Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
File:                     fcc25171c7921fdcd117ca7096ecea5ba6358873.cer (raw, json)
Hash identifier:          96utAxgtyRrI7w0cjCgbxzH2o94xbki49waOmgJqGkk=
Subject key identifier:   44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E342C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:16 +0000
Certificate not after:    Sat 04 May 2024 06:00:00 +0000
Subordinate resources:    AS: 27762
                          IP: 190.121.240.0/20
                          IP: 2803:1100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14893763 (0xe342c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:16 2017 GMT
            Not After : May  4 06:00:00 2024 GMT
        Subject: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:43:13:26:c1:a0:e1:dd:30:55:59:3c:08:
                    4a:43:d6:06:53:c6:e8:19:79:bc:96:a6:dd:41:8f:
                    ac:db:7c:1a:10:10:44:9b:bf:f2:0b:60:e7:5b:28:
                    d2:41:44:e6:d5:22:db:2e:55:dd:e7:23:d2:60:f4:
                    bc:3a:57:1e:c4:f8:82:81:45:25:49:30:08:e2:c4:
                    54:1d:0a:a3:80:a1:39:e2:f2:d3:e2:18:d1:52:c1:
                    a5:a2:01:f1:23:ce:83:30:21:2a:94:fa:7f:f4:7f:
                    34:08:a5:4d:b3:df:39:99:2c:0b:4c:3c:4d:d8:ad:
                    cb:3c:ae:0f:5c:6a:a6:05:1e:47:06:2a:e9:1f:5f:
                    9b:0e:05:bd:ea:92:7f:b5:7a:cd:c9:10:08:fb:31:
                    62:29:71:a5:65:2d:b7:86:01:54:8b:e7:44:7d:89:
                    d3:d4:57:61:7d:9e:80:a7:2a:68:c3:d4:ef:39:ab:
                    24:a6:5d:49:75:59:3e:75:1c:04:5d:4b:78:1f:80:
                    d4:ec:54:5c:44:b3:73:55:d8:f3:7f:d8:54:f8:c1:
                    29:f5:e6:04:d8:b4:46:a3:81:15:79:10:75:74:4d:
                    62:7e:95:c9:6d:c7:37:72:24:8c:bc:22:0e:c8:f0:
                    00:81:44:ae:65:f1:c3:33:9a:9e:93:25:26:30:56:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.240.0/20
                IPv6:
                  2803:1100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27762

    Signature Algorithm: sha256WithRSAEncryption
         20:d6:4e:bd:61:c5:72:9f:4e:39:5f:f1:2a:ba:c6:b0:51:9d:
         82:3b:e9:3b:7d:b4:22:b5:da:ea:42:a5:1f:65:f6:13:49:e6:
         ec:88:1a:55:53:28:a5:ad:74:c8:8d:ed:ec:23:21:7e:e6:2a:
         6c:f5:37:1e:6b:51:87:7a:79:2a:70:25:b7:d7:69:95:70:3e:
         21:90:6e:db:65:ad:c5:d5:f0:23:ef:37:be:c3:7c:d3:84:d2:
         63:69:b6:73:9d:7c:e3:58:55:71:d3:5d:de:81:5f:7f:2a:19:
         69:73:d7:ba:03:86:c0:8c:22:a6:2e:7c:fb:88:8b:33:30:47:
         37:61:12:51:0e:fe:bf:53:04:b6:20:e5:20:0c:0d:82:43:44:
         9f:bd:e6:e6:59:8c:0e:af:59:d1:23:15:f7:30:5c:3f:b2:17:
         02:52:0a:d0:16:33:a7:0e:01:89:c2:aa:75:07:7e:87:2d:47:
         ef:ed:a3:40:ca:0d:1c:55:88:1d:43:e3:e7:e1:70:eb:aa:dc:
         8c:93:b3:29:9a:76:e4:f4:60:ae:64:28:9f:1a:41:3b:49:4e:
         04:ab:92:37:a4:94:a6:da:4d:07:e2:ef:ac:15:36:66:6b:71:
         0c:4d:ba:5d:24:98:9c:3a:7b:ec:28:dd:33:2f:8b:e7:30:de:
         44:fa:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----