Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer
File:                     b33596c5bda819ba4815e88789b6d43c8973f503.cer (raw, json)
Hash identifier:          XCSXoVcIPhEbfGqmNXfOe4afSDCLCJpiJhEBOdLlDpY=
Subject key identifier:   B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010383D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Sat 11 Jan 2025 16:04:09 +0000
Subordinate resources:    AS: 263698
                          IP: 191.102.36.0/22
                          IP: 2803:aa80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17007568 (0x10383d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Jan 11 16:04:09 2025 GMT
        Subject: CN=b33596c5bda819ba4815e88789b6d43c8973f503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:d7:cc:82:ff:21:4b:d0:9c:61:3f:bd:9e:
                    d6:22:5e:f6:2a:85:17:64:ce:7d:d0:dc:88:44:f1:
                    ad:cf:98:f9:28:6f:93:54:e5:2e:96:e4:2d:48:61:
                    60:d2:a5:03:be:e3:51:9e:ad:32:4a:65:0f:4f:41:
                    22:99:a2:ea:36:0b:28:48:d3:d0:b6:66:89:4f:ba:
                    ef:d5:23:28:d5:0b:dd:4a:f9:9d:fa:08:d0:7e:47:
                    9f:27:42:ff:11:f5:00:86:a4:8a:4b:38:e2:a3:67:
                    f0:41:84:28:c0:08:d4:6a:43:11:63:80:6f:ea:3f:
                    d8:ae:aa:40:ea:bf:07:b2:3f:af:da:d9:26:aa:06:
                    92:f9:b8:5c:62:76:70:aa:eb:46:51:d1:f7:5a:90:
                    f9:c4:02:47:f1:75:c8:84:e1:48:45:7d:b6:f8:b3:
                    fc:e6:2e:a1:fa:0f:2e:7f:e4:c1:14:36:de:8f:ef:
                    db:a4:0f:04:ba:35:3b:c8:79:76:d2:e8:ad:4b:e6:
                    e1:20:ce:d0:c1:13:98:87:6c:78:e5:04:b2:6f:16:
                    76:ea:53:14:37:74:48:43:98:95:17:2d:15:91:f1:
                    33:8c:96:ec:d6:54:61:d4:e0:fd:15:6b:0c:dc:34:
                    e3:2d:af:0d:4d:3b:72:ef:39:1f:4e:97:8a:e2:21:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.36.0/22
                IPv6:
                  2803:aa80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263698

    Signature Algorithm: sha256WithRSAEncryption
         38:95:a8:6c:f6:95:87:6a:07:b8:da:7c:e9:ca:69:45:a8:7e:
         ce:df:aa:30:33:c1:46:ae:ef:b1:da:c4:05:42:5a:8c:02:33:
         3b:71:21:b4:53:29:4f:fb:c6:f0:de:f0:4a:06:25:b9:9f:65:
         33:a6:18:0c:ae:e1:f9:8d:6e:52:a8:1c:3f:77:dc:ad:70:9a:
         fb:f4:0a:2b:7c:63:5c:56:da:9a:d0:e8:7f:fc:f3:59:dc:17:
         80:9a:50:f5:da:be:f4:52:bd:ae:e9:80:e5:93:2c:5a:51:58:
         8a:d3:3f:87:ea:23:0d:af:17:9d:6c:b6:a1:42:cc:47:38:a2:
         83:f8:e3:0f:8e:04:f9:6c:07:48:af:61:99:ab:72:9d:b9:d9:
         fe:3a:bf:08:1a:11:91:04:4b:b7:e3:b6:14:3a:70:76:17:c8:
         12:17:62:2b:b6:02:19:33:6d:9f:b9:67:34:e7:b8:79:bd:6f:
         18:c4:e9:f6:e4:77:35:4b:b7:0b:7b:7c:e4:e8:78:8e:74:99:
         2d:2a:b6:6d:64:f6:4c:dc:3f:af:02:ab:58:77:a6:7d:4e:1a:
         df:8e:75:c3:af:67:a4:00:e2:4a:4a:ec:2c:93:8e:2a:dd:c0:
         37:4b:0d:5e:c3:83:f7:be:cf:5b:14:c0:1a:22:df:63:74:32:
         5b:52:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----