Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7557920befd2cb115a85e3e331f30ebd7d5004c.cer
File:                     f7557920befd2cb115a85e3e331f30ebd7d5004c.cer (raw, json)
Hash identifier:          Isbyn92nfmv2ZkI6oGXvBlYe7e2C9O4pVTP8WLaOL4s=
Subject key identifier:   CE:F5:4C:B6:34:66:71:6B:0A:74:90:D8:C6:EE:C9:31:77:E2:B1:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104DA2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/f7557920befd2cb115a85e3e331f30ebd7d5004c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:21 +0000
Certificate not after:    Fri 24 Jan 2025 14:35:15 +0000
Subordinate resources:    AS: 262932
                          IP: 170.150.64.0/22
                          IP: 191.103.96.0/20
                          IP: 2803:ba80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17095215 (0x104da2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:21 2017 GMT
            Not After : Jan 24 14:35:15 2025 GMT
        Subject: CN=f7557920befd2cb115a85e3e331f30ebd7d5004c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:81:7c:f8:7d:b6:a4:73:2b:e9:0d:a9:14:
                    45:6b:e0:25:0f:de:e7:e4:48:d9:9f:9f:10:14:53:
                    cd:4b:ed:f3:f4:7a:fa:a7:4b:49:7c:99:94:5e:16:
                    31:cf:ad:49:b5:37:0c:fe:83:80:f3:66:7e:9c:42:
                    ef:00:3d:59:d8:4f:25:ba:aa:4c:e5:33:ae:6a:2a:
                    96:35:e7:38:16:5c:f9:50:fc:ae:bf:f2:38:d2:cd:
                    79:79:98:89:ab:69:95:4e:6c:a8:bd:86:e0:b7:1c:
                    c2:ed:d7:e1:2a:26:c0:d7:53:0b:f7:46:01:cd:6c:
                    71:d4:e0:b6:93:22:f7:90:86:a4:cd:24:0e:d0:d6:
                    58:f4:67:f9:ad:a3:1c:45:7c:d0:c2:d1:d2:50:22:
                    d6:de:f0:54:ed:e1:47:3d:f6:b1:b3:16:70:40:40:
                    e3:32:62:66:d9:0f:a1:48:d5:15:77:4b:6b:3c:13:
                    37:b7:52:fa:29:bf:52:62:6e:b3:ea:58:86:5c:56:
                    35:3c:95:ee:2a:ca:60:5d:ca:d8:61:f3:31:50:22:
                    a3:c8:10:44:44:c7:e5:f5:c4:a2:24:ab:50:3c:a4:
                    fa:dd:46:ec:fe:98:d8:fb:8d:b6:30:c5:f1:c3:92:
                    f3:d5:51:2c:d9:21:1c:56:a9:9a:b0:f0:e1:d4:67:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:4C:B6:34:66:71:6B:0A:74:90:D8:C6:EE:C9:31:77:E2:B1:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/f7557920befd2cb115a85e3e331f30ebd7d5004c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.64.0/22
                  191.103.96.0/20
                IPv6:
                  2803:ba80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262932

    Signature Algorithm: sha256WithRSAEncryption
         4f:ef:c8:06:a7:39:f2:91:8d:92:b1:e1:43:bb:ed:a9:a7:e4:
         ed:cf:52:e2:27:cc:8c:9c:b9:f2:f2:37:6b:cf:ea:fc:c9:af:
         f0:cd:96:1b:1a:f8:fd:7e:83:a9:24:5a:29:8f:98:5b:a2:ee:
         15:ca:8c:b0:28:9f:96:6a:4c:53:5b:46:5e:12:59:df:05:db:
         02:7e:40:f1:0d:01:81:05:bd:6f:75:0f:63:a9:dc:93:a0:19:
         a3:62:81:aa:81:27:79:a0:07:d4:dc:75:cd:91:00:a9:00:ef:
         2a:4f:3e:78:fd:92:d2:24:43:3b:16:09:24:7e:00:be:eb:aa:
         b4:bd:a9:97:fd:90:4f:34:c0:35:fa:4b:e5:0e:c1:6a:98:97:
         b2:58:14:05:5a:5d:6c:83:c4:89:e7:c9:56:4c:00:0e:b1:e3:
         b0:aa:0e:d9:c1:1b:c1:42:27:56:3d:8b:9e:59:9f:ef:bb:19:
         2b:ba:54:34:52:fe:a3:55:fc:68:c9:3e:aa:e5:2c:72:fa:4a:
         dd:46:2d:69:2c:20:09:72:b7:de:81:d3:9a:ac:49:ed:99:bd:
         bd:81:13:5a:81:dd:fd:1e:48:f8:71:5a:16:34:94:75:3b:ca:
         fa:4b:d2:59:fb:6c:ef:e8:14:1c:2f:f5:ee:4b:93:ad:58:fe:
         44:57:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----