Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d41746208795e6a5b8815d25ea39b536f23d0fd.cer
File:                     9d41746208795e6a5b8815d25ea39b536f23d0fd.cer (raw, json)
Hash identifier:          hhFAjBn+i7zjt9j/xcHXrwHPJ/g5PEgO4YRKLWKq4qw=
Subject key identifier:   11:8E:E6:FB:8E:1E:78:D4:87:DB:ED:AC:7C:55:D0:7F:FF:BB:EE:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102F5E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/9d41746208795e6a5b8815d25ea39b536f23d0fd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:39 +0000
Certificate not after:    Sun 05 Jan 2025 14:49:18 +0000
Subordinate resources:    AS: 269788
                          IP: 138.59.8.0/22
                          IP: 2803:1f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16971238 (0x102f5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:39 2017 GMT
            Not After : Jan  5 14:49:18 2025 GMT
        Subject: CN=9d41746208795e6a5b8815d25ea39b536f23d0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:65:94:52:b3:c0:dd:0e:83:c5:29:6b:6a:e7:
                    2b:d5:f1:18:76:84:d1:7c:bf:5c:e0:0f:02:aa:f6:
                    67:03:7e:e7:10:50:a1:74:45:a2:92:2a:46:7e:68:
                    e1:f7:0b:67:3b:3d:30:ed:8b:00:b7:d7:66:cf:12:
                    dc:8e:c2:84:1e:f4:5e:6c:54:5c:c4:e8:6f:5a:63:
                    16:19:3d:cf:a8:3f:15:a1:6d:40:93:8e:f3:2e:95:
                    32:c8:c4:a0:fd:70:ff:bb:f9:38:db:06:70:b7:62:
                    57:10:ff:f0:32:18:58:e9:c5:5d:f5:67:1f:1b:b6:
                    24:73:5e:ae:9f:4d:1a:01:ad:2c:0d:f3:bd:6d:e5:
                    32:2b:4d:92:4b:e2:32:b9:82:42:6b:09:b4:ea:d7:
                    4d:0e:1e:b6:6c:23:e2:68:b3:c4:0d:38:ed:41:cc:
                    22:2b:d7:fe:d0:ba:be:eb:e3:80:d4:86:d1:eb:25:
                    bc:61:df:e1:e1:a4:e6:f4:b8:2a:6b:96:4d:2f:cd:
                    49:dc:9a:cb:4c:8c:b6:a7:b7:34:f3:07:3e:d2:d8:
                    e3:fe:7a:7c:b4:83:86:87:6b:96:92:45:96:be:c1:
                    4f:7d:5b:5d:c4:01:0e:f4:15:7b:89:bf:0a:5b:9f:
                    5d:a1:e7:83:96:ee:00:32:92:48:5e:87:3f:b9:1f:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8E:E6:FB:8E:1E:78:D4:87:DB:ED:AC:7C:55:D0:7F:FF:BB:EE:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/9d41746208795e6a5b8815d25ea39b536f23d0fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.8.0/22
                IPv6:
                  2803:1f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269788

    Signature Algorithm: sha256WithRSAEncryption
         14:0e:68:34:4a:9a:b9:1d:dc:46:2d:b3:c3:7c:7b:59:fe:23:
         17:7b:3f:56:70:0d:42:77:0d:83:c0:bf:af:29:9c:70:55:15:
         dc:c1:89:f8:f2:35:b7:68:d4:15:3b:56:a8:d9:4b:d7:81:25:
         17:f0:e1:56:d9:81:5b:81:8a:cd:9d:06:91:3c:c1:70:c6:97:
         29:8d:8a:f9:a7:bf:b3:0a:28:d5:05:de:6d:0a:2d:1d:7e:99:
         f8:1a:7c:7f:4f:b0:3d:86:5f:2a:9d:dc:f4:ca:f4:f6:61:0f:
         71:c7:ba:a3:5e:df:3a:06:09:93:7c:30:4f:16:43:58:97:1b:
         17:3a:57:5d:68:46:07:e9:43:38:77:c6:20:a4:00:17:ea:e0:
         d0:49:84:7e:3d:2a:eb:16:d1:99:02:ab:43:4f:99:26:06:1f:
         ca:fe:19:ac:d1:26:a9:25:54:37:0a:d9:74:6b:b9:5e:fe:1e:
         f0:48:4a:8f:43:16:d7:03:b9:ab:9c:fa:66:cf:04:55:6b:54:
         96:99:cb:14:2b:43:86:3f:b4:d6:d3:2d:1e:1b:1c:40:63:1c:
         46:5a:f0:bc:cf:c5:07:b3:40:11:a4:78:3d:ac:11:40:bc:3d:
         38:c3:f7:ce:fa:32:04:12:f3:e6:59:a7:f3:ed:53:b3:33:e4:
         92:90:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----