Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
File:                     9dd6960f203691336ba50cdef7bcec2cfb628603.cer (raw, json)
Hash identifier:          nzxHzvTvDxoVaMka71ANbPHvmoPEJ26KH4qn0Sgq4Qo=
Subject key identifier:   71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA1CF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:57 +0000
Certificate not after:    Sun 02 Mar 2025 19:23:32 +0000
Subordinate resources:    AS: 273001
                          IP: 45.65.136.0/22
                          IP: 2803:a5c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15342841 (0xea1cf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:57 2017 GMT
            Not After : Mar  2 19:23:32 2025 GMT
        Subject: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:da:4f:1e:82:51:c4:52:5f:d4:00:14:f1:9b:
                    68:e2:f5:70:1f:34:c5:06:6d:5a:a4:4a:29:6f:56:
                    b7:b1:72:2a:ee:d0:b2:44:3f:b4:e2:5b:e6:b6:2a:
                    19:73:0a:e3:f7:52:21:c5:e8:54:d9:c3:4f:81:a9:
                    a9:ab:14:b2:dc:a9:89:4a:78:3a:c8:1d:d4:0a:e6:
                    ac:4b:78:4e:d0:51:b0:4a:cc:ad:89:a3:7a:a0:bb:
                    34:cb:ff:e8:c8:72:0e:d7:0a:e3:70:37:85:c3:59:
                    43:cf:ad:22:b7:af:63:25:01:05:54:1f:06:1d:a7:
                    92:79:41:e1:b3:9d:e8:8d:db:d4:f3:bc:c9:a4:4b:
                    46:85:cf:de:f6:71:52:81:ca:e7:38:1c:62:50:80:
                    6b:a3:cc:91:5d:e1:f5:53:43:a9:6e:e8:53:a4:12:
                    55:a7:ce:a4:de:f7:e6:7a:df:32:79:61:c9:25:61:
                    96:50:b3:e3:ec:0c:0d:ef:75:72:24:2e:78:59:36:
                    c7:f5:5c:a2:e2:f5:e0:d9:f0:2c:d4:18:8f:a6:78:
                    8d:30:2e:b4:7c:d0:63:aa:2b:84:6a:66:be:b4:94:
                    fc:7f:11:37:c3:de:d1:69:b3:71:70:30:0a:0d:2a:
                    c5:7f:f0:a4:2e:cd:ed:40:ce:cc:fd:90:91:a8:56:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.136.0/22
                IPv6:
                  2803:a5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273001

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:43:14:07:cc:96:98:c8:22:31:5b:54:70:08:6d:17:3f:
         b3:a7:10:85:5e:c0:2f:4c:1e:f9:91:0f:3c:13:06:a7:ef:44:
         27:ca:d4:ae:24:c3:04:62:e4:c2:0d:3e:bd:76:3e:6c:8b:28:
         d9:1d:a5:94:54:ac:e7:a7:a0:41:c5:57:31:aa:53:2b:11:f1:
         80:de:27:74:ff:71:94:ee:72:5c:5f:95:e7:f0:b4:c1:d0:09:
         f2:fa:3b:fb:c7:e1:2f:bc:15:a6:ac:59:4f:72:05:bf:86:71:
         56:b1:a7:fa:3e:08:8d:66:3d:a3:c4:82:5d:e1:09:b7:c2:cf:
         52:6f:06:e0:f1:f6:02:99:f9:52:49:05:6b:5e:84:7a:17:fe:
         53:f2:5c:98:e0:63:16:71:23:12:cd:d7:8b:77:9d:2a:5a:ec:
         f7:87:48:8f:10:2c:18:11:ce:b9:77:bd:7a:e5:81:40:06:9c:
         4d:db:dd:64:5a:25:b8:e7:a2:65:19:2f:81:b3:53:87:24:57:
         08:bb:35:a0:64:0e:f5:02:98:55:fd:78:5d:66:24:80:a3:79:
         cc:00:ef:25:8c:89:f4:ef:d0:26:2b:10:fe:a0:fd:09:1b:f5:
         a8:76:aa:2e:b8:00:25:83:29:a1:86:af:9e:dd:55:3e:15:b0:
         03:c5:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----