Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc17b52a56d253fe4b8d38060eecc8b88f9cbd57.cer
File:                     cc17b52a56d253fe4b8d38060eecc8b88f9cbd57.cer (raw, json)
Hash identifier:          TODPxsd4EO5lkra/0MM1uqKCgr6KeBKKIxpqF/evd8o=
Subject key identifier:   58:9F:6A:49:C9:F9:AA:7A:75:A6:AB:87:67:FF:53:7F:31:68:79:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD494E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2f98a4f6-aa3f-462a-bbb1-d5ff6121d6e7/cc17b52a56d253fe4b8d38060eecc8b88f9cbd57.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2f98a4f6-aa3f-462a-bbb1-d5ff6121d6e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 May 2019 21:50:24 +0000
Certificate not after:    Mon 18 Nov 2024 14:57:02 +0000
Subordinate resources:    AS: 267752
                          IP: 45.170.28.0/22
                          IP: 2803:d3a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16599374 (0xfd494e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 24 21:50:24 2019 GMT
            Not After : Nov 18 14:57:02 2024 GMT
        Subject: CN=cc17b52a56d253fe4b8d38060eecc8b88f9cbd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:36:77:8a:27:f8:a8:86:27:51:43:c9:d9:
                    90:a7:1a:f4:83:71:13:43:80:c9:aa:9b:02:fd:28:
                    9d:c5:17:3d:4b:e6:7a:60:08:bf:95:95:23:fe:e7:
                    3f:7a:d4:5c:b1:6b:55:5e:a3:34:57:e2:55:4d:a5:
                    c0:d9:a8:1a:04:f8:d1:21:e3:70:fb:b8:8c:f6:60:
                    a8:5a:6e:36:cb:31:8d:23:fd:6d:e5:c6:d0:15:1d:
                    f1:bc:36:2c:b6:20:a7:b7:16:61:85:9b:57:6b:54:
                    39:cd:ed:5e:d9:89:a1:ad:e4:76:a4:f4:98:a2:86:
                    cd:a3:0e:48:81:e1:c2:cd:60:72:43:a7:d7:a8:76:
                    bc:6a:59:47:a8:39:12:3a:cc:d8:12:a9:9d:66:61:
                    88:fa:7c:ed:fc:8d:a3:d2:03:f9:b9:d9:ce:0f:6f:
                    4c:1e:bf:88:a6:d9:26:e2:81:4f:af:c2:2d:9f:ab:
                    11:10:02:d9:68:a1:e3:a9:ed:57:89:f0:47:9a:4f:
                    0b:2e:9e:15:f5:b2:25:23:10:4d:98:8b:08:5a:d7:
                    3b:d3:66:16:9a:6c:b2:7a:70:f2:36:cf:50:54:fc:
                    e0:1c:f9:5c:f4:48:8d:fb:4a:cb:e9:59:53:f7:e8:
                    ab:ed:42:a7:15:fc:a7:27:65:16:a9:36:ed:e2:b1:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9F:6A:49:C9:F9:AA:7A:75:A6:AB:87:67:FF:53:7F:31:68:79:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2f98a4f6-aa3f-462a-bbb1-d5ff6121d6e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2f98a4f6-aa3f-462a-bbb1-d5ff6121d6e7/cc17b52a56d253fe4b8d38060eecc8b88f9cbd57.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.28.0/22
                IPv6:
                  2803:d3a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267752

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:6b:f0:c4:af:4e:67:2e:78:b7:0a:8d:6c:8c:e2:eb:b0:
         0f:17:8f:ea:62:dc:f1:f4:53:4c:30:af:79:05:5c:32:d4:c4:
         d3:18:d9:9c:ef:4c:99:f1:8e:0e:66:db:ab:31:93:4f:d4:62:
         f3:13:0f:ec:d9:a1:0e:6c:cf:af:dc:5b:30:5a:59:bc:ec:82:
         44:11:db:ed:4b:47:fd:73:49:38:50:d3:32:80:db:73:60:28:
         5c:a5:68:56:bb:2c:ea:b7:ae:e8:b4:86:7e:c0:67:45:1d:b0:
         75:c1:9b:03:e8:e0:bf:9c:15:79:7b:37:48:3b:1e:a1:16:39:
         f8:2a:03:9b:d7:b7:7d:15:8c:0d:d7:6c:c4:d8:02:a0:4c:ba:
         f1:ef:66:df:1f:8b:fa:01:eb:dd:e3:cb:15:fa:a1:da:a5:18:
         0a:da:8d:1d:16:2f:25:b1:17:68:29:bd:17:a1:02:5d:2f:3c:
         3b:74:87:42:9e:c3:4b:00:81:7e:ea:a4:fd:24:b3:c6:5d:50:
         a1:45:ad:57:03:0d:00:7d:77:ef:c1:ec:83:5e:2a:33:9d:ca:
         ea:23:d7:01:5a:a0:92:27:94:79:19:e4:f5:3c:01:98:3a:cc:
         d0:6b:57:1a:90:29:30:9c:23:6f:07:d6:89:28:0a:3f:6d:d4:
         86:bb:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----