Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
File:                     36e192b55cb56ddb327e18a090fa757000686249.cer (raw, json)
Hash identifier:          6B1x7Z4HgxKbWTgDqDh1BNme7SGV5p3P37PQ4L+L26o=
Subject key identifier:   75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01030CC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:53 +0000
Certificate not after:    Tue 07 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 262928
                          AS: 270057
                          IP: 191.102.192.0 -- 191.102.239.255
                          IP: 2803:2a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16977097 (0x1030cc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:53 2017 GMT
            Not After : Jan  7 05:00:00 2025 GMT
        Subject: CN=36e192b55cb56ddb327e18a090fa757000686249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fd:c0:97:43:0e:06:68:6f:9d:b1:47:da:66:
                    5c:27:24:3a:e7:94:24:d3:cd:d2:58:12:f4:29:2c:
                    45:0d:48:44:c3:e1:6f:b4:8a:1a:2d:3f:0b:3a:e9:
                    3c:5f:dd:30:f1:93:01:d9:d3:8b:22:c8:fe:f3:21:
                    6d:f9:8f:52:f8:80:73:a0:93:30:ef:93:4b:ee:2e:
                    0c:e7:aa:b6:40:1f:fe:56:62:e9:c3:a4:cb:e1:94:
                    bd:a5:6f:31:56:38:3e:6c:df:da:f4:d0:50:8b:f3:
                    f4:0b:8c:89:65:37:af:f7:f1:3a:1c:b5:28:f5:5e:
                    f6:77:f1:37:4a:e6:b6:2f:a8:87:13:8e:5e:7c:38:
                    b4:bb:c5:e1:be:f2:0e:db:bd:35:4f:11:21:6c:d7:
                    8a:ae:86:bb:ba:48:3e:a6:71:14:76:22:29:63:94:
                    92:05:7a:3b:ea:40:e3:53:7b:96:d4:72:20:00:b6:
                    9f:43:7c:a7:77:ba:8e:e5:98:47:59:e2:96:1a:c0:
                    9d:22:a1:cc:12:18:ca:eb:a5:c3:c8:f4:f2:f3:e5:
                    dd:2b:72:1f:83:8c:08:18:49:3a:b1:51:1e:78:1b:
                    8d:c7:02:e9:a7:c8:bc:15:26:eb:7e:81:58:30:b7:
                    5d:4a:e9:c8:06:7b:e9:e0:66:27:ad:df:e2:c1:1a:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.192.0-191.102.239.255
                IPv6:
                  2803:2a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262928
                  270057

    Signature Algorithm: sha256WithRSAEncryption
         00:66:de:67:54:ef:2f:ef:30:64:fc:10:6c:22:d4:5c:7b:5d:
         f7:01:8e:e0:e7:31:b2:f2:3a:b2:0b:18:a4:2d:ee:36:30:f5:
         a1:06:ed:e9:e9:9d:4e:3a:e8:da:da:49:e6:8f:d5:24:17:84:
         80:bc:e5:ec:b7:ea:9c:fc:52:9a:3b:5c:5c:a4:47:88:18:bd:
         ac:ee:16:c8:a9:32:dc:fe:18:56:0f:0e:3f:64:1c:6c:9c:cb:
         df:b7:1e:13:fd:84:d0:00:d2:40:8c:46:b5:ee:eb:17:1e:15:
         44:f6:46:a9:94:14:12:38:11:c7:66:3e:fb:fe:a1:dc:38:b3:
         d6:b6:09:99:6b:44:30:89:70:6c:d6:92:c7:2d:39:27:0b:34:
         e5:94:b8:3c:5a:19:ed:15:e3:c0:4a:ea:43:3b:c5:69:6f:33:
         eb:87:ab:48:79:d2:c6:d8:a8:ad:76:b3:21:d7:45:e7:a1:b1:
         25:fa:0a:c4:f0:02:86:24:4d:58:7d:fe:59:4d:09:47:4c:d8:
         d9:21:78:b0:a6:16:ac:fb:89:39:76:50:6d:f6:92:d7:e4:36:
         6a:3a:85:c0:d6:aa:63:3a:78:29:be:f3:63:01:71:84:af:de:
         81:61:fb:f3:89:dc:35:90:e7:79:19:94:b1:4f:a2:b5:9d:cf:
         13:88:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----