Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f1e2a52444a0d172144873b2fd63a399edcf8df.cer
File:                     3f1e2a52444a0d172144873b2fd63a399edcf8df.cer (raw, json)
Hash identifier:          DJvb/C5a6Lq3B6Qx3bz9mj9cxHqP27GP9r9H0zEECOk=
Subject key identifier:   3A:31:D5:B2:30:A3:EA:89:5D:30:D5:F0:39:FD:2E:87:19:FD:7E:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F04D58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7344dad2-61c0-439e-8488-722b5836aeb9/3f1e2a52444a0d172144873b2fd63a399edcf8df.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7344dad2-61c0-439e-8488-722b5836aeb9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:56 +0000
Certificate not after:    Thu 01 Aug 2024 06:00:00 +0000
Subordinate resources:    IP: 190.170.192.0/18
                          IP: 2800:a038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15748440 (0xf04d58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:56 2017 GMT
            Not After : Aug  1 06:00:00 2024 GMT
        Subject: CN=3f1e2a52444a0d172144873b2fd63a399edcf8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:77:70:4d:b6:8c:d2:99:e8:ce:02:51:df:
                    70:7e:00:ac:ef:e9:88:6c:dc:30:e3:b9:b5:e9:5e:
                    44:f7:23:36:bd:a4:2b:5a:e7:17:47:1c:4a:ff:98:
                    27:b9:c5:1a:6b:8a:ca:f7:c8:9b:d8:2e:31:88:ad:
                    7b:b4:83:32:9d:26:38:b1:22:00:96:a8:2e:18:85:
                    a2:9b:55:36:80:6d:24:fb:e8:92:26:b7:98:9d:8b:
                    71:fe:3d:f0:94:87:3f:67:20:de:ce:76:36:4f:aa:
                    b8:44:37:a4:ac:68:95:0a:91:26:8a:26:fe:85:a5:
                    c4:f1:58:87:31:01:5e:ad:66:db:d7:12:5d:5f:63:
                    7a:c5:59:13:a9:84:ce:36:78:2b:74:c1:9a:3f:2f:
                    67:a5:34:be:d1:e0:52:f8:72:43:b0:81:88:f6:08:
                    ed:1e:97:f6:d3:ff:54:32:59:4e:86:b3:25:87:74:
                    f9:45:4c:3a:92:d5:e1:72:e1:50:18:34:80:89:3c:
                    e2:90:4e:5a:ad:c0:75:0d:4f:0d:1a:ec:e8:49:32:
                    f2:92:ec:60:7b:9d:11:e0:fd:9c:50:8a:88:59:ce:
                    41:f4:3e:ed:af:23:ae:6c:34:f0:a3:2c:34:47:f7:
                    be:d3:36:30:d3:6e:7b:5e:bf:23:b9:91:a6:77:c7:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:31:D5:B2:30:A3:EA:89:5D:30:D5:F0:39:FD:2E:87:19:FD:7E:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7344dad2-61c0-439e-8488-722b5836aeb9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7344dad2-61c0-439e-8488-722b5836aeb9/3f1e2a52444a0d172144873b2fd63a399edcf8df.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.192.0/18
                IPv6:
                  2800:a038::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:2b:2d:1d:f2:d1:e4:8b:63:04:88:51:90:99:94:95:ba:
         78:e8:e6:2b:55:b2:ea:d1:8a:19:41:01:69:0d:7d:9a:5f:f5:
         fa:11:3c:41:a5:36:c7:f0:10:8c:9c:47:a6:10:ee:66:de:97:
         4b:01:cd:96:ab:e4:37:ca:64:60:24:be:89:94:b3:71:40:92:
         9e:e7:7b:41:1b:73:04:41:e3:02:22:65:c5:65:3f:59:36:43:
         b8:dc:77:3d:74:7e:6a:6d:0b:65:cd:f3:b8:4d:81:67:14:64:
         21:73:12:6f:46:d1:ef:88:06:0e:de:f3:06:2c:c6:ff:81:2c:
         b6:20:a4:6b:99:e3:cb:a3:4d:05:2b:95:40:d2:89:9d:32:7c:
         a4:c3:8d:b3:0d:ce:9f:fd:2c:b4:e3:7e:54:42:82:16:96:c3:
         53:95:06:92:d1:1e:40:ba:cf:9b:44:fe:ee:f3:f8:c8:2a:ef:
         67:b2:f3:70:05:6b:5f:f3:16:20:62:58:9f:e9:aa:b2:35:31:
         d8:cd:c9:40:9f:28:b3:14:53:15:f9:02:65:85:be:30:98:39:
         eb:8f:91:72:d7:2c:3c:d3:1b:ae:db:4f:e9:e9:56:b3:c2:7b:
         01:f2:d3:5e:df:55:3b:d1:f7:b3:76:91:cc:49:37:19:78:be:
         2e:87:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----