Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7256964f9010e745d04aefcbdad1b63db6e507e.cer
File:                     c7256964f9010e745d04aefcbdad1b63db6e507e.cer (raw, json)
Hash identifier:          zpviIi/ghfJyL7GlF7PTnCwJPJV3xDzWoiroVdPhswE=
Subject key identifier:   D8:0A:28:C6:0B:6C:60:99:44:4D:EF:FE:71:69:86:FA:CD:12:E4:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE8512
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/c7256964f9010e745d04aefcbdad1b63db6e507e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:51 +0000
Certificate not after:    Mon 09 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 27763
                          IP: 200.25.224.0/19
                          IP: 2803:7390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15631634 (0xee8512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:51 2017 GMT
            Not After : Dec  9 04:00:00 2024 GMT
        Subject: CN=c7256964f9010e745d04aefcbdad1b63db6e507e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:09:cd:08:29:a0:b8:0e:7d:63:a1:5c:3d:
                    7c:25:c4:5c:b7:b2:ab:88:d7:93:30:da:99:83:31:
                    64:dd:0f:4c:88:6d:e2:a9:e1:50:62:a6:4f:d6:2d:
                    2d:d3:ac:eb:ac:c1:5c:94:c1:d1:3d:1e:ba:36:a4:
                    aa:d7:b2:2c:c1:83:20:b3:69:4b:b1:4c:26:91:17:
                    a5:d1:1a:ff:d2:45:7a:77:89:0f:2a:fc:34:0e:bf:
                    c5:15:18:5b:2b:1d:33:c2:21:5a:7d:c0:2a:72:2c:
                    76:0c:a1:9e:e5:9b:a8:b8:f2:17:5e:4b:76:88:f6:
                    04:5a:72:35:cf:5c:c2:97:1e:d8:86:c1:c2:2b:26:
                    69:f8:aa:3f:55:d8:6a:d3:6c:65:22:b3:e9:c8:80:
                    19:9f:d9:03:3f:43:ca:bd:79:d2:d4:3e:2d:a0:f1:
                    7b:41:36:e8:87:c8:8c:f4:bc:bb:1a:1b:44:52:2a:
                    c6:9d:eb:ac:b9:9f:83:00:d3:19:1b:e6:a0:f5:2b:
                    d4:b4:5e:03:04:8c:3c:00:f6:e0:5e:f9:01:27:03:
                    e7:91:9e:7c:ac:ab:47:bf:fa:49:b9:5d:d0:a0:4f:
                    32:ad:a7:da:a1:c5:9e:54:f7:e6:20:f1:f2:2d:84:
                    2d:40:65:2a:2f:af:9f:37:96:cd:2f:18:c6:11:75:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:28:C6:0B:6C:60:99:44:4D:EF:FE:71:69:86:FA:CD:12:E4:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/c7256964f9010e745d04aefcbdad1b63db6e507e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.224.0/19
                IPv6:
                  2803:7390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27763

    Signature Algorithm: sha256WithRSAEncryption
         b6:21:48:f1:b2:51:4d:bf:57:d5:03:c7:e9:27:82:11:27:0d:
         ee:6c:cd:61:5b:e9:09:7a:16:0a:df:06:49:76:4a:ea:81:bd:
         f8:05:93:be:d1:09:80:d2:60:c8:35:b3:e1:6a:74:20:2a:13:
         30:03:d3:68:9f:2f:8e:f3:f3:2c:01:b3:4d:71:75:6c:ff:a2:
         03:aa:c0:b2:2a:9d:f3:98:f9:96:b5:44:ec:62:bc:a5:50:78:
         85:74:ba:c1:f9:68:6c:5d:4d:71:97:d3:9a:12:ba:02:dc:9f:
         47:2e:94:1b:bf:18:5d:eb:ff:07:de:10:8c:74:a5:59:22:e5:
         fe:63:f5:d1:c5:61:be:2c:03:cd:ea:5c:b7:4f:ba:3e:c6:1e:
         22:81:6f:1c:bc:19:f3:23:e2:9c:e7:55:48:e1:de:f3:ff:37:
         3c:da:e3:32:d7:a7:c4:74:ba:73:13:c0:1e:b4:e8:67:05:81:
         38:59:bd:4d:12:b8:b4:97:7d:47:90:3b:38:50:cf:a6:5d:e1:
         8d:6c:48:27:fa:cc:67:e7:1c:f6:89:bb:84:50:9c:03:fa:6b:
         93:4c:e4:8a:d8:c0:02:63:6d:35:29:4b:30:45:6e:2e:be:f6:
         fc:7e:92:de:1e:d2:35:3e:da:a9:a2:8f:90:f9:56:27:bd:b9:
         27:c8:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----