Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
File:                     9b3d6002276e2295200c85a66129c42e4d483c34.cer (raw, json)
Hash identifier:          FE3eQP+YbSleTUGawnpF2orYPqDyR2Id2uk0FnC36qU=
Subject key identifier:   30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCE64F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:14 +0000
Certificate not after:    Fri 15 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 264668
                          IP: 167.250.180.0/22
                          IP: 177.234.192.0/18
                          IP: 200.24.128.0/19
                          IP: 2803:2540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16574031 (0xfce64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:14 2017 GMT
            Not After : Nov 15 04:00:00 2024 GMT
        Subject: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:4a:68:9f:f9:95:94:c5:56:6a:c1:06:9f:
                    d1:a0:9a:e7:e2:f2:e2:e2:c7:ef:48:6a:20:e2:dd:
                    f2:0e:d3:b4:f0:ca:0b:64:1a:fb:0c:5b:0d:9b:46:
                    1a:29:2b:b6:a6:b3:e9:01:81:4b:41:cf:b6:95:c9:
                    1d:77:b7:f1:10:88:b5:4b:cc:27:85:bb:1c:51:28:
                    17:36:92:c5:85:94:d8:44:a9:0d:c6:0c:9e:42:c8:
                    2a:27:b2:42:2b:6d:6f:72:62:a7:8b:cd:4e:b9:d6:
                    3a:db:60:f0:68:4c:60:14:b3:c8:c4:97:b2:7f:9a:
                    1b:5b:d6:99:23:ed:82:89:f6:4f:c7:9e:8e:71:52:
                    8f:bd:2d:a6:7f:d8:a1:ec:2a:0e:a7:dc:d3:46:7e:
                    5f:c2:88:5c:08:31:a6:00:81:94:0c:9d:92:56:d5:
                    51:24:2b:c2:6b:bb:7f:49:89:71:b4:cd:f3:18:6f:
                    27:56:cf:77:73:e6:b4:de:d4:75:63:10:87:12:cb:
                    58:1f:90:a5:ec:9f:25:1c:d6:ce:46:17:f4:44:41:
                    25:ad:fe:0c:c4:66:78:8a:58:8f:7d:cd:7a:19:66:
                    dc:aa:25:32:94:a7:51:1a:a5:07:ba:85:d3:dc:c3:
                    ac:1f:86:c9:ae:f7:6b:35:49:a0:22:2b:c4:ea:c8:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.180.0/22
                  177.234.192.0/18
                  200.24.128.0/19
                IPv6:
                  2803:2540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264668

    Signature Algorithm: sha256WithRSAEncryption
         a5:ba:5a:64:a0:f3:f1:77:14:a1:ff:34:eb:4e:c7:04:5e:37:
         e5:f1:32:35:da:4e:ac:36:5e:52:f8:b3:43:6b:18:cb:d7:65:
         10:61:79:e5:66:b2:d0:84:2f:29:38:89:c2:75:34:e1:29:b3:
         69:f8:b7:60:c5:c7:c1:38:34:fe:4b:12:c9:77:09:54:38:73:
         9f:8d:46:59:ab:bd:7e:69:e4:0f:0c:55:da:10:79:5c:19:b2:
         9b:42:37:fc:b4:4f:4c:4c:f9:e5:12:20:0c:12:49:9a:10:b1:
         80:ad:3a:97:d2:99:04:67:6a:f2:29:6f:1d:e1:66:4f:30:b0:
         07:de:fb:f8:ee:61:41:30:5e:5c:cc:e6:20:4f:be:3c:40:ea:
         56:79:c7:57:ec:03:82:89:70:c8:7a:7b:6d:54:38:c8:e4:68:
         46:ad:be:0c:25:b5:33:c6:23:9e:0d:5f:db:c5:51:27:3e:fc:
         ab:11:90:dd:72:0b:13:94:8b:79:7e:f1:47:82:6c:71:c5:8d:
         17:de:e4:98:31:99:3f:d0:6b:16:eb:6e:b1:6c:a3:26:fb:0b:
         bb:31:98:b3:7b:c2:ee:bd:97:2c:cb:a7:30:56:85:7d:4f:76:
         a8:cd:e9:8b:bd:b4:98:e7:a6:28:88:58:c7:49:ba:e4:0d:f3:
         9e:80:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----