Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
File:                     fdfd425584dd260c812e3b649911e7753efa8f09.cer (raw, json)
Hash identifier:          JTe4DpH/2eVMebg78w8VXCyLg3NGAXoJgnvf6a9PtG4=
Subject key identifier:   BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6FBF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:24 +0000
Certificate not after:    Sat 28 Sep 2024 20:37:42 +0000
Subordinate resources:    AS: 264819
                          IP: 170.80.140.0/22
                          IP: 2803:5cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16186360 (0xf6fbf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:24 2017 GMT
            Not After : Sep 28 20:37:42 2024 GMT
        Subject: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:af:44:3e:25:47:00:17:86:c2:e9:8c:64:
                    cd:06:3c:85:ec:3f:57:ac:83:ce:82:b4:7a:cb:16:
                    32:ad:3c:ce:e1:a0:cf:b1:7e:ad:00:4e:5c:7b:ab:
                    3f:b0:fa:c5:9e:ed:ff:9a:2c:c5:9c:6d:df:17:f2:
                    87:de:0e:19:7a:2c:56:c7:66:f3:6c:5d:59:fd:a4:
                    11:bd:f1:bd:06:06:4b:09:1f:39:bc:e9:d5:83:81:
                    97:6d:66:70:6d:ee:95:9d:9b:c7:e4:00:86:de:3c:
                    b0:00:5f:5f:c3:3a:f2:34:0f:da:2d:13:9b:69:bf:
                    5c:f2:38:c8:a8:e8:2a:d7:c9:42:28:09:93:cc:76:
                    a3:1f:96:f9:89:c2:b3:50:59:62:44:47:41:90:b7:
                    ed:f1:e8:f7:8d:0f:d7:a6:3d:57:af:06:65:c2:2f:
                    39:1a:a9:b4:51:56:9a:90:4d:70:13:42:62:e8:75:
                    33:0a:91:15:be:f7:c1:fb:18:38:aa:6f:3e:0a:cf:
                    0f:e7:b3:7a:24:2c:6f:d3:f9:46:95:a3:e9:c8:c8:
                    8b:a0:37:f3:d9:32:2c:86:24:77:e4:d8:60:fd:d8:
                    94:49:0e:7b:57:c6:0d:c3:ec:3d:31:10:f1:79:fe:
                    e0:bf:2e:25:35:af:f3:0d:70:0d:72:5c:7b:53:2d:
                    44:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.140.0/22
                IPv6:
                  2803:5cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264819

    Signature Algorithm: sha256WithRSAEncryption
         28:2d:2f:4b:15:35:e8:47:bc:ce:32:16:46:1d:69:fa:df:aa:
         39:b9:b8:f1:4b:1e:b9:b1:10:11:06:f3:d7:7d:26:2a:c3:b0:
         25:f5:88:d4:f6:47:d9:b5:bc:af:06:80:04:ad:28:ea:51:14:
         d3:74:85:2d:a3:4c:0a:68:e8:01:59:20:00:34:88:27:a9:56:
         8b:9a:01:68:fa:52:f6:68:7d:2f:5e:af:f5:0a:48:15:8f:5a:
         6c:fb:53:29:61:52:7c:e1:84:a2:2c:c9:00:df:5c:c9:bb:cf:
         e3:73:97:d0:45:b5:66:2a:8c:ce:98:a7:9c:f0:80:92:43:6f:
         61:8b:f1:cf:d5:95:16:df:5d:3d:f8:df:eb:b3:62:d8:3c:21:
         b2:11:b4:44:49:4c:9b:8a:6a:ec:9a:66:ad:8a:4d:44:48:66:
         ac:8f:03:dc:a9:f4:26:26:a9:4e:cb:ee:0e:84:6a:0b:0b:66:
         e5:ea:a3:6d:41:b9:76:40:b6:20:54:f1:e2:00:7d:de:ff:1f:
         ad:9e:4d:57:56:74:4a:15:f7:10:8a:d9:58:36:b3:75:46:5c:
         d3:7b:19:aa:a6:b6:18:13:85:ec:9a:b7:a1:d1:93:af:01:c5:
         37:57:35:92:fa:f8:a5:1b:06:b1:5f:53:5b:ec:e6:43:29:5b:
         d0:12:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----