Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer
File:                     cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer (raw, json)
Hash identifier:          IyL7eZAIji8Gg8nZrFzxQvQ4KZXexMzzVBRL62KpIQs=
Subject key identifier:   B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF5B75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:49 +0000
Certificate not after:    Fri 22 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 263237
                          IP: 200.73.112.0/21
                          IP: 201.217.240.0/22
                          IP: 2803:8180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14637941 (0xdf5b75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:49 2017 GMT
            Not After : Mar 22 06:00:00 2024 GMT
        Subject: CN=cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:3c:94:e4:cc:e2:12:55:b1:da:41:fa:cf:
                    39:12:47:37:82:3a:2c:85:b0:a3:b1:9b:f5:5e:5e:
                    2f:59:9c:79:a6:7d:21:2a:3d:5f:1f:50:11:71:c9:
                    22:d3:7f:aa:21:aa:30:c3:41:07:7b:89:e4:31:54:
                    10:71:a3:62:01:e6:87:0a:ee:0f:b9:35:7f:82:66:
                    d4:a8:92:e0:da:10:0e:8d:4f:ea:d3:e8:d3:ed:db:
                    b4:4c:5d:4b:23:65:8d:9e:fb:53:cf:3a:12:70:a4:
                    c5:c9:f8:fa:90:51:9f:1f:6f:c3:c7:8a:69:40:f7:
                    bf:a9:c8:94:79:48:d6:05:3e:56:7e:66:52:dc:03:
                    b2:fd:b4:c0:70:1d:6a:56:80:4f:a8:e7:53:c2:d2:
                    47:c5:6d:78:2c:f3:e0:c6:41:1e:5d:90:63:c7:e9:
                    dd:2f:c3:a3:c8:cd:05:a7:f0:0f:62:4e:ba:c8:03:
                    70:38:9c:d2:14:ad:80:74:6d:88:99:63:ba:b7:87:
                    78:55:30:11:84:e8:e4:cd:48:b5:9c:c4:56:12:32:
                    f8:e0:5e:d5:32:5c:a2:ed:71:bf:13:28:3d:f4:44:
                    b2:d3:ad:6c:a8:2d:48:85:8e:db:e6:b7:bc:ed:93:
                    13:05:3c:a7:66:4f:75:b1:48:64:08:74:93:7b:4a:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.112.0/21
                  201.217.240.0/22
                IPv6:
                  2803:8180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263237

    Signature Algorithm: sha256WithRSAEncryption
         86:24:dd:e0:d6:46:92:68:ab:2f:a6:51:1c:52:1d:e6:ef:8d:
         5f:9f:2d:15:45:6e:4a:00:10:15:4f:77:f2:d3:a2:b1:34:26:
         f9:d4:94:6e:3b:95:c9:7a:04:a0:15:ba:82:8b:7f:42:b6:17:
         79:9b:5c:21:c3:33:9b:8f:e9:7c:de:9a:26:ec:8d:5d:e9:d2:
         82:60:73:85:72:b8:b1:df:d1:d4:8f:2f:d5:ed:59:9b:4f:2c:
         e2:79:be:09:d5:ab:92:8e:94:0d:44:49:83:47:d7:c6:b3:54:
         d7:5f:d5:7e:12:34:c6:d8:24:36:1a:f9:8d:63:8a:88:ed:3e:
         41:d4:f7:2b:6d:87:66:7c:ff:ec:14:e6:ca:53:6e:6e:12:22:
         13:67:93:65:6e:96:f5:4f:c3:0d:e3:72:0a:0c:17:e5:d7:55:
         e5:99:f1:1c:bb:07:9e:9e:4a:93:39:68:05:50:1f:cb:ce:a0:
         32:89:06:ac:b5:44:bc:90:a2:f7:23:04:90:51:a7:28:be:e4:
         a2:76:c1:7d:cf:7e:da:2f:4a:d4:2f:8a:a8:a2:25:11:04:50:
         5b:86:9d:41:62:60:26:03:5f:1e:a0:73:c1:b6:31:5b:c2:fd:
         b1:ed:dd:c2:96:18:c9:ed:b6:19:01:bd:38:e3:e5:32:c9:b0:
         00:71:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----