Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f75d567409587c423de2dbd5dde5cf60431a02a.cer
File:                     4f75d567409587c423de2dbd5dde5cf60431a02a.cer (raw, json)
Hash identifier:          tUOcbRmjXMP33Po3soBVgCn0xygekUuavfFk+jMKwaE=
Subject key identifier:   70:C5:F9:24:89:A7:62:95:B7:D9:CA:8E:05:33:22:B9:70:67:9C:E2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8FD7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f542b47d-f64d-40f9-945f-c6e9eb5ab9c7/4f75d567409587c423de2dbd5dde5cf60431a02a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f542b47d-f64d-40f9-945f-c6e9eb5ab9c7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:24 +0000
Certificate not after:    Fri 11 Oct 2024 15:00:00 +0000
Subordinate resources:    AS: 28023
                          IP: 170.238.244.0/22
                          IP: 200.91.48.0/21
                          IP: 2803:14c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16317821 (0xf8fd7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:24 2017 GMT
            Not After : Oct 11 15:00:00 2024 GMT
        Subject: CN=4f75d567409587c423de2dbd5dde5cf60431a02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:92:f7:4b:2c:8b:62:ba:0e:e2:aa:34:8a:
                    e4:3d:11:e3:06:01:17:bd:3e:66:1e:f3:76:1b:27:
                    e7:58:b8:b0:7d:91:ab:27:0d:27:a9:e4:3a:28:59:
                    da:80:b2:51:6b:66:87:2c:35:25:08:2f:7a:b7:0c:
                    a1:93:29:00:bc:d5:58:41:a2:75:88:27:ab:da:16:
                    0e:81:a9:b5:f1:8d:fe:a9:98:3a:77:e6:de:75:86:
                    b1:d5:38:06:ca:18:91:fc:01:56:b4:17:31:86:2f:
                    98:eb:16:a7:df:eb:27:79:6c:c6:6f:e2:ea:5a:fe:
                    87:2c:fe:d4:76:5d:fd:a2:d8:63:da:2d:22:f8:13:
                    18:f7:fc:1e:ba:e8:3e:03:33:8d:04:f1:13:00:2c:
                    ba:fc:03:ea:a4:de:60:3e:7a:f7:e2:fe:25:0a:e3:
                    56:04:01:d6:c3:61:0c:e5:45:e6:ab:8a:04:d3:44:
                    91:7b:fc:80:50:e2:fe:e2:82:52:a3:e4:7e:c6:44:
                    cb:67:a4:09:51:6d:5a:92:27:1d:7c:f3:3e:d4:c6:
                    a3:6c:5b:ac:64:e0:9d:fd:b3:50:e0:1f:23:db:c6:
                    1f:ae:20:a7:00:40:d6:25:59:1d:12:68:29:be:23:
                    bf:17:1e:77:31:6c:51:88:e7:df:0f:63:dc:b2:7a:
                    a6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:F9:24:89:A7:62:95:B7:D9:CA:8E:05:33:22:B9:70:67:9C:E2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f542b47d-f64d-40f9-945f-c6e9eb5ab9c7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f542b47d-f64d-40f9-945f-c6e9eb5ab9c7/4f75d567409587c423de2dbd5dde5cf60431a02a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.244.0/22
                  200.91.48.0/21
                IPv6:
                  2803:14c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28023

    Signature Algorithm: sha256WithRSAEncryption
         91:55:a9:78:17:34:83:5a:92:6d:24:2d:76:3a:4c:78:75:f3:
         8b:28:ea:ea:00:b1:97:78:ad:f0:9d:69:5c:44:b5:0e:cd:a9:
         32:62:e0:02:ef:2f:dc:56:d9:2a:7d:12:2a:c7:ba:76:d0:8c:
         29:98:d8:e0:fb:db:56:57:55:e8:2e:02:38:f5:fe:9f:65:7d:
         a5:d7:23:2e:1d:49:4f:a6:ea:57:4b:14:01:d5:af:ad:ad:ab:
         7c:c0:9e:6d:d6:cb:37:e0:91:3c:18:c1:aa:e1:d8:66:0b:66:
         2f:4c:b4:89:ce:41:79:a3:a9:61:0b:21:be:99:d8:a8:24:13:
         eb:6f:38:e4:3b:87:59:f0:04:66:b6:29:9c:da:9e:bf:c4:c7:
         3e:82:75:f9:8f:3b:14:14:87:47:5c:03:6f:f7:3a:c5:80:ef:
         3c:a9:c5:09:ae:d9:04:c6:c5:cb:9f:5d:71:d7:7f:23:e9:8b:
         82:5a:53:1a:94:dc:db:52:c7:a6:76:28:69:c2:e8:ef:39:09:
         0c:4c:73:29:97:6d:f4:eb:56:1b:1f:08:36:b1:f2:d6:cc:58:
         a7:42:92:1f:19:58:db:21:f9:72:f5:ba:fd:70:69:42:bd:a0:
         41:4f:a9:f8:05:a2:24:3c:ca:25:14:b3:a5:c4:0a:67:37:d6:
         59:c9:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----