Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3412449a934b8459db5d421617e014290aa33b9d.cer
File:                     3412449a934b8459db5d421617e014290aa33b9d.cer (raw, json)
Hash identifier:          CFMhAVGU24DxjY4RhV13Va0RvjKBqFvsYSzQjL9Gv20=
Subject key identifier:   6D:47:6F:A3:09:CC:24:11:D6:D6:B2:6E:44:01:DE:4F:1F:E8:A6:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5BFE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:29 +0000
Certificate not after:    Wed 18 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 3551
                          IP: 168.77.0.0/16
                          IP: 2001:1368::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16105445 (0xf5bfe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:29 2017 GMT
            Not After : Sep 18 05:00:00 2024 GMT
        Subject: CN=3412449a934b8459db5d421617e014290aa33b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:62:0a:c9:b8:1b:6a:2a:d6:bf:71:f4:8a:d0:
                    ab:83:a8:eb:aa:49:63:91:be:f9:75:b4:35:91:71:
                    a5:35:85:01:4c:f6:05:09:dc:f5:8e:27:34:29:b1:
                    63:50:87:53:ea:57:0c:f4:91:56:85:87:94:af:f4:
                    d8:59:b9:1c:f0:17:d6:2d:18:8c:81:7c:c8:32:a0:
                    66:03:e0:26:76:0c:35:ad:83:cd:43:f9:11:0c:c1:
                    74:c1:d3:03:29:46:4c:32:44:b6:9e:d3:d3:0f:85:
                    01:5a:51:d6:1a:a4:bd:5f:1f:fb:f5:9e:f9:af:2d:
                    d1:91:90:d9:f6:d4:02:2d:c4:c2:d9:28:27:ac:89:
                    5a:b7:cf:f8:f0:a0:7d:b8:d7:36:dc:37:8b:51:04:
                    50:28:14:cc:67:5b:c8:d7:ef:22:60:9c:e8:5c:97:
                    ba:69:00:3b:ed:ca:e1:00:33:25:9b:c7:55:cb:5f:
                    32:75:b2:96:ae:81:a8:b8:7e:72:16:ee:c4:d0:5c:
                    63:8c:bd:7f:83:a5:c7:18:47:66:69:37:ba:02:01:
                    86:2c:92:73:ba:ce:a3:57:68:ba:eb:52:be:e9:19:
                    28:29:7e:54:09:78:1d:86:69:12:bb:52:ff:e4:ee:
                    d2:62:fb:dc:da:f8:11:e5:a9:6b:4b:cf:fb:70:1d:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:6F:A3:09:CC:24:11:D6:D6:B2:6E:44:01:DE:4F:1F:E8:A6:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.0.0/16
                IPv6:
                  2001:1368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3551

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:85:2c:e2:b8:ba:e2:0f:4f:af:3a:bf:85:c1:2c:70:a7:
         8c:00:8e:88:e5:b6:2e:45:5b:96:51:b4:57:26:dc:04:80:6e:
         1b:b2:32:dd:9e:3f:f5:e1:fa:77:f3:8c:ce:e9:f2:7b:c4:4e:
         9c:e1:bc:bb:d2:bd:5e:21:f5:c4:6b:e8:35:39:37:df:fc:f9:
         de:09:7b:74:ee:78:12:d9:8a:c1:8b:72:97:d7:17:b2:a3:15:
         f0:45:9c:cd:ad:8b:d3:e2:3f:0b:91:8a:ab:e9:64:c6:c9:44:
         fd:96:bd:10:a4:eb:f1:72:b1:f2:bb:21:00:81:71:52:19:50:
         dc:40:4e:39:de:f6:c7:92:eb:6a:b4:0f:c9:0f:c9:b7:22:d5:
         0b:ca:e8:b6:8e:bd:31:ff:88:f1:7a:31:8f:2a:b5:ed:e9:ee:
         36:1a:70:12:70:f6:db:e3:ca:db:38:60:1a:f4:d3:fa:34:b0:
         6b:c5:20:1a:e0:cf:4d:b9:e7:86:67:76:22:86:2e:1f:ef:52:
         5f:4c:3f:51:7c:8d:81:8a:77:1a:e3:57:4e:74:d4:69:a3:e9:
         66:1d:0e:85:48:06:1e:72:3c:4f:4c:2f:a1:91:a1:e8:02:b4:
         cc:34:e1:56:80:02:8b:b9:7b:a3:1d:09:11:09:3c:bd:a5:66:
         77:d6:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----