Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.cer
File:                     da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.cer (raw, json)
Hash identifier:          /wvDytr5/FrDtC4Fgscq9NC5AGr61BgpWx0RmcLBdA4=
Subject key identifier:   B9:3C:51:9E:BE:50:D8:3A:53:21:AE:58:11:A0:34:6B:3A:AB:09:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F24385
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:24 +0000
Certificate not after:    Mon 19 Aug 2024 15:16:20 +0000
Subordinate resources:    AS: 264623
                          IP: 200.9.181.0/24
                          IP: 2801:1e:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15876997 (0xf24385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:24 2017 GMT
            Not After : Aug 19 15:16:20 2024 GMT
        Subject: CN=da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:75:82:bf:a2:3a:b4:86:5a:79:0c:2a:75:f6:
                    a5:15:a3:b5:1a:25:60:06:29:ab:39:1c:5e:d0:8c:
                    bc:2f:80:3b:6c:8b:25:46:f0:fc:4f:99:4b:5a:c1:
                    75:4c:20:5a:43:1f:df:45:56:3f:b5:e3:0e:ed:5b:
                    1e:8b:58:39:9b:ca:58:04:00:95:f8:fa:85:33:46:
                    87:1d:42:4a:fc:a8:e9:ab:95:35:e2:5a:b2:0a:35:
                    d4:64:37:99:6c:29:6f:3b:8e:bb:15:25:2f:06:de:
                    0a:e6:b7:33:b2:dc:18:10:b8:26:09:38:5e:54:ae:
                    ea:d2:f6:d0:6b:6a:54:9d:73:e8:42:03:5d:2d:d2:
                    17:83:67:53:47:86:75:7d:dc:5d:c9:90:38:5f:d6:
                    14:9e:90:53:12:26:50:3e:9b:8b:af:19:76:84:1e:
                    ee:d3:54:f9:e8:62:5c:38:e9:f3:39:73:e8:86:c9:
                    1c:4e:87:be:03:8d:86:f5:19:00:1a:03:de:3c:e6:
                    81:c5:dd:1e:bd:e3:fe:a7:a3:50:e8:03:1a:04:98:
                    81:db:1e:90:63:1c:3c:49:43:7c:53:3c:59:1d:97:
                    05:70:87:17:94:ca:22:41:e2:6c:ba:67:a5:66:88:
                    d6:6f:12:ec:03:d6:d0:bf:92:3b:72:51:9c:66:ab:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3C:51:9E:BE:50:D8:3A:53:21:AE:58:11:A0:34:6B:3A:AB:09:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.181.0/24
                IPv6:
                  2801:1e:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264623

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:c2:c5:e6:b3:fe:93:a3:91:de:8c:2b:bf:69:58:84:59:
         27:3d:c4:12:e6:20:d3:80:eb:45:bf:c0:a2:63:cc:73:2f:7b:
         96:44:f9:65:40:f7:6c:cb:f7:f5:61:32:69:12:69:9e:f7:d6:
         23:ff:2a:dd:90:6a:da:83:97:39:13:42:63:58:87:04:07:bb:
         b5:f0:21:5f:a3:19:a0:2d:c3:9c:50:c5:76:9c:e3:41:e8:17:
         ac:82:bc:85:69:fe:77:56:b7:ae:8d:2d:26:8d:47:40:42:45:
         5e:b3:79:cd:c8:b5:77:e3:b2:7c:2e:c5:cf:ce:ab:1a:f1:12:
         c9:8a:8f:48:9b:8f:9d:d2:bb:52:0d:ba:90:30:77:07:58:38:
         ef:42:4a:cb:29:29:e5:a2:cf:06:34:84:0c:e6:9a:af:74:b4:
         5b:7c:16:ed:49:a3:bc:0e:c6:57:d3:6a:18:3f:42:20:a8:0a:
         1b:f0:5f:1d:83:17:8b:a8:08:1b:97:9d:8a:25:c9:45:ba:ba:
         d9:86:3e:7a:25:9c:ba:77:cf:9d:71:a2:19:57:71:40:50:1b:
         90:1d:9c:5a:45:7f:47:49:a9:dd:c0:20:7a:f2:70:80:97:de:
         fe:25:12:aa:dc:fe:fb:af:e5:f9:af:58:50:6c:bf:62:28:9d:
         cb:04:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----