Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer
File:                     32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer (raw, json)
Hash identifier:          flkmYyo0WzCFZ6WP24PphGpVbcdAHe5vbr6XPMMANVQ=
Subject key identifier:   81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103AC89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Mar 2018 12:27:55 +0000
Certificate not after:    Sun 12 Jan 2025 18:38:20 +0000
Subordinate resources:    AS: 266753
                          IP: 45.232.96.0/22
                          IP: 2803:7b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17017993 (0x103ac89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 12:27:55 2018 GMT
            Not After : Jan 12 18:38:20 2025 GMT
        Subject: CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:b7:57:2c:8b:2d:c3:ef:92:7a:16:c4:d9:
                    a6:71:f9:51:09:78:51:5b:8f:c3:87:5f:23:6c:44:
                    13:c1:28:c8:b6:ff:20:d9:d0:e7:20:2a:c5:e9:e6:
                    27:17:1e:f1:4b:5e:78:d9:61:50:63:5f:c9:0c:de:
                    61:ea:76:7f:a7:05:01:b6:0a:68:dd:09:7f:ba:67:
                    b3:49:66:df:e5:b4:97:5c:e8:ae:51:4e:6a:b4:25:
                    10:83:ff:08:d8:0f:db:79:db:f3:92:9c:3e:19:3a:
                    86:c4:cb:af:a0:b8:8e:62:1b:51:39:7a:fc:8b:41:
                    e0:18:82:17:72:2a:84:02:c5:53:ee:91:73:2f:fc:
                    ad:58:69:c7:63:f7:9b:8b:b8:76:ae:d9:78:cf:fb:
                    f7:ea:88:66:e4:95:ae:03:21:5d:e6:6c:0d:b9:e5:
                    ac:e6:1a:4b:4d:30:81:cb:fb:19:91:42:2d:b5:06:
                    b8:c3:f6:c0:d4:3d:77:50:e1:3c:8b:11:94:69:3e:
                    37:8a:0c:a9:2d:5c:9c:aa:30:ad:bd:61:6a:c8:06:
                    83:38:a5:01:1e:7d:e7:c7:79:be:98:3b:07:4d:60:
                    e4:5a:23:4b:1c:17:43:1d:ec:ad:e6:6d:22:87:b0:
                    79:6e:03:fe:90:06:12:a9:36:b4:a9:84:ad:65:4b:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.96.0/22
                IPv6:
                  2803:7b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266753

    Signature Algorithm: sha256WithRSAEncryption
         9b:65:bc:a6:9a:b7:e1:6d:2a:d2:b4:78:e3:7b:0a:15:1b:cf:
         2b:e7:74:02:3f:18:20:ad:30:b4:95:d8:ae:91:e8:0f:93:61:
         6f:a1:42:1b:35:ad:c0:c9:4c:ab:d6:88:8a:37:bb:58:35:0d:
         51:51:f2:12:4c:7f:f7:e3:65:bf:03:4c:06:d2:99:53:63:ea:
         f1:6c:fa:ea:e0:32:6e:a2:df:7b:2b:9c:10:4a:cd:40:a8:40:
         73:61:9c:40:3a:bf:5a:a0:53:65:a7:d8:89:7d:79:94:1d:ed:
         2e:de:9e:06:6d:49:37:ed:ad:7b:34:b1:08:8e:26:db:b3:fb:
         a6:f4:b5:3c:90:d1:0e:dd:19:6b:da:28:ec:ea:cd:05:05:13:
         43:c0:20:bb:d8:5a:14:df:9e:9b:ea:26:d3:f1:60:48:a2:35:
         f2:6c:8a:33:cd:7f:79:30:13:ab:f5:1a:20:82:da:8c:7c:79:
         07:70:1b:de:4a:95:6c:8e:64:fc:40:72:e2:9a:01:de:d4:52:
         5c:ae:82:35:62:67:4c:54:c7:83:ea:e0:38:55:b1:c5:80:3f:
         21:a6:d0:1b:16:96:be:13:34:8a:27:22:1c:ee:18:e3:b6:42:
         4e:2a:eb:a5:06:d0:a5:26:09:fb:c0:42:85:63:a5:f7:e4:b4:
         6d:b2:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----