Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4401fc25e43099f6b87907ff9f75ca409f7afb10.cer
File:                     4401fc25e43099f6b87907ff9f75ca409f7afb10.cer (raw, json)
Hash identifier:          h3VTGa+x3gyDmZZrHFkApoo8LF30W9hL8mkkPuiEOAY=
Subject key identifier:   2B:33:BA:46:26:89:A0:FB:6D:68:1B:AD:E2:49:4B:53:7D:0E:5D:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D80F44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:51 +0000
Certificate not after:    Mon 25 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 27731
                          IP: 200.1.124.0/24
                          IP: 200.1.127.0/24
                          IP: 200.115.180.0/24
                          IP: 2801:0:320::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14159684 (0xd80f44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:51 2017 GMT
            Not After : Dec 25 05:00:00 2023 GMT
        Subject: CN=4401fc25e43099f6b87907ff9f75ca409f7afb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:1a:70:2d:8b:c0:84:06:ac:30:f7:8c:55:
                    37:74:6d:43:a6:28:1c:fc:a6:ed:86:65:2d:30:bb:
                    ba:58:f9:61:73:a1:25:af:04:42:88:70:f0:83:fd:
                    5d:4e:1f:58:b8:0e:55:2a:8e:0b:8a:9d:8a:c6:c5:
                    14:ac:08:36:11:5a:35:27:d1:51:c4:60:f3:61:17:
                    9f:be:bf:e0:92:31:46:c0:f6:2b:a5:3b:02:4f:17:
                    5d:97:03:af:a6:66:47:f2:1d:aa:a6:f2:12:5d:b6:
                    15:80:d0:11:3f:a0:9d:2a:90:3c:2a:91:ec:fa:12:
                    c5:5c:2f:72:13:58:f0:b0:84:52:d5:36:cc:38:de:
                    63:f5:1c:dd:41:ee:95:93:7f:7d:8b:54:4c:fd:9a:
                    20:8d:3a:18:9e:65:10:69:4f:31:35:b3:20:7c:a0:
                    23:2f:e8:01:22:75:57:9a:31:25:62:34:dd:00:5f:
                    17:c8:fd:bc:40:ee:86:2d:46:56:ee:f5:45:25:90:
                    27:99:0c:f4:69:ee:27:8d:d1:8f:9e:c3:1a:8a:ce:
                    e8:34:cf:3b:bc:33:2c:4b:cd:94:68:be:45:4b:18:
                    c1:3c:49:4f:a5:36:c0:e6:21:fc:fe:1d:14:76:8e:
                    9d:75:76:58:3e:8e:4b:4e:7e:37:e4:4a:d1:36:a3:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:BA:46:26:89:A0:FB:6D:68:1B:AD:E2:49:4B:53:7D:0E:5D:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.124.0/24
                  200.1.127.0/24
                  200.115.180.0/24
                IPv6:
                  2801:0:320::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27731

    Signature Algorithm: sha256WithRSAEncryption
         b1:86:75:5b:f8:f1:5f:61:ca:4e:a0:c0:c0:b7:12:cb:c7:57:
         ef:6b:0c:64:05:b7:6a:e1:39:f3:87:64:a8:ac:e5:0a:43:48:
         de:fb:5e:9c:8b:0c:49:74:4a:bd:67:21:30:e8:48:25:30:b5:
         e1:9d:09:78:1d:e5:fd:a3:2c:f2:47:e9:0f:6d:fd:0d:66:72:
         35:c8:f2:e7:2e:29:41:2b:5c:cb:1d:81:ad:72:4e:b4:f2:df:
         26:64:0d:b8:d9:98:4a:b1:15:25:95:ee:89:00:89:0c:99:7b:
         df:05:31:66:bf:27:03:14:32:3d:ab:bc:cb:05:26:45:10:2f:
         c8:69:2d:a7:6a:29:20:09:c0:18:eb:0b:ef:a8:15:25:0d:ed:
         52:97:06:3c:b7:09:7d:0f:6b:e2:8f:8c:31:96:72:b5:35:29:
         0b:8a:d3:f9:db:0f:16:ee:1d:e1:85:8a:89:6c:13:95:6d:5c:
         bf:12:87:bb:d1:7f:f0:1e:ee:c1:e3:c3:66:29:59:a3:de:49:
         90:c5:9d:0c:6b:1d:4e:8d:dd:3b:c3:86:12:49:e4:f0:fd:3d:
         3a:82:4a:65:8b:d5:ef:44:19:7c:8a:77:c4:81:25:d7:02:1f:
         dc:29:22:19:be:09:12:34:17:8e:80:6c:47:4d:38:b3:bd:41:
         57:47:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----