Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd23d99a27c4af985ce7ec3b51226634dfd3b178.cer
File:                     fd23d99a27c4af985ce7ec3b51226634dfd3b178.cer (raw, json)
Hash identifier:          CSWwUB9XXH+mT9zWB311skdAq0XpogFa7EVJ5QnHWeM=
Subject key identifier:   00:E1:88:1E:17:19:6F:53:65:A4:96:D7:77:F2:59:A9:AF:B6:68:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103344D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/fd23d99a27c4af985ce7ec3b51226634dfd3b178.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:21 +0000
Certificate not after:    Wed 08 Jan 2025 16:19:43 +0000
Subordinate resources:    AS: 263742
                          IP: 181.224.176.0/21
                          IP: 2803:bd00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16987213 (0x103344d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:21 2017 GMT
            Not After : Jan  8 16:19:43 2025 GMT
        Subject: CN=fd23d99a27c4af985ce7ec3b51226634dfd3b178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c1:59:79:d4:ef:84:03:21:23:a7:cd:05:de:
                    2f:95:5c:7f:59:ea:af:51:ca:9f:86:35:c2:e9:9b:
                    24:c1:a0:5d:4d:95:c4:34:f2:7a:6b:2c:50:18:7a:
                    6e:bf:a0:ce:8e:6c:fb:d5:5b:e0:c7:4a:c0:3b:b3:
                    d1:8e:e8:63:0a:93:75:c9:1e:cd:2a:13:67:f4:a9:
                    23:cf:fb:b2:37:91:4d:7b:6a:6d:91:fa:d1:30:54:
                    3e:9c:ad:42:cc:5d:c0:60:71:a1:a8:48:11:9e:3d:
                    b1:e1:3d:0f:5d:76:b7:9f:69:e1:13:5e:32:1b:cf:
                    c1:f6:32:b7:5e:24:fd:6b:3f:4c:2c:03:7e:21:a6:
                    99:00:4e:c8:4e:0e:d2:70:df:6d:01:de:d6:45:3e:
                    80:44:ec:ab:20:f6:d0:64:1a:6d:66:f0:67:5b:22:
                    26:ba:9f:f9:77:7c:f4:1c:3b:d3:4d:d3:33:e0:1f:
                    22:ea:c5:a6:8d:28:b8:f7:8d:b2:5b:48:51:d6:66:
                    87:e4:05:63:3f:8f:c5:ee:1d:f5:13:35:75:a6:f5:
                    5f:36:e5:19:29:01:2b:11:fd:d5:ea:0b:4c:67:08:
                    bc:dd:f5:91:c4:d6:82:d2:3e:b6:a9:47:dd:44:4c:
                    4c:8a:c6:db:b0:3f:8e:df:0e:66:ed:9d:ce:e0:06:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E1:88:1E:17:19:6F:53:65:A4:96:D7:77:F2:59:A9:AF:B6:68:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4857b72b-5804-4059-a16b-b17e2cab7bbb/fd23d99a27c4af985ce7ec3b51226634dfd3b178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.176.0/21
                IPv6:
                  2803:bd00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263742

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:a7:58:54:91:18:78:71:21:fc:c4:21:17:7b:f6:b2:17:
         b2:0f:28:e2:3e:c2:46:16:4f:6f:ab:cc:73:ee:4c:61:d4:bd:
         0b:8c:50:8d:29:6c:1a:15:68:eb:dd:93:ec:17:b6:65:08:d9:
         62:02:a0:c6:4f:48:d8:e5:ab:9f:2d:d3:73:48:d0:b9:4e:b5:
         c8:99:60:fe:67:69:af:f7:b4:0f:12:f0:0e:9d:74:ad:ae:99:
         76:8e:ba:6e:8d:c4:b3:6a:f4:bb:62:17:c2:c0:d6:e7:c4:8e:
         fa:6a:25:5d:18:45:8e:b3:89:df:20:bb:2b:b2:a8:a1:5f:91:
         a9:ef:eb:c5:3f:42:50:68:39:76:b6:22:5b:3f:f9:a7:cc:f4:
         3c:3a:21:25:c1:8c:82:d5:ca:58:ca:52:36:f2:c9:7a:d4:c2:
         e4:84:c3:8d:d3:b2:e4:e3:53:ef:0e:b5:d7:02:83:1a:f4:fe:
         31:da:a9:b5:7a:c7:3b:01:77:4c:ae:5c:f1:08:c9:aa:bc:45:
         e5:ca:5d:cf:cf:a3:77:e1:a6:1e:60:e9:28:27:db:c3:e9:32:
         49:0e:b2:75:13:35:3f:43:47:46:70:d4:06:ca:f3:c4:05:58:
         5c:d7:15:22:a0:8d:18:e3:a8:06:e3:57:7f:0b:63:b4:a0:32:
         59:f6:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----