:e5:c4:
                    b1:5e:12:c9:72:1d:a6:aa:56:28:d3:47:39:3b:d4:
                    f1:f9:bf:0f:1e:89:b7:d6:f2:b9:7b:23:1b:00:5c:
                    59:6f:49:d8:67:e4:a9:4f:2d:c9:9f:d5:64:c0:df:
                    1a:d6:72:c3:a2:e2:28:23:a9:26:f8:51:98:a2:ef:
                    b6:9f:b5:64:b7:74:b2:7d:ee:49:92:be:34:4d:a7:
                    cc:67:cd:14:0c:a3:df:53:b3:54:ef:25:85:cd:77:
                    1c:e6:a5:d9:75:8e:d9:1b:96:88:b7:65:2d:ec:0b:
                    13:66:b3:cc:ed:af:4b:95:16:50:fb:81:07:b8:7c:
                    5d:cf:c4:e4:ee:5e:de:6c:01:0f:8d:ec:79:cb:49:
                    cd:b7:82:e3:bc:a7:f7:c1:65:47:c5:be:05:b0:f2:
                    bf:8a:c3:20:7e:2e:32:df:dc:6d:e9:64:28:5a:a9:
                    60:a8:c7:81:0c:70:31:3c:2d:23:d9:d3:18:55:c0:
                    ce:d5:42:ed:78:20:27:9c:9d:bd:ef:94:31:cd:ff:
                    af:b4:f6:ba:c5:c3:47:0d:5a:dd:c4:ca:62:5f:a4:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.20.0/22
                IPv6:
                  2803:fd40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265780

    Signature Algorithm: sha256WithRSAEncryption
         c2:58:a0:78:b2:e1:fd:f8:67:de:13:ec:da:84:31:24:dc:0e:
         5e:df:4c:75:f9:71:85:d7:d4:0f:d9:a8:b3:f3:2c:57:ac:df:
         88:13:b9:70:6e:3a:c5:e9:cf:fe:84:6d:d6:82:d5:d6:2e:20:
         e1:b7:22:b0:99:61:05:e9:5c:95:1a:67:d6:26:21:08:6c:9a:
         8f:e8:94:00:22:52:e9:ce:e4:e2:3f:4f:c8:d0:e5:de:2d:c0:
         f5:01:5d:a7:71:a6:da:27:04:c1:24:9e:1c:2d:13:03:3d:50:
         9e:8e:cf:5b:14:0b:c0:7c:8e:6e:ec:a5:63:bf:05:89:af:bf:
         1c:fa:ec:65:4f:1b:bf:fe:48:d6:f5:b3:14:9b:ef:0c:1f:1b:
         a1:40:16:6f:c4:0b:9d:c2:d1:16:23:2a:37:72:a9:89:30:89:
         7d:6c:ca:b8:21:35:a4:11:72:12:80:49:e4:da:cf:4f:9f:c7:
         1e:a3:ff:eb:24:99:00:af:f7:e0:4d:aa:60:8b:5b:e3:64:92:
         60:94:78:87:df:b4:dc:97:29:40:88:3c:69:4a:77:96:ab:54:
         1a:33:a0:9c:c2:42:03:be:e2:db:6b:55:cc:aa:10:3e:3d:bd:
         5e:2d:4d:e7:0b:92:dd:84:2c:f7:a5:74:e7:e5:29:72:ff:ff:
         f3:fd:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----