Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cabb0cf6251beebdb70ee6bb05d5743481029a07.cer
File:                     cabb0cf6251beebdb70ee6bb05d5743481029a07.cer (raw, json)
Hash identifier:          8KjiHjpLYlDEOEEo9zWxvNJm0LFvMr6RQ+4AlLIj50A=
Subject key identifier:   D1:5E:AA:17:52:36:CC:A2:7C:F1:BA:D2:14:3C:8A:28:9A:3E:A9:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010EA03F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/cabb0cf6251beebdb70ee6bb05d5743481029a07.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Mon 10 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 27806
                          IP: 200.13.136.0/21
                          IP: 2803:c700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17735743 (0x10ea03f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : Mar 10 06:00:00 2025 GMT
        Subject: CN=cabb0cf6251beebdb70ee6bb05d5743481029a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:c2:f6:07:62:59:b6:1f:26:0f:0e:21:fc:
                    b5:6f:8c:3f:06:f8:cd:7a:60:a8:7e:88:1a:8d:60:
                    2c:1c:fe:54:31:f3:87:8e:5b:a8:65:6c:e3:1b:e8:
                    cd:8a:e6:4c:9b:6b:f2:69:bd:7e:8f:67:6d:39:48:
                    b2:af:7b:07:5c:6f:0f:80:11:6c:36:75:ff:3c:36:
                    0c:ed:7b:9c:02:28:b0:00:d4:93:c9:e8:bd:20:67:
                    c0:8c:e9:e9:cd:89:2a:11:82:aa:bf:c3:6f:c6:b0:
                    ed:40:7b:eb:5f:c1:aa:0a:e9:86:3d:d6:9c:ee:b5:
                    3f:88:d4:91:ba:e9:8a:e5:d3:75:92:9b:ac:3a:25:
                    25:b8:3a:fd:5a:b9:71:f8:b7:39:05:c9:eb:60:71:
                    6d:43:35:75:25:e9:cb:41:c2:2e:12:a6:23:ae:9a:
                    f9:e2:3f:a4:06:8a:7a:0a:80:31:1a:92:87:d4:a6:
                    34:b9:69:d1:50:c9:b8:c6:fa:50:c3:21:9e:50:ef:
                    b5:19:d8:61:40:1b:a2:be:5b:87:21:c5:48:b3:be:
                    9f:87:18:d7:89:3d:17:90:f5:8b:8e:b8:bd:fa:0c:
                    d0:bf:7c:1e:b8:8a:a5:51:8d:a3:f8:3a:a0:19:56:
                    02:02:27:ed:dc:aa:63:34:eb:2b:5e:07:a4:b9:b8:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5E:AA:17:52:36:CC:A2:7C:F1:BA:D2:14:3C:8A:28:9A:3E:A9:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/cabb0cf6251beebdb70ee6bb05d5743481029a07.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.136.0/21
                IPv6:
                  2803:c700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27806

    Signature Algorithm: sha256WithRSAEncryption
         8a:1b:7c:ef:21:07:bb:9e:68:8c:4c:fa:30:4a:78:4b:d7:b0:
         ff:f1:1c:e4:37:97:f7:18:3c:5f:03:18:94:01:8f:98:be:c6:
         df:13:0f:3d:72:7b:ea:e5:b8:49:27:c9:68:2b:79:71:c6:42:
         ac:f3:20:3d:37:73:b7:16:03:19:38:20:6f:f0:e4:41:1d:c3:
         74:f9:de:26:ba:2a:7d:cd:55:d5:37:29:ad:5a:5c:83:7e:c1:
         0c:58:fc:8c:63:20:89:29:2f:48:37:20:79:27:cc:38:39:3a:
         f4:c6:88:f9:86:ba:3d:31:dd:50:c7:77:e6:19:70:88:7c:ed:
         81:23:22:8f:45:3d:10:30:41:97:f3:b9:34:1f:13:b6:67:60:
         ba:a9:91:39:36:d2:7f:d2:3e:1e:be:50:79:93:77:4a:1d:91:
         ca:7f:05:3e:5a:fa:7f:1b:94:23:b7:37:c2:36:35:2b:cd:5c:
         20:ba:e2:c4:ec:a3:f1:87:0e:e9:20:ab:8f:99:59:75:ef:e3:
         2a:f7:44:bf:6f:a3:74:f8:16:11:5d:f4:42:3f:62:41:1a:d1:
         10:90:ca:ed:a9:a6:fe:2b:c1:55:9d:01:98:d8:30:7b:74:67:
         49:ff:bd:27:7d:ab:f7:07:55:18:14:e7:b3:94:77:f6:a8:f8:
         09:b5:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----