Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58c2bc7895cd7c147803e7c9790ece03a9e82fa6.cer
File:                     58c2bc7895cd7c147803e7c9790ece03a9e82fa6.cer (raw, json)
Hash identifier:          9e1Bi4DxbzoDzD9bAh/QvvXEtLdCr6g6k14120mhwGE=
Subject key identifier:   18:DC:42:6A:C7:DA:80:CB:A2:FA:32:DB:5C:BD:9E:55:15:E2:8F:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F30470
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/58c2bc7895cd7c147803e7c9790ece03a9e82fa6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:25 +0000
Certificate not after:    Mon 26 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 11014
                          IP: 143.0.76.0/22
                          IP: 170.83.4.0/22
                          IP: 170.150.152.0/22
                          IP: 190.12.96.0/19
                          IP: 190.104.192.0/18
                          IP: 190.111.192.0/18
                          IP: 200.110.216.0/21
                          IP: 2800:a10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15926384 (0xf30470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:25 2017 GMT
            Not After : Aug 26 06:00:00 2024 GMT
        Subject: CN=58c2bc7895cd7c147803e7c9790ece03a9e82fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:7b:17:5e:48:f6:c9:79:ce:bf:7d:1d:7a:
                    7c:7f:c1:7d:ef:d7:e3:95:d9:69:80:be:a1:f4:12:
                    c9:63:24:bc:cf:3d:59:11:d3:89:ce:3b:4a:37:7d:
                    68:22:52:f4:1f:78:f2:ed:1e:cd:8c:ff:81:8e:4a:
                    80:8b:90:c6:b8:19:e2:5f:b4:e3:e0:8b:8a:93:4b:
                    7e:92:95:fa:2e:7c:c8:a9:b9:0e:8b:2e:e0:7f:cf:
                    2e:d3:58:0d:c7:c9:44:3d:50:f8:d7:d4:aa:25:21:
                    b8:d9:50:5b:68:9b:b1:62:14:d6:30:f6:54:55:29:
                    a0:1e:b5:bc:2b:b1:d1:27:c6:43:47:d8:dc:dd:2c:
                    7f:6c:bd:61:31:7d:ff:fe:9e:6b:86:e2:7f:bc:05:
                    39:fd:32:5f:d9:3d:0c:5f:dd:15:a5:a9:42:42:6e:
                    7f:7a:2c:b3:96:4f:3f:a3:bd:07:4f:24:d9:13:e5:
                    e6:5f:bc:e8:2c:9a:4f:e0:2c:47:6e:81:e1:55:97:
                    12:63:e7:38:00:ef:56:6e:f8:c8:d3:b5:33:6b:8b:
                    3c:9f:5a:8f:33:ea:20:fd:65:bb:35:09:06:76:85:
                    cc:25:de:75:22:0f:b8:51:14:9b:9b:f2:e1:8c:e4:
                    0d:4a:cc:58:d3:56:29:ee:9e:d5:47:e4:16:00:26:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:42:6A:C7:DA:80:CB:A2:FA:32:DB:5C:BD:9E:55:15:E2:8F:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e2efa464-0902-4477-a433-3476f42cc325/58c2bc7895cd7c147803e7c9790ece03a9e82fa6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.76.0/22
                  170.83.4.0/22
                  170.150.152.0/22
                  190.12.96.0/19
                  190.104.192.0/18
                  190.111.192.0/18
                  200.110.216.0/21
                IPv6:
                  2800:a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11014

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:c7:14:87:11:34:84:1a:39:4e:e4:81:c1:39:1d:8b:63:
         22:2a:3d:da:b9:6c:ee:ac:0e:86:0d:ae:7e:71:53:9b:9e:f4:
         f7:93:6a:be:8e:b3:06:30:14:be:58:2f:56:68:3d:9e:fc:cc:
         4b:11:d1:ea:68:95:b9:cf:f6:d6:05:be:25:5a:a5:ba:e2:24:
         df:59:3a:ce:7a:99:6c:87:54:0c:3d:d0:c4:30:5f:27:64:f8:
         20:25:5c:9f:39:4d:a9:f7:a5:06:c0:54:c6:35:4b:11:e8:34:
         f1:7c:1e:b3:12:5d:b5:a3:f3:c1:a2:82:75:76:0c:eb:d5:66:
         24:2a:2b:ed:1e:3b:bb:b1:a9:dc:96:5e:82:1f:cd:1e:48:43:
         6d:c8:4c:11:49:19:d7:8b:54:b6:08:0a:c3:45:67:78:8d:ad:
         da:56:30:86:fc:c9:e0:4d:3b:95:68:57:83:b8:20:7d:16:2c:
         45:aa:f4:0e:c1:a4:b9:a5:ec:45:b3:df:21:b9:b8:84:67:f4:
         03:65:69:96:4b:2f:20:7e:c1:19:9e:ef:af:47:3c:69:fd:80:
         73:59:aa:0a:b8:ce:5e:3b:be:2d:69:f5:16:71:ec:9a:60:a9:
         c5:4b:27:3d:fa:22:aa:22:e9:4d:ef:9f:94:1b:b2:d8:7f:4e:
         8e:04:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----