Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08cedb2eaffe507cdf663780e18981d24340f5d1.cer
File:                     08cedb2eaffe507cdf663780e18981d24340f5d1.cer (raw, json)
Hash identifier:          Rr8e6UFF1RPyDiOKNTbQELO13dJ4NGXhtIw3cU9ygLQ=
Subject key identifier:   88:0E:F5:A5:E3:05:8D:1E:2F:CA:C1:F5:29:6F:6E:4B:0F:E7:78:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010451EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/08cedb2eaffe507cdf663780e18981d24340f5d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Sat 18 Jan 2025 21:48:18 +0000
Subordinate resources:    AS: 264687
                          IP: 200.10.201.0/24
                          IP: 2801:12:9000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17060332 (0x10451ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Jan 18 21:48:18 2025 GMT
        Subject: CN=08cedb2eaffe507cdf663780e18981d24340f5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:5d:fa:e8:2e:c6:21:45:5f:bb:5a:ef:eb:
                    b3:bc:fa:2b:4f:22:ca:9e:07:57:e6:95:fa:8f:bb:
                    24:b1:d3:3e:04:05:0c:f8:48:e6:a1:34:61:03:a9:
                    75:0e:87:28:37:b0:d5:82:b1:f6:db:81:55:fc:4e:
                    78:35:5f:24:5c:0a:32:ef:4c:0a:4d:d8:b6:4d:76:
                    15:90:cc:f6:b6:63:93:e3:4c:86:18:99:91:b1:da:
                    6f:d8:30:9c:83:67:f5:03:37:53:63:68:f9:45:94:
                    bd:a8:ab:45:61:7a:61:03:e5:6e:3f:99:98:e3:bc:
                    8d:a1:c7:de:ab:8e:03:6e:be:50:57:eb:6e:81:bf:
                    d3:bd:32:8f:78:9c:ac:2d:01:2e:62:d7:9e:aa:fb:
                    81:7a:ef:7c:af:7b:00:d7:ff:5f:65:48:7d:3d:43:
                    e9:93:a0:95:a7:6c:ab:12:f2:12:6b:36:a1:0a:96:
                    12:f7:51:01:60:63:d4:af:99:1b:71:27:f3:26:3b:
                    fe:d3:5f:07:87:50:9e:09:f2:bf:08:f9:e0:27:a0:
                    49:6f:61:06:27:83:ef:cb:18:d5:99:79:a2:3b:cd:
                    05:d0:a5:c7:65:6b:38:06:59:ac:2f:15:e0:ed:57:
                    8b:da:68:9a:db:77:77:5d:55:28:e3:62:d7:a8:0d:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:F5:A5:E3:05:8D:1E:2F:CA:C1:F5:29:6F:6E:4B:0F:E7:78:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72d0877a-a507-4515-8ff5-d8eb3c925099/08cedb2eaffe507cdf663780e18981d24340f5d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.201.0/24
                IPv6:
                  2801:12:9000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264687

    Signature Algorithm: sha256WithRSAEncryption
         26:83:6d:78:d9:2e:2c:85:e9:75:c9:a6:d0:e1:62:8e:44:fc:
         e9:7b:61:0c:44:26:a8:36:6f:c1:dc:0f:f9:a9:0b:3a:28:e3:
         eb:92:a2:b6:cf:c1:25:f6:0e:45:58:a7:95:1d:36:65:f6:9b:
         d4:5b:30:54:51:be:23:dd:30:56:57:4a:40:55:e3:e5:7e:93:
         bb:01:8d:71:e4:79:2e:1f:ea:cb:1f:0f:b8:fb:68:fa:a8:83:
         43:bb:32:c0:a1:ec:b7:2d:bb:07:d9:5f:d8:74:ee:7c:ec:58:
         87:77:71:09:d0:56:3a:a1:05:f0:9f:ac:bb:cc:b0:fa:72:62:
         bd:5e:cc:f0:c1:08:8d:ea:4e:58:68:41:c1:85:42:92:c7:cc:
         99:63:8a:bb:15:ff:4a:a1:1c:fd:aa:74:94:27:e0:60:13:f4:
         6c:e7:c5:21:77:32:18:3a:11:44:56:b2:57:3f:6e:fd:0e:01:
         3b:ce:34:11:a8:29:77:c3:46:79:f9:15:97:90:7e:00:eb:cd:
         87:b9:14:22:d9:42:7b:8e:e8:70:ad:a3:a6:3f:eb:f0:7b:5e:
         79:30:8c:4a:3f:a0:62:22:dd:ab:4d:3f:07:03:b6:45:53:7c:
         85:07:db:a9:7d:cf:9a:b7:ef:29:db:35:fe:e5:15:7f:71:90:
         31:d1:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----