Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.cer
File:                     9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.cer (raw, json)
Hash identifier:          LyErDZF8gZ7mXXpf1DP3qjhPWEmeI3jFfM5fsvPbS9w=
Subject key identifier:   37:05:6F:25:93:D5:B4:8C:14:A9:67:F1:B9:AA:CF:3F:94:1D:E7:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D948D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Wed 10 Jan 2024 19:24:41 +0000
Subordinate resources:    AS: 265673
                          IP: 45.4.100.0/22
                          IP: 2803:dec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14239959 (0xd948d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Jan 10 19:24:41 2024 GMT
        Subject: CN=9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:98:bc:54:7f:92:d2:83:08:f5:dc:0a:2e:
                    eb:e8:b1:a7:8e:1e:06:e9:6d:1f:f6:28:60:1a:61:
                    31:33:4f:a8:d3:f0:2d:1a:7c:5f:00:d5:9f:66:87:
                    19:bb:e8:c2:c5:e1:35:a7:2e:e0:04:b9:4b:16:87:
                    58:41:ca:dc:11:73:aa:a0:f0:6e:f8:a5:20:1d:d6:
                    c0:58:df:7e:1f:13:98:90:c1:a3:c9:e5:32:9d:0c:
                    ad:a1:23:22:51:ba:80:f5:f1:05:79:60:4c:97:f1:
                    b3:c8:95:07:d6:7c:8f:17:7c:6c:18:dc:d5:4b:a7:
                    19:54:b9:29:80:b8:f4:77:33:bc:8c:33:0c:9f:e0:
                    31:52:c4:6e:28:8e:c5:48:2a:1f:ab:45:7b:1c:d1:
                    04:c3:55:4a:09:99:ee:f6:ac:ec:6a:87:aa:cd:29:
                    af:bc:9c:f9:2b:93:9c:58:5e:bb:8f:71:ab:98:1c:
                    6e:0d:ea:ac:ca:0c:60:bd:16:ed:2b:8f:91:99:1a:
                    70:ad:42:d1:38:01:ad:bb:a2:69:79:f9:a8:0d:53:
                    02:09:a7:cd:88:09:bf:36:fa:eb:b3:bb:35:f4:c0:
                    a9:9e:df:6f:4d:66:13:75:d6:b8:4c:5e:0e:22:c9:
                    ea:ab:8b:87:15:dd:b4:d8:91:73:98:27:a3:54:4f:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:6F:25:93:D5:B4:8C:14:A9:67:F1:B9:AA:CF:3F:94:1D:E7:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.100.0/22
                IPv6:
                  2803:dec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265673

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:4f:8b:86:4d:d1:e4:79:5e:90:85:36:d2:c3:82:64:58:
         78:28:81:4a:95:c7:a5:72:45:14:ca:6f:dd:11:ce:23:24:6a:
         3c:48:6e:e1:9a:1b:3c:9e:32:77:ab:04:bd:22:35:a2:9a:71:
         bf:a9:2f:e7:11:41:94:3d:20:12:01:9e:9e:b5:2d:0a:40:36:
         20:b9:74:0c:aa:c7:63:9b:60:2a:d9:ba:07:63:87:19:da:81:
         cf:f2:7a:92:52:f1:21:88:b8:c6:a0:80:62:76:5d:d8:d1:12:
         81:3d:b4:6c:8f:8f:ae:fc:2b:c3:b2:78:d5:2d:b6:a8:84:92:
         52:b3:9f:19:85:1b:a4:ef:cd:94:62:0e:c6:80:69:b4:88:0c:
         54:0c:d8:fb:bf:66:cb:10:70:65:fa:dd:e5:c2:0e:49:d1:a5:
         30:b5:32:5a:6e:c0:7f:2c:64:69:ba:b8:ff:1d:4e:fc:62:8f:
         60:0f:af:ec:da:74:23:9c:2b:4a:3d:35:91:23:7d:f4:08:ba:
         65:21:ff:bc:08:e3:63:b2:fd:99:08:91:f4:dd:4c:ee:36:55:
         c5:ef:1f:a0:2b:ec:63:4b:85:cd:0c:f2:e6:b8:20:b5:06:7e:
         3b:74:87:75:cb:7b:94:4d:2e:07:63:e6:70:67:f8:5b:57:d8:
         9c:d6:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----