Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d999407adf4bde3bc631ec8a094523e50229de2.cer
File:                     9d999407adf4bde3bc631ec8a094523e50229de2.cer (raw, json)
Hash identifier:          Q4j+7JGZ2oLHKf1cx1g0qUSoj+ohE/XpBpeHifRK4xY=
Subject key identifier:   17:C8:F5:53:EA:B2:A6:7B:2F:00:CA:99:66:16:3B:37:57:5F:21:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE1430
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/298d6042-ad87-4f77-b3fd-b8e993ad7cd6/9d999407adf4bde3bc631ec8a094523e50229de2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/298d6042-ad87-4f77-b3fd-b8e993ad7cd6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Oct 2018 19:14:00 +0000
Certificate not after:    Thu 18 Jul 2024 23:45:20 +0000
Subordinate resources:    AS: 267681
                          IP: 45.162.168.0/22
                          IP: 2803:9ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15602736 (0xee1430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 19:14:00 2018 GMT
            Not After : Jul 18 23:45:20 2024 GMT
        Subject: CN=9d999407adf4bde3bc631ec8a094523e50229de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:b2:22:21:81:8e:4b:f4:e9:4a:4e:be:f6:
                    90:6d:53:a0:71:e0:7c:e1:10:c3:43:ef:b9:a8:f2:
                    fd:0e:2c:ec:93:3e:93:27:dc:c2:9f:76:b7:e8:42:
                    ad:74:ed:8e:b2:aa:8e:ae:e9:e6:46:30:5d:c4:5a:
                    ab:97:38:fc:b1:a6:fa:0a:68:41:ff:be:3f:cc:1d:
                    37:17:29:18:d1:44:b5:1f:f9:41:09:e4:de:dc:b4:
                    5d:34:91:cc:7f:dd:f0:e2:06:ac:3d:af:37:8b:00:
                    d1:ff:50:06:4b:b1:ac:20:11:52:07:ef:ec:be:53:
                    bb:ae:88:25:0f:0a:41:c0:95:3e:ff:5a:5f:cf:11:
                    1b:b2:77:96:6c:d0:a2:b6:b9:f6:6f:d8:e6:d6:6f:
                    2c:b6:b3:47:09:1d:e5:cc:d1:e8:59:c6:3f:19:d7:
                    88:a6:0c:7b:34:cd:3e:eb:bc:b8:b5:f8:06:ff:70:
                    08:75:ca:fd:5a:43:9c:4a:e8:1c:64:43:0a:ed:6d:
                    3b:fb:fa:8a:70:05:2d:bf:62:fb:79:8f:0e:71:b9:
                    69:c1:76:d7:b6:b9:82:4d:32:48:b9:3b:01:f3:dd:
                    77:e6:3b:0e:98:59:6c:3f:f9:71:71:80:9d:7a:95:
                    98:cd:01:c0:d1:a0:e5:67:b0:bc:e0:22:11:83:9b:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C8:F5:53:EA:B2:A6:7B:2F:00:CA:99:66:16:3B:37:57:5F:21:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/298d6042-ad87-4f77-b3fd-b8e993ad7cd6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/298d6042-ad87-4f77-b3fd-b8e993ad7cd6/9d999407adf4bde3bc631ec8a094523e50229de2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.168.0/22
                IPv6:
                  2803:9ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267681

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:0a:85:ce:02:2c:43:96:46:9b:cb:82:bf:65:08:42:b5:
         4c:6c:c3:98:7d:68:83:59:dd:eb:bd:08:87:9f:de:03:c7:76:
         8d:97:ae:19:a6:20:76:04:b3:52:32:cd:a5:21:99:63:24:83:
         12:ce:35:4f:c5:90:29:10:6e:cf:6e:8c:48:4f:34:19:e1:64:
         03:b5:3b:6e:81:ff:0a:cb:f1:0a:80:5f:79:5e:13:32:5d:29:
         6d:1d:74:4f:ef:13:81:b5:63:9e:a1:aa:d6:07:7e:7e:53:f3:
         81:b9:e7:af:39:96:9a:07:2f:93:f2:a8:85:cd:36:50:b6:d8:
         22:c8:27:17:04:cb:f7:6b:7a:ee:2a:c4:fc:52:d9:92:45:0b:
         4b:8f:b7:b5:5c:86:2c:1e:80:d3:29:8b:d4:c5:dd:3c:4e:dc:
         da:88:fe:fa:75:18:45:48:60:fd:99:e7:46:57:77:e5:f3:4e:
         c2:f5:8d:c8:34:3a:9d:20:a2:5a:b2:dd:87:d6:56:c5:ae:27:
         4b:2c:a5:9a:a5:58:93:41:6f:2a:f8:71:17:7c:be:82:83:8b:
         79:1f:46:e5:b9:42:b3:bf:fd:1e:07:c1:e8:b4:8d:9e:0c:1d:
         a2:43:7d:7e:f5:73:cc:8e:3b:8a:59:2e:c1:4b:48:f5:ea:4b:
         62:87:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----