Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de4267281632ed5870c17320b110df8594425b92.cer
File:                     de4267281632ed5870c17320b110df8594425b92.cer (raw, json)
Hash identifier:          5wAqcV3OFVk0wGHoYQLRfuVyoCw4zkWawiNQf8NM5ss=
Subject key identifier:   27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA7946
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/de4267281632ed5870c17320b110df8594425b92.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:20 +0000
Certificate not after:    Tue 10 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 27833
                          IP: 170.231.76.0/22
                          IP: 181.197.192.0/18
                          IP: 190.1.0.0/18
                          IP: 190.97.0.0/18
                          IP: 190.211.192.0/19
                          IP: 2800:560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16415046 (0xfa7946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:20 2017 GMT
            Not After : Dec 10 14:00:00 2024 GMT
        Subject: CN=de4267281632ed5870c17320b110df8594425b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:89:6b:6e:51:06:bd:b7:91:ce:35:3a:64:
                    dd:e8:a8:39:cd:48:a4:75:9e:3c:c7:66:44:15:f0:
                    f8:cd:13:72:cf:94:6b:83:e7:b4:f3:97:e3:dd:a7:
                    f1:1f:48:e2:b8:ea:83:a6:38:00:39:32:d7:e5:a9:
                    0b:3c:3f:7d:fb:71:ae:be:89:59:d6:07:34:52:1a:
                    e1:ac:b7:3c:f3:a0:e6:b1:7f:bd:8e:7a:ac:2d:4e:
                    ac:7f:62:ad:be:77:33:66:52:ec:24:1b:c7:8e:af:
                    df:f7:e0:8c:f5:67:72:f6:d2:8d:84:93:21:8c:a1:
                    49:d6:64:91:3c:07:68:dc:ed:81:3e:87:9e:b4:b2:
                    87:83:85:9a:dc:a5:8f:e2:a1:6d:ff:7b:3c:b9:34:
                    29:07:33:7f:9d:33:12:2b:24:5c:d5:24:bd:82:66:
                    21:99:a4:1b:f0:21:9b:17:75:b4:80:93:d7:86:47:
                    5c:be:4a:98:0e:30:86:51:b9:14:ce:9d:6b:63:9e:
                    6a:42:1f:f9:e1:11:4b:56:9a:bc:57:76:30:a8:1d:
                    53:1e:fc:f8:ef:d7:2b:d5:d0:f3:ec:e6:94:70:a5:
                    b4:8e:2f:49:c4:9f:a6:c4:4e:53:1c:45:e4:fe:36:
                    ef:8d:f2:e0:11:6e:77:9e:d7:d8:53:a2:3f:61:8e:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/de4267281632ed5870c17320b110df8594425b92.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.76.0/22
                  181.197.192.0/18
                  190.1.0.0/18
                  190.97.0.0/18
                  190.211.192.0/19
                IPv6:
                  2800:560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27833

    Signature Algorithm: sha256WithRSAEncryption
         89:33:9d:fe:e7:e6:d5:10:9b:11:93:44:29:ee:52:21:74:4b:
         16:09:ba:ee:04:72:90:d6:d0:18:63:16:54:99:12:1b:1b:6d:
         b7:35:39:b4:3d:aa:e2:9d:5e:67:c3:c4:04:98:d0:15:00:3b:
         18:25:a7:30:4f:f3:60:3d:07:5b:b5:f5:2a:6f:af:72:35:17:
         fa:b0:65:2e:9f:e8:15:35:e7:59:1a:38:2a:21:fa:fb:03:32:
         11:19:a1:30:83:2f:9c:7e:b7:82:c6:78:c2:e7:96:0f:bc:55:
         34:1a:eb:cc:68:8e:55:f6:97:43:52:c2:b3:d5:bf:4b:c3:1f:
         a4:ce:21:e1:65:dc:1b:8b:d2:2f:cd:aa:fb:59:2b:85:d1:a3:
         fc:2d:da:05:3b:cc:87:cc:bb:7c:a1:85:3c:92:fb:78:79:1a:
         ea:2b:ee:99:d8:c0:4c:dc:1f:0b:a8:bc:ea:d2:db:b6:c9:5a:
         8c:a2:b8:79:93:d2:5d:4b:2b:07:b0:12:fa:67:d7:3b:f0:0d:
         5a:bb:22:c1:b0:0d:d3:6f:c1:11:40:9e:06:50:82:19:10:b1:
         2d:79:15:f4:20:60:1b:6a:6a:9e:b2:1d:f3:cf:2b:8b:ce:37:
         28:c6:46:84:ea:c3:bb:f3:35:ce:0c:bf:f3:65:99:1c:67:09:
         f9:fb:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----