Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
File:                     a0a9fce8cb929134f597a155d408f5064261fb6f.cer (raw, json)
Hash identifier:          X4wr2pmVWQoeYDm/WWIgnVQZ3RXDi2H9/fa0PN6+HhQ=
Subject key identifier:   21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6686A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:18 +0000
Certificate not after:    Thu 20 Jun 2024 16:36:09 +0000
Subordinate resources:    AS: 52275
                          IP: 179.0.14.0/24
                          IP: 200.13.42.0/23
                          IP: 200.33.82.0/24
                          IP: 2801:0:440::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15100010 (0xe6686a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:18 2017 GMT
            Not After : Jun 20 16:36:09 2024 GMT
        Subject: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:2d:b1:87:5e:94:d2:2b:8c:3f:00:a0:b4:
                    bd:4b:a7:8e:8f:e5:bb:ae:a6:59:b9:74:49:f2:d6:
                    77:16:3a:ec:5d:08:41:3c:5d:3c:02:13:95:ea:80:
                    ee:92:7b:b5:63:b5:9d:b4:8c:d3:a7:49:15:1d:a1:
                    f7:73:94:a5:d6:51:bf:37:63:2d:de:b4:6b:a1:3a:
                    23:ca:ef:3b:04:d9:a7:b6:c8:ce:fd:b0:e5:5b:87:
                    04:94:f1:1a:26:2b:d3:f0:b3:7b:47:6b:e2:90:c4:
                    40:f1:2f:23:df:87:9d:fd:04:59:0b:1c:5f:6a:f9:
                    f0:ce:3d:70:3e:d4:a6:07:d1:06:e1:28:73:ef:f9:
                    3b:be:40:30:99:fe:93:8d:12:90:ba:89:79:2a:9d:
                    e6:79:a8:51:71:a9:8b:c5:c4:0c:3d:e2:58:50:eb:
                    41:43:28:f8:15:d6:0e:f5:c8:b8:ec:f7:c1:48:63:
                    85:da:85:f0:2e:8f:db:06:29:a1:ce:75:e7:4c:64:
                    40:d5:fa:a6:de:5e:2e:4b:62:82:4d:d9:f2:8d:ca:
                    93:11:57:13:b9:d7:b3:ac:1c:e4:92:ce:17:f2:93:
                    6e:1c:4b:dc:27:1f:8e:5d:3b:79:0a:1d:c8:30:8e:
                    64:8d:ff:ee:30:87:05:14:4e:a3:2d:1d:c6:f7:07:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52275

    Signature Algorithm: sha256WithRSAEncryption
         51:94:b5:5a:28:dc:0d:33:41:fa:42:5b:d8:7d:da:5d:eb:39:
         be:c4:ec:74:42:eb:f2:b4:78:c3:b4:c0:58:73:08:34:23:cf:
         4f:b1:8f:19:16:5b:8d:cb:92:1b:3e:e6:52:fe:29:6f:6a:7e:
         9c:16:c2:93:b9:7f:1d:0e:2e:a1:1f:9c:08:e8:1e:61:1d:82:
         68:96:35:32:28:c1:7d:5a:0c:c1:62:bc:c0:ea:d0:8b:ea:cf:
         1a:38:b2:e7:8e:8b:a4:f9:6d:2f:34:40:4f:13:3a:84:12:5c:
         48:91:56:e0:d9:9d:6f:f1:f7:81:13:bb:79:57:9b:e0:30:fa:
         85:78:5e:f0:95:1e:e6:b5:09:67:66:47:6d:4a:51:c9:2f:49:
         83:6e:7d:b8:35:54:f7:3f:64:6f:6a:56:c7:eb:1d:5a:c5:52:
         e5:2d:ff:51:ce:cd:80:58:16:f3:ea:15:88:71:db:7f:f9:26:
         3a:6e:f0:1a:ec:e1:7e:f7:5b:67:c0:9a:00:0b:87:64:03:62:
         c5:c7:b4:0e:69:60:29:85:0a:21:f5:d2:98:11:ac:fd:17:26:
         d0:11:34:41:bc:0a:52:68:5a:f4:67:18:f1:8f:90:ad:f2:43:
         70:25:b3:8e:a0:37:43:a4:5f:2a:84:68:92:31:6a:c0:b8:1e:
         79:23:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----