Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f63a6656a365d7b47aef38de4dffcf781125d14.cer
File:                     8f63a6656a365d7b47aef38de4dffcf781125d14.cer (raw, json)
Hash identifier:          0FIQ0djtK2mkpoFb8DZiRj7iTUyu9bcXUPo5bn2T/Jo=
Subject key identifier:   96:C6:89:7D:67:64:E0:B1:70:13:F6:F6:99:8A:58:EC:2C:29:FE:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E083A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/560a777a-f323-470a-887f-adee7a633bcd/8f63a6656a365d7b47aef38de4dffcf781125d14.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/560a777a-f323-470a-887f-adee7a633bcd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Fri 05 Apr 2024 15:00:00 +0000
Subordinate resources:    AS: 16742
                          IP: 158.251.0.0/16
                          IP: 2800:460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14713769 (0xe083a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Apr  5 15:00:00 2024 GMT
        Subject: CN=8f63a6656a365d7b47aef38de4dffcf781125d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:0b:0f:59:6f:96:95:67:45:95:80:67:97:
                    ae:70:18:67:0a:f5:f6:59:f0:06:cb:86:fb:87:eb:
                    3f:a6:67:89:59:41:c1:8a:af:6a:b8:29:fc:5d:ca:
                    dd:29:fb:32:85:f6:23:bd:d4:4b:cf:9a:98:c6:d4:
                    d5:8c:88:fb:8b:b6:59:ef:c6:7e:37:c0:6b:92:d7:
                    67:4c:55:b5:11:fc:e7:a9:1f:65:af:50:bd:b3:33:
                    52:1d:b5:65:46:99:b6:f9:8f:dd:a5:0a:12:5b:fd:
                    b5:d6:c2:52:bd:ed:5c:54:c8:9a:70:0a:fb:38:8c:
                    a8:9d:a1:55:c5:09:6d:a7:d9:77:bf:88:99:08:06:
                    40:8c:13:49:ba:90:03:fa:8a:0b:50:c6:0a:77:dc:
                    0f:e1:43:e0:1b:30:2a:d8:70:00:5f:ff:ea:47:51:
                    d4:59:cf:7f:91:2d:5c:87:8e:94:e6:91:a9:ab:95:
                    6a:c3:47:4f:29:39:82:fe:49:ee:ae:a0:d3:d2:7f:
                    22:25:04:aa:13:37:48:6b:43:c1:aa:fb:4b:d6:61:
                    93:eb:b5:ce:4d:8f:83:c0:d4:2f:3e:2e:87:96:11:
                    2e:3f:b1:99:81:a3:f2:7a:0c:94:94:14:be:bc:77:
                    03:ad:b9:cb:f3:20:4e:9f:a4:83:a9:f3:6b:7d:2a:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:89:7D:67:64:E0:B1:70:13:F6:F6:99:8A:58:EC:2C:29:FE:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/560a777a-f323-470a-887f-adee7a633bcd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/560a777a-f323-470a-887f-adee7a633bcd/8f63a6656a365d7b47aef38de4dffcf781125d14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.251.0.0/16
                IPv6:
                  2800:460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16742

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:2b:22:a3:8b:f3:b7:94:4b:49:08:ca:c9:00:a0:0a:48:
         82:da:07:a0:cc:49:08:db:65:e1:9d:e8:ff:d0:26:a2:1f:ce:
         05:87:fc:23:59:99:71:db:1a:5f:74:17:b6:57:fb:33:21:67:
         eb:3d:bf:9e:b2:ee:fb:35:52:78:6b:6c:0f:12:e4:d6:df:de:
         e0:af:93:58:89:ed:ef:7c:5a:bb:8f:01:09:e5:f3:10:09:1b:
         cd:95:33:bc:45:af:3d:bd:01:f9:db:d8:d6:78:50:35:a4:ba:
         c9:38:90:67:75:ba:4f:2a:87:52:b6:5b:ad:97:e9:94:e6:3a:
         5f:a2:8d:41:f1:5f:c9:23:19:30:5f:6e:8a:04:4f:38:01:86:
         95:3c:1c:3f:b5:81:61:cd:20:cc:0a:c3:0b:52:f9:37:2a:83:
         23:23:d5:96:30:5e:e2:a2:d7:c3:69:0f:22:9d:7e:3b:80:d3:
         bf:2d:e6:5b:ab:79:2b:c9:7c:af:04:62:83:61:61:16:19:55:
         40:56:b5:5e:4b:49:0f:b5:1e:41:14:98:89:2b:ae:1b:be:7f:
         11:06:c4:07:ac:b6:ae:e0:89:30:73:f4:3d:26:31:42:f3:4b:
         ed:75:91:73:30:5e:40:a1:79:a9:da:9f:6a:1b:62:92:64:a1:
         a2:1a:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----