Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.cer
File:                     c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.cer (raw, json)
Hash identifier:          uQEzoHEoVCyfeFtwvjWbahFNGkg/I4/avNcXW4yMEtM=
Subject key identifier:   EF:C0:24:B6:BA:D7:86:2E:BD:C9:F2:5E:67:3B:46:1A:D4:B2:D6:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9BC09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Thu 13 Jun 2024 23:23:50 +0000
Subordinate resources:    IP: 179.60.192.0/22
                          IP: 2803:6080::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15318025 (0xe9bc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Jun 13 23:23:50 2024 GMT
        Subject: CN=c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:7e:9c:dd:5e:fc:d1:45:8a:4c:53:90:08:
                    10:8a:b8:a7:ac:ec:ff:38:a5:4d:93:c9:66:09:30:
                    ed:e2:15:d3:21:ac:f3:ef:90:d1:73:3d:9f:dd:d6:
                    bd:65:9c:2c:5b:ce:a3:4c:50:a9:fb:65:29:c6:7a:
                    8c:d8:b5:14:72:4f:a6:3a:d1:5a:8c:c5:92:18:1f:
                    78:20:69:1e:51:cd:be:1b:b9:3e:84:a4:db:d8:76:
                    61:c7:76:5a:ff:3b:5a:c4:56:f2:f1:70:b2:8e:ae:
                    3e:0d:96:84:81:c7:e9:1d:20:05:6f:42:49:67:a3:
                    64:4e:ec:63:6b:7c:67:ca:49:cf:5f:74:2a:82:4d:
                    93:60:41:56:95:f1:b8:58:b8:df:a2:d3:64:9a:5b:
                    a4:7d:ea:c6:af:47:bc:bb:a6:50:64:2b:2e:af:91:
                    45:d0:c2:51:ef:27:4e:d0:95:04:af:cb:97:54:44:
                    39:0a:e6:6b:31:54:8d:5c:76:bd:f6:7b:d1:fe:01:
                    43:bd:ab:bb:19:1e:5c:4a:35:c5:c5:06:cd:b3:42:
                    3e:51:8f:67:58:c8:1c:67:6d:7f:5e:50:60:48:eb:
                    0c:af:d8:ce:01:9e:84:7b:dd:61:24:a9:06:12:9e:
                    16:df:f8:71:c8:5e:f8:8b:46:f3:81:cb:df:3d:73:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:24:B6:BA:D7:86:2E:BD:C9:F2:5E:67:3B:46:1A:D4:B2:D6:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.192.0/22
                IPv6:
                  2803:6080::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:ac:9e:df:1a:a5:2d:6a:fb:5b:e5:7d:f7:98:56:9d:89:
         d2:19:af:1e:81:fb:4f:56:0d:93:ea:3e:50:f6:78:98:9b:da:
         a8:57:d8:f5:f5:9c:a9:4a:5a:02:ef:7f:be:1a:f6:7f:c5:65:
         dc:6f:3e:2b:d1:b7:57:fc:f5:30:76:e2:d5:47:d7:42:61:03:
         0e:26:80:5d:09:2d:a1:77:5c:37:bd:88:cb:3d:47:58:fd:1f:
         37:48:f4:7a:15:17:f6:29:55:a3:0d:6b:4e:7c:7b:02:ac:fc:
         de:60:bc:f6:f4:18:50:77:03:68:a7:d1:ec:1c:ba:f7:01:76:
         20:d0:44:0c:eb:e7:8f:95:5e:16:ce:4c:9c:18:f8:76:79:02:
         0b:54:24:65:23:52:fa:3d:36:a2:6f:a6:18:dc:5c:ad:9b:6c:
         4a:82:26:6e:7e:21:4d:72:59:0c:41:0f:99:84:fe:f7:ed:36:
         65:c1:53:c4:1f:0d:7d:8f:99:8e:e2:f3:f1:71:a8:99:51:72:
         30:d4:ba:70:9d:a7:65:d9:24:45:dc:97:e6:6f:73:4e:f3:08:
         3d:31:65:a4:c3:97:a5:5c:8a:77:35:40:e0:ea:26:2e:3a:80:
         bd:e3:41:91:f7:f5:c6:4c:95:b9:5b:25:b2:8d:61:6f:30:5a:
         9e:08:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----