Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
File:                     0a6ca410e9d4d6609a966809763133d36a922b82.cer (raw, json)
Hash identifier:          70970pdQau2Wz3XvbMVjbNyi7TZXFggcbnkTzyNSYaM=
Subject key identifier:   61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECEAC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:16 +0000
Certificate not after:    Sun 07 Jul 2024 18:26:06 +0000
Subordinate resources:    AS: 270009
                          IP: 201.182.240.0/22
                          IP: 2803:8420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15526601 (0xeceac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:16 2017 GMT
            Not After : Jul  7 18:26:06 2024 GMT
        Subject: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:ca:32:a7:6d:93:0a:9a:40:7b:77:7b:c2:
                    69:bb:f8:41:6c:b7:e3:7d:8e:0a:af:c7:26:a3:e9:
                    94:d7:49:35:23:0f:07:b8:6b:98:8c:a0:d6:78:38:
                    52:e7:f7:a7:83:bc:16:e5:aa:4e:7c:e6:9d:44:3c:
                    e7:c7:57:f3:3a:6a:d3:d1:6a:ac:5a:32:50:61:f1:
                    e8:d8:46:13:30:41:70:bc:11:e8:17:db:9f:5f:85:
                    e1:4c:ba:18:8a:a2:cb:16:5c:d7:bd:c4:88:bd:ff:
                    09:bc:6a:fa:c5:29:67:f3:99:f3:e0:98:97:e4:cd:
                    91:1f:37:72:67:70:2e:73:56:fb:8b:1c:d1:e1:4f:
                    dd:59:06:c3:ec:a3:d3:8e:e9:51:3d:ca:78:d5:c1:
                    5e:bd:18:ae:9d:b1:92:fb:6b:60:bc:03:e8:26:57:
                    15:2e:ee:e5:61:c5:b9:79:23:42:cb:75:79:79:79:
                    ea:4e:88:06:5d:bc:41:c8:b9:53:85:28:67:81:d2:
                    1a:0f:5d:2a:5e:f1:64:74:e9:7f:29:6a:23:bd:e1:
                    8f:97:89:2b:9c:68:a2:19:fd:32:32:4e:12:a6:32:
                    36:b6:bf:a2:a9:07:da:56:5a:a1:a5:82:ca:80:75:
                    e7:0f:d7:ed:ca:44:21:8c:34:06:59:87:44:cc:cd:
                    13:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.240.0/22
                IPv6:
                  2803:8420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270009

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:ac:08:b5:14:34:23:8e:fe:57:4c:d2:be:32:d2:79:d9:
         6e:36:c6:b3:01:37:3e:39:1f:86:af:0f:51:c0:06:42:b1:08:
         73:60:0d:2a:20:9a:55:62:ea:85:eb:89:1b:0c:55:bf:3d:65:
         71:cc:3b:1f:fb:50:19:3f:1d:1e:17:ef:b5:06:ad:47:57:b4:
         76:af:f7:43:ca:d0:62:f5:96:f0:33:71:83:5d:a9:78:c9:57:
         c7:fb:81:9d:74:bd:bb:ef:63:84:e7:1b:e2:c7:22:1a:47:f0:
         fb:99:95:18:a4:86:12:4c:4c:f4:f0:d7:ad:d0:8a:77:0c:d4:
         89:bc:83:76:71:7b:c3:5f:e5:f5:02:ce:5e:d3:e4:0c:29:9d:
         d3:1b:74:97:4d:0d:48:12:03:9b:35:23:1d:d9:ca:bd:68:36:
         9f:12:da:27:76:28:1d:56:5f:7a:df:ed:43:30:34:ec:74:0e:
         94:5b:57:76:4a:f9:65:f5:27:a2:52:26:c2:54:a5:f5:1f:3c:
         1f:31:95:aa:17:4a:be:05:ee:17:fb:b8:fd:1f:23:58:f4:01:
         42:03:f6:c5:49:b0:55:07:a1:0f:fe:10:db:fb:6f:9f:85:8e:
         4e:71:ba:64:b2:81:7b:59:20:f4:36:ec:5e:72:26:ae:52:9e:
         b2:ce:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----