Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2405c3da8e57043485597aab583bd992bc059347.cer
File:                     2405c3da8e57043485597aab583bd992bc059347.cer (raw, json)
Hash identifier:          ZMvkEFZg36tGjB16M5zm6ykxI51ZgderkrL62lKexTs=
Subject key identifier:   D1:FD:5B:00:A9:09:7C:57:72:22:0F:46:97:6B:18:45:E3:DB:8D:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01029E3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/2405c3da8e57043485597aab583bd992bc059347.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:34 +0000
Certificate not after:    Wed 01 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 266686
                          IP: 190.122.176.0/22
                          IP: 2803:9d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16948798 (0x1029e3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:34 2017 GMT
            Not After : Jan  1 05:00:00 2025 GMT
        Subject: CN=2405c3da8e57043485597aab583bd992bc059347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:6c:e2:38:fd:51:7a:3f:3e:79:e0:45:8c:
                    f5:ff:4c:7f:62:5f:13:ed:34:8d:df:64:4a:66:4e:
                    9f:52:a2:4f:5c:df:e8:88:39:a8:d8:72:b6:95:82:
                    13:32:77:41:8c:b3:0d:5b:c0:1b:b2:91:e9:d4:4b:
                    ae:06:e2:17:13:5c:db:0b:c8:8b:23:40:bd:76:f8:
                    b1:de:94:3f:7a:f4:c8:d3:bc:3c:08:2b:49:7f:5e:
                    8c:d2:d2:d9:db:4c:ae:97:4b:78:41:59:f8:82:40:
                    54:e8:b2:ab:05:08:1e:c8:d2:1e:aa:1f:89:21:62:
                    f5:b3:db:26:95:fd:fa:ec:b9:0a:b7:37:47:83:cd:
                    ba:46:0f:b1:6d:af:a2:51:54:2d:79:5a:c2:80:24:
                    54:1e:59:dc:c2:13:1d:4a:36:01:0b:6f:67:6a:b7:
                    2d:c5:69:dc:67:d6:94:34:73:23:bb:a0:93:a1:7d:
                    25:f1:0a:91:f6:a7:d3:00:71:ec:08:b7:1b:05:3c:
                    6f:ca:b6:03:d2:c1:92:33:cc:34:91:17:51:42:8e:
                    35:ab:e7:ee:f0:f2:7f:95:cd:1a:cf:c6:53:80:bb:
                    eb:d5:46:7d:18:9d:64:40:42:39:7f:ef:8d:e4:de:
                    0d:ec:78:26:04:e5:94:44:d6:b9:6d:49:5d:30:bb:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:5B:00:A9:09:7C:57:72:22:0F:46:97:6B:18:45:E3:DB:8D:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0450663b-0e22-4548-ae71-4c7d1f661077/2405c3da8e57043485597aab583bd992bc059347.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.176.0/22
                IPv6:
                  2803:9d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266686

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:c7:49:9a:4d:ff:06:d5:7e:17:0d:e4:65:fc:16:5c:28:
         18:4b:ee:b5:af:cd:23:ce:4d:c4:cd:56:f3:9b:b1:e5:3e:b1:
         7b:a5:ec:c4:97:f7:07:20:a8:6d:be:1b:c7:45:ce:fb:4a:54:
         03:40:45:7b:54:08:3c:ac:4e:18:18:ac:5b:01:f5:d6:53:db:
         38:9a:06:d4:31:80:d6:7b:3f:24:c7:21:b5:33:17:94:af:92:
         ac:95:93:36:51:ed:3d:04:38:e5:f7:c6:16:54:c4:93:7c:ad:
         f6:85:71:d9:84:86:ef:c2:24:1d:3d:19:8e:6d:f4:f6:32:bd:
         1a:4a:95:a1:f3:f9:a4:bf:21:c3:27:78:07:50:00:af:41:6e:
         92:05:00:b8:cf:4d:13:0e:cd:62:a0:32:6d:98:09:0d:9b:bb:
         29:16:8e:8b:29:d2:af:94:65:b3:46:c9:ae:d8:89:54:77:98:
         08:03:74:fa:64:22:7e:f7:47:b8:d8:59:41:46:a3:73:87:3a:
         d7:3e:92:b1:d9:d2:b0:90:0f:6b:4e:72:04:b9:8b:43:83:38:
         bb:03:e0:30:0b:08:63:3f:89:d0:ee:af:1a:b4:14:cc:53:3c:
         ce:c7:3d:f2:90:ed:6f:21:63:14:c3:4a:88:b8:66:1b:1f:58:
         52:b2:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----