Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer
File:                     0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer (raw, json)
Hash identifier:          J2K24+TS4gLtKVXNRQ0pM436NF6tkwPIdPBXmwwFD5w=
Subject key identifier:   BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01023260
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:34 +0000
Certificate not after:    Wed 25 Dec 2024 20:09:52 +0000
Subordinate resources:    AS: 272114
                          IP: 168.205.0.0/22
                          IP: 170.247.120.0/22
                          IP: 2803:6d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16921184 (0x1023260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:34 2017 GMT
            Not After : Dec 25 20:09:52 2024 GMT
        Subject: CN=0fe522831a6a9d7d5f746b14f259a0f8a24782ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:d9:41:81:22:46:4b:07:ae:4c:36:26:b3:
                    d5:9f:aa:d4:3c:65:fd:85:31:eb:03:00:cd:a4:94:
                    e8:bb:6f:9c:bd:6d:0e:4a:7e:88:8f:f6:43:b7:07:
                    43:54:30:29:94:d8:de:c8:26:89:30:a1:cd:7d:1d:
                    49:02:0b:ee:03:75:65:eb:f1:e8:84:15:c3:fd:60:
                    cc:3a:d0:3d:7a:b3:c5:83:f1:8d:bf:41:59:8c:97:
                    8e:e1:c5:17:78:12:e3:dc:a3:ba:f7:1e:10:16:92:
                    62:8b:61:62:89:0e:f7:63:43:0f:03:ba:e9:41:89:
                    15:62:62:e6:d8:20:09:2a:25:bb:4c:b9:6b:b7:3e:
                    0a:cf:03:e7:5e:84:d1:f1:4b:d5:93:87:9f:b0:48:
                    b2:40:72:d2:f7:40:06:cf:a4:ea:df:cb:21:b9:14:
                    fb:d5:3d:e4:c5:4f:6c:fd:ee:43:f1:aa:33:89:ee:
                    b0:82:d4:45:03:65:03:0d:06:aa:fa:d4:ec:17:3e:
                    c6:41:74:b3:60:3e:e5:f3:34:b7:f3:f3:43:b2:77:
                    18:18:cc:f0:53:47:2d:b2:7a:00:29:f3:0e:16:88:
                    4a:da:dc:8b:05:b3:54:23:87:f5:8d:d5:0f:d9:2b:
                    6a:00:e3:e4:3a:24:d7:19:ee:58:01:0a:b9:62:61:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.0.0/22
                  170.247.120.0/22
                IPv6:
                  2803:6d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272114

    Signature Algorithm: sha256WithRSAEncryption
         1d:26:6f:e4:8a:99:4a:15:95:2b:a7:e4:73:ca:4f:c4:30:33:
         11:18:a7:8b:48:7a:d0:75:6a:65:3a:65:a8:1c:f9:a4:20:3b:
         d4:11:9d:39:4f:84:ed:a1:76:59:65:06:ff:83:c0:b8:29:f5:
         41:06:81:b3:76:7d:83:ab:99:50:28:f8:27:73:d5:79:96:92:
         57:b5:1c:87:bc:da:d1:4b:2b:32:85:89:03:2c:bf:bd:cb:47:
         8c:49:96:d4:bb:03:c7:b8:12:ae:ce:ad:34:64:95:5d:70:5e:
         c9:68:0a:31:ef:4d:b1:27:40:cb:c7:f8:2f:fc:bd:d0:96:be:
         b6:9b:cc:07:bc:04:cd:15:20:18:6a:60:97:ac:e8:5a:27:26:
         04:a1:4e:3e:ad:58:a2:e3:8e:18:07:db:14:e7:74:dc:67:59:
         fa:9d:f8:17:7f:f8:f4:75:99:60:8b:4b:97:9d:71:ea:d2:18:
         01:d3:f7:8e:38:39:ca:05:3d:46:44:e4:5a:78:0d:50:95:97:
         8f:12:9e:4f:b9:ef:9e:d8:45:84:12:d1:30:da:f0:ea:5d:14:
         b9:b4:25:a2:c8:42:fe:94:64:ae:d6:a3:5d:8d:cf:ce:b5:d8:
         97:98:63:d1:fc:5a:84:d6:03:6a:05:dc:31:b1:d8:46:a5:12:
         84:80:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----