Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e9c8f6a0c0a796e7d20aa8a0172f75b2ffe4e0e.cer
File:                     3e9c8f6a0c0a796e7d20aa8a0172f75b2ffe4e0e.cer (raw, json)
Hash identifier:          bODmSJCdSNCAf1nT3cDDF97eopQ4pj8+rhdRZvBblQs=
Subject key identifier:   CF:38:05:BC:A2:EF:43:75:E8:21:8A:71:04:14:C0:5F:D9:EC:32:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F299AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a728e977-52a5-402c-be8a-469b4fba21a7/3e9c8f6a0c0a796e7d20aa8a0172f75b2ffe4e0e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a728e977-52a5-402c-be8a-469b4fba21a7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:29 +0000
Certificate not after:    Thu 22 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 52288
                          IP: 179.43.128.0/18
                          IP: 190.211.252.0/22
                          IP: 2800:980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15899050 (0xf299aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:29 2017 GMT
            Not After : Aug 22 05:00:00 2024 GMT
        Subject: CN=3e9c8f6a0c0a796e7d20aa8a0172f75b2ffe4e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:79:68:32:88:fb:05:64:9f:74:7b:8d:c8:
                    21:48:8a:af:9d:1d:15:4d:9e:15:f1:9f:ad:de:c0:
                    52:86:6a:e0:01:28:f0:3e:83:47:de:2e:b5:96:13:
                    41:76:9a:37:4a:8b:f8:ac:c8:68:3a:d2:bb:d4:92:
                    33:f4:15:06:d1:6c:af:76:cb:92:61:07:ef:7b:17:
                    f1:6e:84:1e:f9:ee:6c:e4:80:46:60:c2:81:c2:a4:
                    e3:23:b9:27:f0:95:a7:76:92:a1:cf:65:ef:2a:5d:
                    a7:a4:bb:d0:fe:2c:ca:54:c6:44:23:b4:74:73:63:
                    40:24:b1:fc:bf:66:e0:75:de:56:b7:5e:47:bc:1d:
                    93:c3:34:d3:0d:7d:34:a7:7c:65:b7:29:0a:de:97:
                    b5:b3:e2:09:18:3d:ca:11:e9:d9:f0:32:b9:df:c3:
                    bb:75:d7:65:2c:7b:d7:98:0e:2d:3f:ac:82:04:61:
                    85:58:2f:1b:1c:d2:d9:62:cc:3e:c3:75:25:59:3c:
                    b0:43:bb:20:75:be:10:9a:3a:5b:ab:05:80:f9:e1:
                    c2:4a:fe:5c:b3:cd:f5:91:86:05:36:17:04:8e:ef:
                    9d:53:9b:73:ae:ca:86:ae:9d:7e:4b:6d:5c:00:03:
                    fb:36:39:cf:58:80:80:f7:50:9f:e7:db:4d:c9:f2:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:38:05:BC:A2:EF:43:75:E8:21:8A:71:04:14:C0:5F:D9:EC:32:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a728e977-52a5-402c-be8a-469b4fba21a7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a728e977-52a5-402c-be8a-469b4fba21a7/3e9c8f6a0c0a796e7d20aa8a0172f75b2ffe4e0e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.128.0/18
                  190.211.252.0/22
                IPv6:
                  2800:980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52288

    Signature Algorithm: sha256WithRSAEncryption
         45:55:7b:39:71:8a:57:a0:61:d9:cf:c4:fd:06:49:43:fc:04:
         0c:be:9b:f5:3d:0f:41:8b:5a:01:46:53:f3:de:da:52:ce:6e:
         ab:e7:0f:40:77:22:ba:ba:30:1c:36:93:b1:4d:2c:d3:fa:52:
         71:ce:38:59:30:4b:3a:bb:6e:a3:b5:6e:54:b0:81:ed:17:46:
         4f:82:de:40:43:60:f7:de:13:05:01:20:ef:8c:80:22:90:c5:
         97:a3:2e:e6:3c:a6:26:58:4e:dc:16:95:2f:9d:73:79:71:09:
         98:1c:4d:3d:e5:b8:d8:a2:e7:d6:eb:59:91:42:ed:4d:3d:32:
         c7:b4:fc:d4:ad:1a:bb:66:17:c3:33:ab:71:25:e1:09:c4:c6:
         a4:13:c8:12:bd:c4:df:64:36:05:ce:30:98:57:ab:e5:85:8c:
         2a:8a:0f:49:c8:ac:10:5c:53:31:04:29:49:d4:5d:4a:a0:20:
         a9:16:6b:9b:ed:01:9b:b3:0e:7f:10:6a:29:72:cc:6f:87:f1:
         ed:34:83:e3:a1:ac:6b:14:e5:df:b2:d1:3e:76:f6:c7:5e:5e:
         ce:1f:d9:f4:f4:25:3a:e3:20:bb:1d:ca:20:55:55:87:04:b8:
         2d:c8:89:94:19:62:0c:a6:26:7f:3b:90:c6:2b:5f:ab:e0:83:
         af:00:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----