Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ee1417c821c1047cee571e478b81c5ba728dc74.cer
File:                     0ee1417c821c1047cee571e478b81c5ba728dc74.cer (raw, json)
Hash identifier:          qISXDHC9FA6DEUzUePPZMadJ/TfQaFWuXDN2fepXw14=
Subject key identifier:   89:39:3A:27:3F:B1:D2:B2:F2:8F:D7:F9:1E:50:30:79:0A:E8:6A:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E911A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/0ee1417c821c1047cee571e478b81c5ba728dc74.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:54 +0000
Certificate not after:    Sun 09 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 27845
                          IP: 190.6.160.0/19
                          IP: 190.97.64.0/19
                          IP: 190.97.192.0/19
                          IP: 2800:9f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15274406 (0xe911a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:54 2017 GMT
            Not After : Jun  9 06:00:00 2024 GMT
        Subject: CN=0ee1417c821c1047cee571e478b81c5ba728dc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:8e:a3:e4:0c:73:a3:a7:09:10:be:26:08:
                    1d:d4:63:67:2a:1b:23:ff:09:df:36:0a:19:c6:b9:
                    76:70:25:c3:f6:6f:e8:e5:8a:3b:b5:43:b8:e3:33:
                    02:18:a9:0d:56:9c:cb:78:0b:dd:67:fb:01:c5:84:
                    1b:91:83:e9:15:f8:58:6d:c5:d0:01:b0:a7:b6:b1:
                    04:26:a8:91:8b:36:92:46:33:c0:72:ed:5e:7f:fd:
                    88:c5:be:df:1a:26:05:ba:23:2a:09:a8:3d:9b:55:
                    97:4c:ea:61:a7:c8:87:ab:a8:cd:7f:72:51:97:9f:
                    86:3a:18:05:96:13:ce:ca:83:a4:a4:78:da:af:e8:
                    4f:f3:f8:4f:87:50:87:a3:d1:62:d7:8b:60:11:58:
                    a5:6e:e8:c7:3a:97:29:02:66:87:2a:37:d5:25:c9:
                    f5:94:10:b0:18:08:b4:c8:54:ce:bb:e0:a0:cb:9d:
                    e9:62:83:4d:0b:8c:9b:ee:80:34:dd:f7:ac:dc:ba:
                    7f:b3:14:50:b7:1c:12:ac:82:d5:35:39:b3:77:8f:
                    d8:2f:e0:77:be:cb:e7:55:f2:dd:1d:f5:2a:0d:9e:
                    ae:c7:33:92:83:32:8e:8a:ff:88:a3:ae:4f:62:78:
                    9b:ef:04:6e:6c:0b:8e:52:b2:ff:67:5c:17:ae:fe:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:3A:27:3F:B1:D2:B2:F2:8F:D7:F9:1E:50:30:79:0A:E8:6A:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/0ee1417c821c1047cee571e478b81c5ba728dc74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.160.0/19
                  190.97.64.0/19
                  190.97.192.0/19
                IPv6:
                  2800:9f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27845

    Signature Algorithm: sha256WithRSAEncryption
         47:4a:f1:09:30:29:80:5f:00:9f:5a:b7:bc:f4:15:dc:65:93:
         28:fb:3b:73:ed:62:b6:89:6f:d2:9a:c0:c9:9d:b6:6c:55:3e:
         3f:94:24:4c:70:bd:0e:7f:64:9c:40:eb:96:e3:49:6c:25:74:
         d9:a3:61:97:6d:ca:e3:f3:b2:60:03:08:0f:d6:93:31:c9:3e:
         0c:5b:7a:a9:de:d9:50:e2:8c:d8:e7:02:4b:f9:b3:e3:d5:fb:
         8e:21:ef:26:90:64:3a:75:a9:9c:43:0a:68:b2:7f:75:ae:3b:
         64:5d:53:ae:15:69:71:e0:8c:6c:72:54:e7:95:07:40:7d:6e:
         5a:3c:e9:4c:9c:39:98:76:02:9e:fb:f0:2d:36:c0:eb:e7:80:
         44:8e:54:80:4a:80:fe:15:0d:b0:60:2e:eb:be:3a:db:a9:cd:
         c1:c1:d7:c9:3d:77:5f:ce:b1:54:41:8a:2e:f2:0d:e1:1d:74:
         10:de:29:64:9f:3d:5a:32:c4:46:a4:7f:e4:8a:c2:9a:cc:60:
         ce:46:42:51:89:7e:37:a7:a2:67:f7:6f:a0:03:23:4e:b0:94:
         38:56:95:1c:70:82:c4:a0:40:7d:55:64:3f:6f:94:d9:52:86:
         6b:89:ec:3e:4b:0c:d3:ef:e0:85:7a:27:f5:9a:79:80:44:84:
         2b:2e:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----