Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8009f9ca0e90186684c967a6b8c12708f8ab41b2.cer
File:                     8009f9ca0e90186684c967a6b8c12708f8ab41b2.cer (raw, json)
Hash identifier:          0pW4THQsa7LyJXuecfExTGITCIYdbYMOjkn4Hx3cjdY=
Subject key identifier:   DD:8D:9C:37:DC:EE:DF:16:0F:72:B9:5A:01:B3:E3:96:2F:B5:CD:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F99EEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/8009f9ca0e90186684c967a6b8c12708f8ab41b2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:47 +0000
Certificate not after:    Wed 16 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 263767
                          IP: 167.250.48.0/22
                          IP: 2803:d940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16359146 (0xf99eea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:47 2017 GMT
            Not After : Oct 16 05:00:00 2024 GMT
        Subject: CN=8009f9ca0e90186684c967a6b8c12708f8ab41b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:99:b2:0a:52:87:2a:3d:0a:c1:c1:99:0b:
                    6f:ee:bd:0c:c9:73:e7:b5:c8:fc:72:08:89:2d:09:
                    01:fd:dd:08:a9:6b:9c:ea:d1:aa:ef:4a:7d:40:5d:
                    b6:03:c3:7e:a9:e2:06:34:77:bf:54:c7:b1:f3:5e:
                    5b:0c:b7:71:48:55:a7:cf:fd:40:d4:25:a8:f1:d0:
                    93:49:4c:1a:ae:17:b9:52:16:cb:70:79:bf:8a:37:
                    06:35:a1:df:2f:79:cf:02:e9:ce:da:cb:df:7d:02:
                    68:32:d9:35:4d:06:74:c4:3d:10:e3:75:e3:b5:a0:
                    bc:c6:95:b3:9d:78:7c:38:30:e2:6a:66:24:18:06:
                    ee:16:b1:1f:5d:33:b3:d2:be:44:48:0e:4c:45:ec:
                    2e:70:f9:8c:8f:33:ac:0d:ab:37:43:6b:87:fe:49:
                    2a:48:60:b2:c0:85:f9:16:f0:8b:f8:31:e6:aa:b7:
                    f7:d3:84:1c:10:e2:cc:53:4d:f0:d2:de:2c:a3:c7:
                    5f:91:3f:d0:f5:a3:a5:4b:8e:57:0a:ad:0f:ba:50:
                    c2:d1:73:e0:a6:a7:1d:f2:92:00:bf:9d:c7:ed:e5:
                    4f:36:74:e9:c4:51:63:4e:00:73:2f:0c:3d:a3:e0:
                    92:9f:1b:17:4f:bb:5a:59:32:5f:82:a6:9e:b4:8b:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8D:9C:37:DC:EE:DF:16:0F:72:B9:5A:01:B3:E3:96:2F:B5:CD:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/8009f9ca0e90186684c967a6b8c12708f8ab41b2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.48.0/22
                IPv6:
                  2803:d940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263767

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:3c:ee:4c:c3:c9:d1:e5:49:ad:df:97:be:01:51:bb:d2:
         87:13:3a:f8:c4:c9:bb:84:9b:be:21:9c:94:a5:15:f6:dc:36:
         af:72:f1:29:a6:b1:af:2c:3c:cc:57:a8:ca:f0:7e:dd:c4:7a:
         a7:ce:8a:7b:24:d1:eb:64:01:a1:6b:67:58:c8:32:12:1d:e4:
         bf:0a:7e:0a:38:ae:ea:f1:00:ab:e7:57:de:5e:1b:74:35:4c:
         e3:88:b5:9c:50:d5:38:50:27:8f:b9:9d:6b:e3:a7:9b:7a:45:
         e6:6c:e4:ff:5d:88:0c:73:19:dd:ca:c9:73:a6:70:fb:2e:f2:
         d2:ee:de:68:52:e4:d3:79:dc:e7:cc:cf:3f:99:9e:56:16:ad:
         ca:f4:ba:4a:7f:0e:f1:5a:eb:08:e2:19:ca:63:ba:a7:6c:29:
         2a:bb:11:d7:86:84:a1:5f:97:d5:2c:3d:64:19:c9:5f:d1:a6:
         d8:b3:c0:10:65:3e:ef:6d:35:91:0f:45:f1:10:d5:8a:d1:98:
         51:7d:1c:04:92:1d:f2:d1:73:b8:c3:39:09:4d:17:3f:9d:13:
         d2:4c:d5:b2:fa:07:ca:16:34:1b:28:91:e3:73:e1:d4:68:86:
         58:fb:c0:5b:a1:9e:6e:7a:76:7d:6b:47:00:91:07:4b:52:ec:
         7f:64:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----