Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
File:                     1df9a14191089eaefc01526e171a2fc63b8cc044.cer (raw, json)
Hash identifier:          5LGkVpu73oXYWzYxzIztmhaj9OOxrszcmQcnH4Z7c6o=
Subject key identifier:   B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC85BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:30 +0000
Certificate not after:    Mon 19 Feb 2024 15:00:00 +0000
Subordinate resources:    AS: 19180
                          AS: 25701
                          AS: 25705
                          IP: 148.102.0.0/17
                          IP: 190.8.128.0/19
                          IP: 190.187.0.0/16
                          IP: 200.31.96.0/19
                          IP: 2001:1380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14452159 (0xdc85bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:30 2017 GMT
            Not After : Feb 19 15:00:00 2024 GMT
        Subject: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:8a:6a:98:80:a6:83:e6:1f:8f:c9:ac:cc:
                    59:6b:a2:51:98:7b:e4:da:75:b9:fb:1c:5a:5a:28:
                    79:65:4d:89:19:76:77:11:dc:9c:89:23:74:a2:e2:
                    a8:44:41:dd:46:f6:b3:4b:f3:14:5e:a9:64:10:4b:
                    cf:bd:22:8e:49:f8:d4:35:d1:66:7f:5b:70:c4:f7:
                    d7:d0:c4:61:4b:d7:c7:ce:aa:3b:15:e2:ce:de:9e:
                    34:27:12:b0:e2:a6:4f:87:82:81:f7:c5:64:72:f1:
                    3e:cf:11:0d:50:31:b5:a4:57:c9:4a:bd:c3:14:6a:
                    0e:d1:bd:22:b9:9b:53:77:4c:c6:cc:46:59:25:18:
                    46:65:8a:3d:18:02:11:e0:2f:1e:e5:3f:21:ac:7e:
                    10:5f:61:09:6f:9d:b4:c1:3d:24:82:81:69:58:4a:
                    c7:32:aa:10:56:6f:c3:9b:dc:9a:43:30:3b:38:05:
                    41:2b:17:30:e0:da:c3:eb:86:cc:f9:0a:1f:e8:d3:
                    fd:a0:66:2a:99:a0:78:3d:99:a8:df:27:2c:35:2f:
                    5f:93:d5:67:3a:4c:41:47:b0:37:eb:49:29:7c:31:
                    ad:4c:f7:6e:8f:37:92:25:23:df:54:d1:b1:78:71:
                    55:d0:a8:60:f0:a2:c9:e0:7b:62:50:62:c9:aa:5e:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/17
                  190.8.128.0/19
                  190.187.0.0/16
                  200.31.96.0/19
                IPv6:
                  2001:1380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19180
                  25701
                  25705

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:31:40:55:8a:6d:86:7f:9e:dc:43:ba:ec:4d:28:99:33:
         72:59:16:97:c7:b6:4f:08:b2:09:5a:13:38:6f:bc:80:0d:20:
         df:01:c1:18:8a:c0:f2:9a:5e:fd:e8:9d:81:78:07:6b:37:08:
         ac:f0:d3:aa:82:eb:c6:34:85:1a:d5:47:0b:27:f3:79:79:bb:
         eb:57:62:d2:72:5a:b8:49:46:ba:8f:67:b7:6e:e2:34:5d:68:
         42:54:55:d3:31:0a:e5:63:7a:4d:6b:17:51:69:8c:b4:62:54:
         05:20:ad:cb:96:e0:c3:b4:2e:39:c8:34:47:81:71:6c:70:17:
         f3:f0:79:a3:45:a4:4d:6d:3a:db:a1:af:b4:3c:e4:81:17:02:
         b4:8b:8d:59:9e:62:95:35:41:aa:49:e0:5f:4e:32:bd:2e:a5:
         60:c8:48:6c:a1:10:0d:82:c8:fc:31:31:5b:e2:07:c3:94:24:
         e0:c4:a2:79:f5:4b:d1:73:10:e6:17:ef:6e:6b:01:20:d4:e3:
         a0:49:0d:f2:86:79:7b:b0:58:4c:f0:1e:b3:bc:b5:bd:b5:3b:
         8a:a5:ea:74:71:fb:da:1f:ed:a0:2c:fb:1c:7f:67:07:fa:1f:
         75:6b:88:7e:08:1c:86:80:22:d0:d6:03:39:ff:9b:bf:a3:96:
         25:13:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----