Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4df029da8a6fe8589cc92276ebd6c7161dc8ea75.cer
File:                     4df029da8a6fe8589cc92276ebd6c7161dc8ea75.cer (raw, json)
Hash identifier:          AIQZN+Sa3SgaCPUgy7vAxTkQugq4Uj7QP0kcSwKbaHM=
Subject key identifier:   C6:9C:3D:EB:97:F9:2C:9B:B7:3C:34:78:44:90:45:B3:DF:E5:3E:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E655B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/90abb6df-ecb0-4eba-9a99-8204c3e13df4/4df029da8a6fe8589cc92276ebd6c7161dc8ea75.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/90abb6df-ecb0-4eba-9a99-8204c3e13df4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:17 +0000
Certificate not after:    Sat 13 Jul 2024 20:10:13 +0000
Subordinate resources:    AS: 52399
                          IP: 138.117.128.0/22
                          IP: 200.7.152.0/21
                          IP: 2803:9e00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15095220 (0xe655b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:17 2017 GMT
            Not After : Jul 13 20:10:13 2024 GMT
        Subject: CN=4df029da8a6fe8589cc92276ebd6c7161dc8ea75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:52:f0:ca:db:e6:b0:33:43:7c:93:4f:13:
                    ce:46:02:a7:c2:c5:fc:7d:4f:4c:0b:55:64:43:54:
                    af:93:d6:6a:64:84:b9:62:6f:59:ab:59:84:53:46:
                    6b:a7:3e:24:92:9f:fe:c5:36:50:cc:82:18:97:ba:
                    e8:e9:f5:9d:af:59:29:38:df:d3:40:72:4d:75:c7:
                    cf:ac:5c:1b:49:bd:5c:5c:18:78:3e:2a:8b:19:a1:
                    fd:a0:67:90:53:8a:6a:c1:79:93:f4:0a:96:2c:d0:
                    d1:38:fb:c4:98:e5:36:91:d3:40:f3:b9:1b:92:f4:
                    0b:dc:89:34:09:df:be:9a:6f:92:20:1b:b5:4c:b9:
                    80:08:6c:c2:64:07:1f:c4:c5:dd:21:ae:55:38:bb:
                    c9:30:28:17:42:74:33:03:fc:37:00:04:d3:15:f0:
                    2f:7f:ef:c2:0a:ec:41:46:44:7c:a2:be:4f:c8:d6:
                    63:61:25:2b:2d:cd:ab:a8:c8:10:ab:d9:62:55:fa:
                    06:b5:52:69:00:ac:43:10:13:34:29:39:cd:76:51:
                    13:64:fb:fe:17:ad:64:d0:77:6b:fb:22:f4:aa:21:
                    27:80:85:11:ad:b9:bb:1b:57:91:df:30:e6:79:30:
                    39:94:1b:a3:f8:dd:e7:43:07:a9:f6:e2:67:b3:5a:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:3D:EB:97:F9:2C:9B:B7:3C:34:78:44:90:45:B3:DF:E5:3E:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/90abb6df-ecb0-4eba-9a99-8204c3e13df4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/90abb6df-ecb0-4eba-9a99-8204c3e13df4/4df029da8a6fe8589cc92276ebd6c7161dc8ea75.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.128.0/22
                  200.7.152.0/21
                IPv6:
                  2803:9e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52399

    Signature Algorithm: sha256WithRSAEncryption
         39:05:19:9e:29:a3:df:b7:b4:d8:b0:2a:88:1c:24:86:09:35:
         53:f8:31:03:58:29:9e:8f:4c:1b:f3:37:c2:9c:09:f3:14:19:
         75:fe:9e:6e:07:ca:f5:11:54:c6:32:22:b8:ab:56:99:ee:88:
         88:77:5b:04:d9:b3:55:c1:cd:f0:5b:66:99:3e:19:4e:f0:5b:
         3a:f8:d9:11:0a:a6:74:63:56:69:9b:d3:05:94:60:2f:8b:7b:
         26:63:16:6a:93:31:4e:15:28:6f:43:62:3d:cd:05:16:07:4a:
         d7:b4:d3:84:73:a2:ee:7a:49:bc:5e:5a:36:af:0c:1a:85:c7:
         53:b6:fb:80:b3:12:31:1c:04:7d:36:b5:db:2a:f5:39:98:e7:
         42:5a:a4:7b:89:e1:c3:19:5c:7d:6e:08:cf:68:5b:c0:7a:2e:
         b1:a3:64:3c:66:2e:f1:0a:8a:39:02:bd:9b:f5:21:e9:af:d6:
         ac:30:ce:87:6c:a2:1d:bf:1f:0a:cf:a3:3b:f8:da:9f:e6:ef:
         e1:46:69:9d:3c:31:32:1b:46:e8:3e:12:50:e6:71:c8:38:7d:
         16:29:f9:77:b3:29:57:d0:aa:06:4f:3d:7f:59:6e:2c:d3:9b:
         aa:7a:42:ac:61:90:28:f6:f1:1c:f5:f9:15:c4:98:07:e2:f1:
         20:2f:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----