Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
File:                     aae8cbe9904f103232c002483204f9f2ae04d026.cer (raw, json)
Hash identifier:          0xxGrlklfUV4ghHCja1PRfnUhcLTjXYcEoxVtcfNuzU=
Subject key identifier:   9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD3950
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:15 +0000
Certificate not after:    Thu 29 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 28041
                          IP: 190.9.179.0/24
                          IP: 190.9.181.0 -- 190.9.191.255
                          IP: 200.125.128.0/24
                          IP: 200.125.130.0 -- 200.125.159.255
                          IP: 2803:a400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14498128 (0xdd3950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:15 2017 GMT
            Not After : Feb 29 06:00:00 2024 GMT
        Subject: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:10:ef:e1:6b:e2:e6:48:4a:a5:b1:0c:c2:
                    12:a1:a9:bc:fb:61:0c:5a:5a:92:68:4b:9f:5b:9e:
                    d9:0c:8e:3f:f9:1e:16:52:c8:31:14:aa:4b:76:26:
                    1d:bb:2e:5e:5d:c9:cf:87:18:a7:4c:3d:c8:bd:6e:
                    cb:38:e1:9f:07:7a:1b:07:36:63:8b:71:c1:15:e7:
                    2e:04:7c:f2:57:37:d6:8c:63:89:41:37:bb:3b:e6:
                    39:56:bd:92:14:0c:24:f1:cb:3c:68:39:0e:c1:8c:
                    fa:b6:56:52:77:e2:d8:78:2e:f7:be:bd:15:b3:4d:
                    ed:41:bb:b8:82:5f:81:98:57:d4:a7:be:2e:30:96:
                    d6:b0:36:ad:59:84:71:f2:08:41:97:5f:b2:0d:ae:
                    a1:dd:a4:2e:97:c7:ea:10:bc:6b:c7:70:9d:a4:04:
                    7f:6d:15:14:b4:9a:46:6f:85:fd:0c:72:c5:ad:86:
                    be:4e:90:d6:8f:33:f7:75:4b:aa:b5:3a:35:1a:e4:
                    5a:7d:37:c8:61:6d:58:36:25:89:f5:fe:c8:cf:41:
                    1b:27:87:47:ae:e8:85:e2:fb:9b:b1:71:86:ed:15:
                    80:3d:e5:0f:e6:2d:54:4d:5f:fd:e9:3d:53:8c:c5:
                    58:de:1f:2a:7b:ed:f5:c0:73:71:40:b5:34:7e:7b:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.179.0/24
                  190.9.181.0-190.9.191.255
                  200.125.128.0/24
                  200.125.130.0-200.125.159.255
                IPv6:
                  2803:a400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28041

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:bf:bf:5c:10:1c:43:2b:7c:15:ba:14:0d:10:30:a8:d4:
         8f:e2:56:a4:b7:a6:56:61:23:0c:8e:22:83:1a:3b:57:3c:a6:
         c4:a2:2c:53:fd:76:f4:dd:15:53:cf:5f:ce:02:b4:bc:65:07:
         29:86:8d:b0:f7:b9:91:d3:81:2e:f5:2e:ef:f0:37:50:dd:5e:
         72:bf:e1:13:b5:19:7e:4c:a8:f0:71:30:50:69:b6:80:30:a8:
         b9:c5:0d:af:ca:c3:15:b7:38:4f:98:87:d9:0d:77:e7:cc:a2:
         16:e0:9c:76:c8:d9:63:b7:06:dd:de:bc:3e:19:2b:85:5b:eb:
         1a:51:cc:69:a7:5b:ef:0e:72:a6:7c:f2:78:49:f0:d0:d3:89:
         95:34:17:af:2e:d4:34:b7:86:10:7f:d8:ff:03:d5:6e:23:34:
         53:14:df:c2:14:1d:72:16:af:3c:3b:bf:9e:9f:fd:1c:89:01:
         5c:9a:aa:bb:68:0b:6b:29:de:71:1d:b5:06:a6:ca:93:e6:1f:
         35:ed:8b:90:42:79:68:2a:8a:87:f4:f2:bc:03:e4:eb:2e:c9:
         2e:a5:41:0e:92:56:48:89:e2:64:f6:43:1f:c4:19:3e:67:20:
         45:fa:7f:a9:d6:74:af:01:ef:0a:28:9a:9e:d7:05:d5:0d:9a:
         92:fa:9c:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----