Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer
File:                     41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer (raw, json)
Hash identifier:          3fbgeHPeQK89cyRU+J7DFQ60C/CxGUINTSQfzaEj5yg=
Subject key identifier:   58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC9043
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:56 +0000
Certificate not after:    Wed 20 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 269980
                          IP: 138.117.40.0/22
                          IP: 170.254.0.0/22
                          IP: 2803:f840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14454851 (0xdc9043)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:56 2017 GMT
            Not After : Mar 20 06:00:00 2024 GMT
        Subject: CN=41fdade6fa28cbe8bc8b37b44f50fb9818152d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:f9:4e:e1:bf:32:ed:69:c9:6e:80:56:c5:
                    42:16:40:80:37:7e:f1:59:0c:99:2f:fd:85:68:8d:
                    93:03:10:98:0e:19:da:ce:71:54:2e:af:62:9e:e8:
                    6a:59:64:23:ac:91:b1:92:64:ae:ea:59:49:a4:a5:
                    21:aa:27:10:1a:75:a9:7b:3a:cc:78:54:2a:19:41:
                    da:d8:bd:11:c8:48:68:41:b3:67:e1:f1:b3:14:fe:
                    dd:d0:48:99:7e:57:1b:27:d6:61:b2:04:7e:9e:b1:
                    9e:b6:36:8e:19:33:c8:34:f8:29:b9:ca:d6:ad:ea:
                    6f:87:e4:f7:48:4d:94:4f:da:7f:ee:a3:b7:e2:ef:
                    dc:21:0f:cd:8f:81:c6:35:9d:c6:ce:6d:ef:ef:f5:
                    01:fc:bb:32:bc:8b:f8:60:eb:1c:7e:b5:cd:6a:86:
                    e2:1a:b6:a0:5d:b0:fe:75:12:a3:8c:ef:9b:f3:7b:
                    f6:59:a8:9f:04:58:de:b7:2f:08:e6:91:04:2d:d7:
                    f2:b6:a2:a6:c3:8a:2b:2e:3a:95:b8:d9:00:56:b0:
                    9e:f2:41:82:36:1f:4a:e4:64:01:1e:af:77:cf:87:
                    db:30:e8:44:7c:ea:f8:23:03:f2:07:f3:64:2d:d9:
                    c4:94:65:da:da:8a:1b:45:45:fe:5c:46:65:6c:0f:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.40.0/22
                  170.254.0.0/22
                IPv6:
                  2803:f840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269980

    Signature Algorithm: sha256WithRSAEncryption
         a0:01:59:27:21:f6:bd:fe:1d:fe:e7:9f:d4:39:bb:75:53:ef:
         11:95:37:fe:f8:f2:49:90:be:ae:7a:f0:ef:ef:6c:94:50:97:
         e6:01:54:a2:f6:e0:fa:41:4e:01:2f:75:ef:78:da:90:96:94:
         71:c2:46:6e:ed:29:ea:c1:ef:09:9b:13:1d:0d:7b:f4:1c:22:
         50:b3:a3:51:76:c5:e4:56:10:de:81:46:0c:be:7f:76:55:93:
         7b:96:2f:04:cd:e2:06:23:ed:a0:ac:a7:24:98:f4:23:b1:66:
         03:4c:99:a4:96:0a:b7:a7:25:a6:94:ac:67:53:4e:6b:e8:b2:
         89:b6:ff:47:51:6e:42:29:d5:7c:98:3b:fa:34:5a:11:ed:f3:
         2a:d8:23:58:73:70:b7:bc:b4:24:f4:69:c0:66:f4:c3:0c:71:
         46:c9:ab:eb:e3:6b:f5:dd:f4:9a:91:29:d6:4f:1a:5d:9e:a8:
         7f:aa:75:d9:1e:ed:1f:ff:c6:6d:26:ac:e5:1f:5c:58:e1:ad:
         44:31:65:1c:ab:54:02:bb:eb:a8:05:80:04:90:22:21:53:83:
         ba:a0:30:3d:39:fb:96:88:43:54:91:73:19:9b:2e:58:0a:45:
         24:b0:79:6a:50:62:5f:84:34:3d:8e:30:87:ef:1f:2b:ac:f0:
         87:f9:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----