Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82225174b3988d5920cd5a642f74ca96004f3b86.cer
File:                     82225174b3988d5920cd5a642f74ca96004f3b86.cer (raw, json)
Hash identifier:          xfZXXgwj3XFFV3IPB9pAwlNX2Q7OkrEbB674YtczDxI=
Subject key identifier:   A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010456BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/82225174b3988d5920cd5a642f74ca96004f3b86.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:17 +0000
Certificate not after:    Sun 19 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 26505
                          IP: 186.190.240.0/20
                          IP: 200.124.128.0/19
                          IP: 2800:9e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17061565 (0x10456bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:17 2017 GMT
            Not After : Jan 19 05:00:00 2025 GMT
        Subject: CN=82225174b3988d5920cd5a642f74ca96004f3b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:fc:50:86:16:9b:6f:de:49:72:47:52:b0:
                    d5:e7:5d:3c:c6:47:d2:fd:85:84:76:7b:3a:a7:1a:
                    fc:01:58:9f:98:f2:9e:fa:1d:23:83:6e:57:14:bf:
                    3e:5f:4b:a6:18:dc:a6:a5:25:af:a4:de:8a:a6:27:
                    40:9e:33:4b:2b:fa:ba:b1:2b:c2:b4:bf:a0:9e:94:
                    76:b2:96:1a:60:af:81:73:2b:08:9d:60:f6:6a:21:
                    a9:54:ef:16:b9:de:76:b2:66:16:fa:d8:11:eb:20:
                    25:2c:bb:d9:38:bf:f7:92:6c:f1:bd:e3:21:07:2a:
                    14:35:55:5e:70:09:cc:78:5a:30:a8:4e:3c:4a:b3:
                    35:23:85:c8:ec:17:3b:db:c6:3d:12:4e:93:c3:f8:
                    f4:db:68:ea:0b:9a:03:b7:e8:77:41:18:87:de:31:
                    87:06:2c:e9:68:6e:9a:26:79:2a:3a:88:41:b2:62:
                    e6:30:7d:51:dd:ae:30:c9:51:93:26:bf:4b:d6:c3:
                    73:a5:d1:b6:94:7e:02:eb:57:2e:a9:c2:e5:6b:33:
                    07:7f:c4:a1:76:38:62:9e:0b:c8:f2:7e:33:14:38:
                    61:7f:9f:78:79:a7:6a:fa:a0:53:e3:77:e9:ed:65:
                    88:1e:ed:46:7b:f8:65:bb:25:83:dc:32:a5:d8:53:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:0E:25:B5:F3:51:46:12:87:2E:65:A8:35:52:98:B3:67:42:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/625f07cc-275d-4d29-afd8-1212efcfa216/82225174b3988d5920cd5a642f74ca96004f3b86.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.240.0/20
                  200.124.128.0/19
                IPv6:
                  2800:9e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26505

    Signature Algorithm: sha256WithRSAEncryption
         ba:a2:20:10:df:bc:57:72:b8:c4:d9:74:29:cd:f5:97:c3:87:
         c2:49:f8:4c:09:d5:30:83:02:85:12:44:84:a1:d4:36:1c:10:
         f4:38:49:be:2d:12:d0:e7:24:55:a5:c4:ae:18:c7:a5:3b:b9:
         8c:d3:ec:95:ce:ef:df:1b:24:38:84:40:57:e0:45:a5:a7:a2:
         b7:c8:14:b7:30:55:b3:b5:f6:ec:2e:21:71:ef:df:7b:e5:5f:
         a5:a7:e3:19:c4:19:1c:95:b1:c2:55:dc:a1:e0:3d:24:b2:bd:
         4c:25:81:23:d8:aa:ee:f7:cc:8b:c2:64:7b:80:a7:b6:8b:a7:
         35:13:ac:b1:4a:61:32:0f:66:ff:f0:0f:10:84:56:22:0d:d9:
         43:ce:da:b1:1d:a5:c0:2a:47:87:29:e6:3b:df:12:02:4f:a0:
         3c:df:e1:c9:86:e2:fc:dd:45:81:2f:bf:82:80:6d:80:a3:0e:
         30:59:a8:4a:9c:b9:cb:c3:fe:51:84:aa:75:b8:9a:2e:78:e0:
         40:65:a6:61:72:d1:cc:f9:6d:09:4c:27:be:d3:8f:1a:d4:9e:
         69:0a:3b:ef:db:90:82:89:6b:a9:11:e4:3d:1f:d3:bd:17:c4:
         77:f2:a2:aa:76:e8:1f:f5:6e:92:92:2d:3f:af:bf:78:7c:3d:
         a3:2d:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----