Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer
File:                     d31e9a71271a98fb6f60776ee08cb771f256bb33.cer (raw, json)
Hash identifier:          iByOo17JUL9hm1e7D0GfSSXdw9ofnZqX5Vh0vrYF0IA=
Subject key identifier:   A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA7A26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:27 +0000
Certificate not after:    Fri 26 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 17069
                          IP: 138.117.112.0/22
                          IP: 181.192.0.0/19
                          IP: 2803:2300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14318118 (0xda7a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:27 2017 GMT
            Not After : Jan 26 05:00:00 2024 GMT
        Subject: CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:24:f1:f6:ba:0c:e7:09:7f:4e:d3:7c:21:
                    45:b5:71:bf:d2:68:f1:f4:62:28:70:d3:49:47:66:
                    5b:64:12:f1:65:c6:6c:98:68:ae:75:ac:52:33:16:
                    79:0e:d2:e8:86:89:38:70:21:b0:5e:46:c2:9c:23:
                    e1:e7:2e:74:c9:a1:5e:b7:6d:22:5f:ba:8d:9a:75:
                    ab:16:6a:4c:ed:80:c8:21:cb:26:00:a9:58:d8:dc:
                    70:e8:d2:e1:01:04:c7:dd:f7:89:a8:64:0f:c7:64:
                    a8:30:9b:a0:48:e1:d3:43:22:97:2d:f9:2b:cc:af:
                    12:6b:a2:41:db:3a:91:74:5d:6a:12:22:1a:ef:8d:
                    9c:40:80:0e:38:e8:0e:81:79:06:a5:b7:2e:13:bd:
                    c1:98:8c:01:f4:80:2e:35:58:8b:d0:27:a8:da:71:
                    28:7c:e1:ef:e2:ad:19:cd:aa:db:d1:0b:32:c2:d6:
                    eb:e6:3c:8f:05:54:18:05:7e:bd:01:b2:a1:31:3f:
                    59:65:88:e5:d2:75:22:7f:c9:b3:bc:55:d4:69:97:
                    44:5e:d0:51:89:ea:88:6d:cd:4c:67:e4:25:ac:bb:
                    96:b1:f2:5d:f3:4a:5e:f5:ee:b0:99:db:1e:78:37:
                    8e:21:5a:a5:2c:69:05:d4:86:a3:2a:d3:21:fc:a9:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.112.0/22
                  181.192.0.0/19
                IPv6:
                  2803:2300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17069

    Signature Algorithm: sha256WithRSAEncryption
         52:51:49:ef:24:45:c6:f8:1e:75:39:26:f9:21:bf:1b:f9:cc:
         a6:0b:92:18:84:30:07:c9:12:73:38:b1:68:5c:86:bd:3c:15:
         32:aa:dc:a2:06:0c:ff:01:40:3e:e3:e2:71:24:dd:c9:23:9c:
         98:e0:aa:a0:14:63:7c:c0:e9:0a:0d:6e:0a:c8:33:8c:8d:00:
         1e:a8:33:01:d2:bf:25:f0:cd:30:6b:0d:12:a0:06:f3:7d:73:
         0e:ff:40:94:90:1d:50:85:f5:8a:4a:04:e7:d3:a4:0c:76:e1:
         2d:91:70:ea:4c:53:9a:4c:aa:1e:7d:71:52:d4:2d:74:24:e4:
         95:82:6b:4e:9d:8f:c4:47:86:f2:be:f1:ac:03:76:2a:0f:da:
         bf:ef:9d:c0:56:d2:2f:4f:45:a8:8d:97:00:37:10:40:1a:9d:
         41:7a:40:b1:27:25:25:ae:aa:a1:7b:ce:ca:d3:b4:64:99:85:
         40:9a:b4:cb:83:42:bf:0d:84:92:a9:aa:36:38:ef:50:07:e2:
         50:d0:f0:d3:d7:70:e6:77:8e:46:19:42:a0:a8:de:5a:e6:f6:
         a4:2a:0c:82:27:c3:ea:16:0e:60:08:77:b5:f9:5e:66:5d:8c:
         e3:5c:ac:fd:93:98:2f:b2:46:d3:6b:50:d8:a7:82:f7:0a:ea:
         ee:28:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----