Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d1333973fc7c6acfe32c1fe025da53298790d49.cer
File:                     8d1333973fc7c6acfe32c1fe025da53298790d49.cer (raw, json)
Hash identifier:          Y+C54yWDt/RhSxomm4IHiQisyobTlTB85Gvi0PmbxGI=
Subject key identifier:   5D:7D:19:E4:E4:69:AB:65:A9:20:6A:9C:51:6A:69:9C:84:33:18:6C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9C58E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0f16c2e0-a7dc-488c-8cf0-aeb171e0bd40/8d1333973fc7c6acfe32c1fe025da53298790d49.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0f16c2e0-a7dc-488c-8cf0-aeb171e0bd40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:25 +0000
Certificate not after:    Thu 17 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 52430
                          IP: 186.64.96.0/21
                          IP: 2803:9500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16369038 (0xf9c58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:25 2017 GMT
            Not After : Oct 17 05:00:00 2024 GMT
        Subject: CN=8d1333973fc7c6acfe32c1fe025da53298790d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:81:78:5b:a8:97:a4:f6:5f:38:0a:50:dd:
                    09:71:fb:45:91:18:a6:f0:d8:bc:5d:86:c8:11:6a:
                    cf:38:e1:23:34:60:61:f8:b0:69:53:87:e8:77:be:
                    6a:45:95:da:a7:98:f9:dc:9a:0d:7a:25:51:63:9e:
                    d8:3f:00:ff:16:1d:33:33:9e:d2:ac:f6:f2:11:45:
                    a1:d3:6d:04:47:b2:d0:91:01:a8:2c:4c:c1:b0:8c:
                    e7:b2:be:21:88:ae:b4:7b:ea:7a:b6:59:10:02:6a:
                    62:89:ff:18:0e:7e:52:ad:65:05:e9:0f:e7:26:78:
                    41:e5:e9:35:6b:ed:6d:23:b3:35:03:6a:7e:78:ab:
                    cd:24:e1:36:e3:5e:31:e0:79:b3:55:df:86:77:b5:
                    cb:b1:98:a0:79:06:5b:b1:a1:2e:6c:51:77:36:91:
                    83:43:f1:e5:c6:c8:96:73:5c:78:a7:42:3f:5a:7c:
                    7c:a4:56:9b:96:50:46:7f:10:cb:d1:8e:29:ea:f2:
                    b9:a3:bb:16:7c:cf:52:98:17:ba:76:7c:38:4c:c4:
                    2d:a6:94:82:d6:1f:d7:e6:16:9d:a5:59:a9:30:37:
                    73:06:5c:30:9e:c2:5b:0a:4b:d6:46:02:c9:53:44:
                    e0:9b:0f:9c:1d:af:c2:01:bd:30:f7:10:1a:23:18:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7D:19:E4:E4:69:AB:65:A9:20:6A:9C:51:6A:69:9C:84:33:18:6C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0f16c2e0-a7dc-488c-8cf0-aeb171e0bd40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0f16c2e0-a7dc-488c-8cf0-aeb171e0bd40/8d1333973fc7c6acfe32c1fe025da53298790d49.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.96.0/21
                IPv6:
                  2803:9500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52430

    Signature Algorithm: sha256WithRSAEncryption
         bc:5b:08:3d:fb:58:21:48:0e:b4:50:92:dd:9c:6b:a6:16:ae:
         89:cc:eb:4a:a0:03:b3:37:18:00:d0:3b:ca:ad:04:ed:24:e1:
         ca:cb:22:3f:f1:53:57:eb:ea:e5:d4:09:33:9f:58:92:ef:56:
         54:ec:32:ea:01:98:17:ca:20:50:39:84:60:fe:e7:11:20:8c:
         a3:ca:3e:78:da:9e:2b:a9:63:b7:f5:93:03:05:ea:40:60:23:
         b1:c8:a5:83:2d:71:ad:b2:4d:41:9b:75:22:31:ef:aa:86:2a:
         14:2b:65:8b:d5:ed:90:a3:df:2f:b0:03:1f:e0:23:bd:2b:43:
         be:84:d4:a2:35:30:de:25:9a:6f:43:20:ce:0b:09:ab:53:5f:
         9a:ae:d6:56:1d:fd:49:9e:9a:ed:e9:4e:1a:bd:dc:36:81:3e:
         af:35:60:4e:5b:5b:30:cd:81:4e:86:4a:c1:93:0e:77:c7:cb:
         7a:3b:fe:a8:30:89:25:b6:44:d0:f1:5a:f3:8c:07:02:ed:1a:
         32:b5:4f:e7:92:51:82:f7:ca:da:ed:b3:21:a7:b3:e5:af:a3:
         c3:e1:32:51:31:04:73:3e:55:f8:ec:a4:8f:88:d6:b8:97:26:
         77:c2:89:45:2b:70:5c:2e:98:ef:69:2c:57:be:37:93:07:f8:
         aa:53:bb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----