Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9a57daf28041c431a48ab8a4bad7fdd1d9beea4.cer
File:                     f9a57daf28041c431a48ab8a4bad7fdd1d9beea4.cer (raw, json)
Hash identifier:          vl/Nb+6C9vl7HAmq8pRkeOlZgY3Uz2ZjI3zA6fu5Rio=
Subject key identifier:   FE:39:F4:B9:57:65:DA:7D:EE:AB:50:91:01:61:72:86:14:93:10:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F98AF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/f9a57daf28041c431a48ab8a4bad7fdd1d9beea4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:19 +0000
Certificate not after:    Tue 15 Oct 2024 15:36:26 +0000
Subordinate resources:    AS: 264834
                          IP: 170.81.139.0/24
                          IP: 2801:10:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16354038 (0xf98af6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:19 2017 GMT
            Not After : Oct 15 15:36:26 2024 GMT
        Subject: CN=f9a57daf28041c431a48ab8a4bad7fdd1d9beea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:a5:54:8e:4f:97:46:f0:d3:5c:a2:e0:80:
                    9c:7d:2f:3b:18:ca:5b:41:0d:34:bc:82:3f:be:8e:
                    19:04:b8:e0:8d:a4:46:d8:e1:54:f7:2a:57:e0:71:
                    15:4c:ce:62:32:3e:07:10:c6:78:e8:4b:a0:18:8e:
                    4d:63:d7:e7:49:c2:52:43:51:1f:71:aa:4a:e6:d3:
                    92:04:b1:20:23:88:fa:ba:8d:05:a3:50:83:b7:a7:
                    e1:f6:e5:ab:da:a5:0a:d6:24:04:a8:80:7f:fb:93:
                    9c:64:1a:e1:64:f1:2b:68:08:a5:0d:fc:21:f9:d5:
                    ca:a1:89:ca:f0:1f:e5:e1:d4:6f:f5:be:2a:9e:0c:
                    39:c2:75:dc:c3:35:ef:04:df:84:5e:c3:5d:b0:a8:
                    af:dc:e2:5e:03:e1:ae:4c:21:11:0d:f7:8d:18:80:
                    eb:0e:4d:50:06:58:22:05:e8:92:d5:6b:d7:d9:db:
                    41:d0:04:59:f0:08:73:ec:8a:d1:f9:35:5e:96:9e:
                    d1:4d:cb:1f:57:36:3d:9d:7d:b6:eb:52:68:f2:1d:
                    4d:09:09:b1:19:de:e3:0d:a7:1c:06:de:2f:be:b5:
                    53:f8:5a:62:ec:49:6c:be:45:de:92:31:e5:62:5e:
                    c9:e2:a7:d4:89:96:0a:82:ab:43:7d:b5:8f:b9:df:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:39:F4:B9:57:65:DA:7D:EE:AB:50:91:01:61:72:86:14:93:10:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/f9a57daf28041c431a48ab8a4bad7fdd1d9beea4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.139.0/24
                IPv6:
                  2801:10:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264834

    Signature Algorithm: sha256WithRSAEncryption
         bd:51:2d:fd:e4:3e:81:45:d3:2c:d8:da:79:06:00:ad:86:75:
         62:36:14:08:c0:92:bf:7f:f9:38:0a:a4:28:79:7b:f3:93:00:
         cc:b3:62:64:e1:b7:b3:bc:0f:5d:b1:89:5f:b9:b5:e2:68:15:
         df:58:a6:ae:89:98:5c:5d:2e:e8:63:da:87:8b:bc:86:d0:40:
         b1:1b:ff:2a:9a:a4:ad:9e:6b:f7:0d:f1:09:97:e1:84:63:20:
         c9:08:9e:fc:de:ce:ff:7a:c6:c0:51:16:ba:98:0a:97:22:d0:
         31:b3:73:0a:e4:00:58:df:47:69:88:68:bc:4d:5b:dc:4c:6f:
         8b:68:51:0c:91:db:f7:33:3f:46:28:9c:5f:72:41:3b:04:0c:
         6f:4c:33:34:dc:82:d9:61:5c:bc:7e:b5:b2:1e:86:97:1e:2c:
         6b:2b:06:2a:aa:4a:c6:1c:18:f8:4a:30:c9:a7:0a:de:54:f1:
         d4:5a:c3:69:76:2a:b5:09:c1:d0:5f:26:c1:2e:a1:ec:70:bc:
         00:2c:81:fa:6a:3a:6f:d3:9a:4b:d8:a0:bb:60:7d:a7:06:c1:
         bc:e0:ad:17:61:66:84:a4:e8:d9:38:6a:ab:b9:e6:c1:6c:c4:
         d8:26:f8:be:78:19:c9:6a:d6:a3:bd:6c:75:a0:49:51:89:dd:
         5d:b6:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----