Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
File:                     d85da304334fb36204a370e950487689e811a2c8.cer (raw, json)
Hash identifier:          4C8uKAppiXGnKvCm0k65S3IyFshh+lbtRut3d8TNC14=
Subject key identifier:   95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2D34F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:28 +0000
Certificate not after:    Sun 25 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 10476
                          AS: 14709
                          AS: 18809
                          AS: 21599
                          AS: 26105
                          AS: 27716
                          AS: 27755
                          AS: 28063
                          AS: 52264
                          IP: 138.186.88.0/22
                          IP: 181.197.0.0 -- 181.197.191.255
                          IP: 186.179.112.0/20
                          IP: 186.188.128.0/17
                          IP: 190.2.224.0/20
                          IP: 190.5.224.0/19
                          IP: 190.57.32.0/20
                          IP: 190.122.160.0/20
                          IP: 190.140.0.0/15
                          IP: 190.218.0.0/15
                          IP: 200.3.200.0/21
                          IP: 200.46.0.0/16
                          IP: 200.75.192.0/18
                          IP: 200.90.128.0/20
                          IP: 200.108.32.0/19
                          IP: 200.115.128.0/19
                          IP: 200.124.0.0/19
                          IP: 201.218.64.0/18
                          IP: 201.218.192.0/18
                          IP: 2800:ce0::/32
                          IP: 2803:600::/32
                          IP: 2803:e600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15913807 (0xf2d34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:28 2017 GMT
            Not After : Aug 25 05:00:00 2024 GMT
        Subject: CN=d85da304334fb36204a370e950487689e811a2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:e2:f3:37:3b:d5:29:28:41:21:d6:64:a3:
                    56:f1:63:6d:a4:59:19:01:68:17:ca:0b:46:3a:b8:
                    e9:e6:41:98:18:3a:e9:48:f7:8a:08:a9:80:99:ae:
                    6e:f0:a6:7c:59:d6:c8:ad:86:07:d2:5f:48:22:d1:
                    03:27:3c:8d:45:1d:ae:1b:1c:88:2f:60:b2:3f:2d:
                    37:ef:78:5c:4b:e3:6d:0b:c7:99:fa:c4:3a:a2:72:
                    18:be:fd:f1:75:6c:8a:82:29:76:df:05:2e:52:83:
                    81:68:8f:53:a8:3f:2c:b7:7a:09:f5:40:ad:d4:1d:
                    d8:8b:5e:61:40:86:68:b4:52:1b:a0:4e:fa:fb:74:
                    75:cd:21:a4:af:9d:d0:7d:b2:b4:1c:f8:72:cf:e0:
                    d5:fe:fb:8d:70:67:d3:24:68:a3:d4:07:9a:d6:b7:
                    f5:15:f1:1a:64:10:6f:92:0e:fa:33:68:c5:82:5a:
                    f7:97:ce:6c:07:1b:11:68:90:5c:e2:b2:64:e3:3e:
                    b5:ac:2a:0e:61:ce:19:0b:bb:dc:28:79:5a:21:d3:
                    d3:a8:fb:ec:77:96:3b:c0:92:83:b5:d1:55:81:b1:
                    ab:0f:51:be:3d:a1:b5:d7:81:64:64:22:cf:51:0f:
                    18:1a:31:18:91:66:d4:9c:36:96:9b:7e:9f:66:e3:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.88.0/22
                  181.197.0.0-181.197.191.255
                  186.179.112.0/20
                  186.188.128.0/17
                  190.2.224.0/20
                  190.5.224.0/19
                  190.57.32.0/20
                  190.122.160.0/20
                  190.140.0.0/15
                  190.218.0.0/15
                  200.3.200.0/21
                  200.46.0.0/16
                  200.75.192.0/18
                  200.90.128.0/20
                  200.108.32.0/19
                  200.115.128.0/19
                  200.124.0.0/19
                  201.218.64.0/18
                  201.218.192.0/18
                IPv6:
                  2800:ce0::/32
                  2803:600::/32
                  2803:e600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10476
                  14709
                  18809
                  21599
                  26105
                  27716
                  27755
                  28063
                  52264

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:14:6e:fb:99:ab:68:ff:13:11:69:57:36:16:90:62:1c:
         67:cd:6d:f9:7a:e9:cf:eb:7c:09:12:fc:de:bd:d7:bc:3f:da:
         88:13:b5:e8:0a:44:26:cb:0d:e3:a1:c3:42:b7:ff:d2:52:a6:
         e1:4b:69:4d:cf:31:8f:dc:64:a9:90:9a:ee:d7:78:bd:72:08:
         3f:62:7f:b9:b2:fb:51:e1:7d:fc:fd:b5:f9:14:4b:fa:8b:08:
         3c:ca:50:5f:43:3b:e5:8a:48:04:41:d9:f4:54:61:e3:94:af:
         c4:8f:e0:43:6c:bc:68:d2:b0:dc:57:17:e8:bc:3a:84:ad:15:
         ef:fd:d1:1c:7f:0b:ad:50:81:6b:00:da:c2:4c:f6:a3:e3:39:
         6a:8c:f4:a0:69:51:05:9a:84:18:c4:b3:cb:76:f8:56:da:0e:
         e7:03:f0:22:bd:3a:a4:9f:13:d7:77:e3:ba:af:5f:35:da:8a:
         26:61:64:e5:3e:b0:e4:ff:22:24:ce:7a:39:bc:7a:cd:1d:0f:
         de:a3:a2:26:70:1a:68:9d:16:fc:73:f8:8c:47:60:ae:dc:54:
         5f:ba:2d:93:6c:e2:fc:8c:2b:5b:4a:ea:25:f9:b0:59:e4:a7:
         3b:b8:fd:c1:cb:71:0d:95:e1:61:f9:ec:b5:63:b0:97:dc:9a:
         a8:3f:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----