Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd1707e3fe399ca977f3fe633d6444fcba54f1e.cer
File:                     9bd1707e3fe399ca977f3fe633d6444fcba54f1e.cer (raw, json)
Hash identifier:          1zxKOUp2dh3W1g9t2gtA1qIhBeLx+N4PAT5H5v2l+Aw=
Subject key identifier:   14:5A:B9:15:E0:AF:31:CF:99:61:AE:EC:E8:AA:B7:43:8C:CF:26:4F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB3380
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b34a5cbd-6c09-4413-bc49-c206d28a5d25/9bd1707e3fe399ca977f3fe633d6444fcba54f1e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b34a5cbd-6c09-4413-bc49-c206d28a5d25/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:24 +0000
Certificate not after:    Wed 30 Oct 2024 18:50:35 +0000
Subordinate resources:    AS: 264655
                          IP: 200.9.120.0/23
                          IP: 2801:17:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16462720 (0xfb3380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:24 2017 GMT
            Not After : Oct 30 18:50:35 2024 GMT
        Subject: CN=9bd1707e3fe399ca977f3fe633d6444fcba54f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:08:90:31:d3:2f:a6:5f:e1:d2:cc:44:e6:
                    ad:67:93:68:b8:c1:28:69:e4:eb:9e:81:b6:19:06:
                    2f:14:ab:18:88:72:68:3b:9c:15:6f:ec:de:c3:b0:
                    13:39:56:7c:61:1b:c7:62:53:4b:d7:6a:d8:07:4c:
                    ec:88:5e:1f:8c:50:a5:86:fd:23:48:02:c3:e7:b9:
                    73:6b:d2:f3:5b:3f:0d:8b:cc:26:92:a4:67:70:b5:
                    2f:3e:a5:81:87:9b:70:5f:cc:1c:b7:77:ff:7d:02:
                    0e:17:a6:d2:0a:f5:bb:7d:6b:d1:25:a1:ea:1f:f5:
                    ac:f6:aa:e0:04:ee:0a:0e:84:56:5d:97:18:fc:98:
                    04:51:84:be:91:f3:61:06:87:60:cc:82:60:be:d1:
                    f3:fd:09:65:66:32:a6:22:1e:b5:e3:20:fc:5e:34:
                    81:b7:a8:a7:a0:e7:96:ee:cb:3f:11:2d:62:f8:e3:
                    e4:58:52:0f:ea:40:d4:8a:ba:1b:ea:a7:78:b6:01:
                    46:db:99:c6:7d:7b:d6:9a:88:bf:96:1a:1d:6e:e0:
                    58:5d:eb:93:7c:50:ae:50:54:19:17:6d:a4:17:52:
                    79:e4:36:d6:2b:ed:c1:7f:6c:1d:29:b6:95:cd:8c:
                    34:59:0a:d2:03:9c:08:59:34:f5:95:46:6c:31:a9:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:B9:15:E0:AF:31:CF:99:61:AE:EC:E8:AA:B7:43:8C:CF:26:4F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b34a5cbd-6c09-4413-bc49-c206d28a5d25/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b34a5cbd-6c09-4413-bc49-c206d28a5d25/9bd1707e3fe399ca977f3fe633d6444fcba54f1e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.120.0/23
                IPv6:
                  2801:17:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264655

    Signature Algorithm: sha256WithRSAEncryption
         a1:48:77:da:3e:09:01:dd:7b:65:ca:02:ed:4f:b8:43:33:1d:
         98:58:2c:e9:67:d6:cf:34:d2:5c:4a:b4:f4:e5:bc:0c:d1:6c:
         19:af:7c:f3:b2:ed:b5:22:a4:ca:c1:39:f9:06:02:32:ca:89:
         55:4c:1a:7b:b9:4f:d1:f3:82:fe:03:3f:50:7d:dd:13:3d:d5:
         12:54:5e:45:2b:42:2b:a9:a7:ae:01:90:ec:3c:04:5f:74:d1:
         8b:d7:24:d5:2e:9d:50:9c:b9:0a:1e:cf:d5:56:99:30:01:f0:
         c0:4a:b1:ca:5f:ce:5d:52:42:5e:45:4c:9c:eb:eb:6a:f8:9f:
         6c:66:4d:5f:31:9a:b1:da:cd:25:4a:b5:e0:d0:98:b6:23:ea:
         9a:17:fc:9a:9e:0f:7f:ea:5c:b1:37:d5:84:c7:24:8e:81:4a:
         49:9e:73:7d:36:67:33:cd:1c:7f:03:39:9a:a8:aa:53:37:91:
         44:9e:e7:f7:6f:1f:b0:6e:cd:c2:9c:e3:68:57:98:07:00:f9:
         a6:90:c1:2a:0d:44:2f:7d:af:9b:46:85:88:68:01:83:b1:78:
         5b:ac:8e:8b:d4:b8:13:2a:32:26:d5:ca:a3:29:34:32:a2:c5:
         b0:bd:83:70:f9:fb:5e:dc:6b:4c:87:04:ce:e0:81:0d:c5:1b:
         ba:dd:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----