Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89d4ccaed0ced333fa28447d46fd7ba4bdfa23c4.cer
File:                     89d4ccaed0ced333fa28447d46fd7ba4bdfa23c4.cer (raw, json)
Hash identifier:          tTWH/O039Y2wc0y5Bwd6s0Zwhm3Ww3dmrZfx4GAUumY=
Subject key identifier:   08:DB:F9:88:38:8D:F0:56:86:D3:0B:EF:8F:8D:31:0F:51:EE:DD:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9A516
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f448da9d-d2ab-4f82-b97a-9e31fd0ffe58/89d4ccaed0ced333fa28447d46fd7ba4bdfa23c4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f448da9d-d2ab-4f82-b97a-9e31fd0ffe58/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:24 +0000
Certificate not after:    Wed 12 Jun 2024 21:27:40 +0000
Subordinate resources:    AS: 61481
                          IP: 131.100.88.0/22
                          IP: 2803:1d80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15312150 (0xe9a516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:24 2017 GMT
            Not After : Jun 12 21:27:40 2024 GMT
        Subject: CN=89d4ccaed0ced333fa28447d46fd7ba4bdfa23c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:5a:78:2d:f6:a5:18:74:53:06:fe:b6:d5:
                    0b:1c:e2:d5:05:b9:c4:00:5c:ee:59:90:51:47:40:
                    8e:3d:85:9c:fc:9f:7b:55:99:c9:06:47:32:12:fa:
                    bc:70:96:36:df:a2:99:14:02:b2:95:04:a2:80:9a:
                    4d:a1:86:5f:49:f7:e3:9d:9d:72:a9:c7:42:09:47:
                    cc:8c:b0:73:e8:3e:37:a0:0f:77:9d:60:81:b4:75:
                    e0:2d:99:a6:95:44:03:98:ff:4d:a3:1a:72:41:f0:
                    f6:77:49:ba:e2:e9:b5:fe:10:ac:18:4f:52:51:47:
                    59:14:17:7d:22:93:0c:17:3a:9a:98:e7:ce:47:32:
                    83:26:1b:d5:5c:2d:90:ba:6b:e1:7d:ef:dc:33:1b:
                    65:36:73:fd:c9:3a:cb:4f:d5:a3:70:f9:09:92:e0:
                    2a:b3:c4:d9:ba:35:86:4c:a4:1a:7a:07:dc:4a:65:
                    43:04:e4:fd:e3:48:3c:91:b7:3e:0e:01:c6:5d:4e:
                    22:7d:fa:6b:18:a3:36:d7:fc:71:0b:f7:5e:68:22:
                    62:23:6a:e0:55:5e:fe:7b:8e:da:36:4a:b1:c9:0e:
                    64:2a:1b:d4:67:67:fa:63:d5:1e:a2:98:ae:4e:a8:
                    4b:6d:76:6b:4f:8e:d2:91:ed:5d:cc:e0:fc:ba:30:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:F9:88:38:8D:F0:56:86:D3:0B:EF:8F:8D:31:0F:51:EE:DD:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f448da9d-d2ab-4f82-b97a-9e31fd0ffe58/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f448da9d-d2ab-4f82-b97a-9e31fd0ffe58/89d4ccaed0ced333fa28447d46fd7ba4bdfa23c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.88.0/22
                IPv6:
                  2803:1d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61481

    Signature Algorithm: sha256WithRSAEncryption
         54:ab:61:c0:66:98:6e:b4:28:3e:ae:cd:a9:8e:4b:18:d6:3d:
         9e:fc:65:83:e5:35:f3:8f:9d:ec:95:ba:46:24:05:8c:5d:36:
         c9:18:db:29:1d:7a:87:51:52:75:57:1f:1b:f4:32:7d:60:a0:
         6c:eb:b6:26:e8:16:1e:96:89:00:40:24:00:2d:83:21:9a:e6:
         34:9d:19:d9:62:b1:ff:5d:e6:ca:1d:90:5f:f0:98:ac:7d:ea:
         fd:cd:7b:c4:ca:6d:8a:09:dc:b1:3e:0e:9d:f3:ae:bd:90:0d:
         ef:03:8b:81:b0:ab:24:ab:e3:c6:6f:17:03:54:30:de:ba:15:
         30:97:35:7b:99:33:7b:75:16:f4:6d:db:a4:b8:e7:63:83:5f:
         a2:5e:16:24:cf:c6:6a:50:cd:1e:bd:27:f1:b1:16:93:b0:4e:
         81:7c:4b:a4:c9:c5:4e:06:b8:3e:1e:56:54:74:49:ce:1b:83:
         37:81:73:4a:af:12:0e:84:e6:1e:96:32:e9:b0:d0:5b:a4:31:
         63:cb:67:43:d8:4b:f3:8f:8f:5f:9c:21:69:37:e1:67:ff:da:
         47:a0:85:93:d3:a8:a3:03:06:91:b1:05:61:ee:1c:aa:5e:2e:
         49:38:de:2a:10:a7:06:dc:75:7f:89:e3:e6:50:76:c1:90:a8:
         0f:c4:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----