Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer
File:                     d31e9a71271a98fb6f60776ee08cb771f256bb33.cer (raw, json)
Hash identifier:          ev/8+wfQf4ZIOYjWhMnNffYABpvP7iEhCa1oNcPqVPI=
Subject key identifier:   A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104ECC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:27 +0000
Certificate not after:    Sun 26 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 17069
                          IP: 138.117.112.0/22
                          IP: 181.192.0.0/19
                          IP: 2803:2300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17099973 (0x104ecc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:27 2017 GMT
            Not After : Jan 26 05:00:00 2025 GMT
        Subject: CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:24:f1:f6:ba:0c:e7:09:7f:4e:d3:7c:21:
                    45:b5:71:bf:d2:68:f1:f4:62:28:70:d3:49:47:66:
                    5b:64:12:f1:65:c6:6c:98:68:ae:75:ac:52:33:16:
                    79:0e:d2:e8:86:89:38:70:21:b0:5e:46:c2:9c:23:
                    e1:e7:2e:74:c9:a1:5e:b7:6d:22:5f:ba:8d:9a:75:
                    ab:16:6a:4c:ed:80:c8:21:cb:26:00:a9:58:d8:dc:
                    70:e8:d2:e1:01:04:c7:dd:f7:89:a8:64:0f:c7:64:
                    a8:30:9b:a0:48:e1:d3:43:22:97:2d:f9:2b:cc:af:
                    12:6b:a2:41:db:3a:91:74:5d:6a:12:22:1a:ef:8d:
                    9c:40:80:0e:38:e8:0e:81:79:06:a5:b7:2e:13:bd:
                    c1:98:8c:01:f4:80:2e:35:58:8b:d0:27:a8:da:71:
                    28:7c:e1:ef:e2:ad:19:cd:aa:db:d1:0b:32:c2:d6:
                    eb:e6:3c:8f:05:54:18:05:7e:bd:01:b2:a1:31:3f:
                    59:65:88:e5:d2:75:22:7f:c9:b3:bc:55:d4:69:97:
                    44:5e:d0:51:89:ea:88:6d:cd:4c:67:e4:25:ac:bb:
                    96:b1:f2:5d:f3:4a:5e:f5:ee:b0:99:db:1e:78:37:
                    8e:21:5a:a5:2c:69:05:d4:86:a3:2a:d3:21:fc:a9:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.112.0/22
                  181.192.0.0/19
                IPv6:
                  2803:2300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17069

    Signature Algorithm: sha256WithRSAEncryption
         39:27:0e:37:23:13:e0:f6:ab:04:80:a3:30:d0:c6:95:a8:14:
         ce:0f:23:12:bd:6a:20:62:08:bf:c1:f4:bb:a7:c6:84:55:83:
         66:76:65:98:18:dd:ed:ce:5e:2f:f8:ff:75:c2:6b:56:d3:11:
         93:a0:9e:aa:99:90:04:fb:63:79:2c:7f:9d:cd:d1:f6:31:19:
         8b:2d:43:3b:ee:32:72:f0:98:e7:1d:92:3f:64:e7:8e:3f:19:
         0f:bf:6a:d1:c1:42:7a:e3:52:f7:00:50:2b:c8:f4:9a:e6:01:
         01:70:a6:7c:9a:3a:48:61:57:4a:09:50:40:3d:bc:a1:59:40:
         43:9a:ae:04:05:58:47:54:57:6f:f3:cc:af:8a:fa:b9:e8:99:
         b5:54:de:95:97:5c:b4:e7:84:c4:50:d1:6e:15:46:02:13:05:
         eb:d7:c6:be:16:4e:6b:a0:d3:6e:9a:48:3c:13:df:65:b6:b7:
         86:70:11:61:37:dd:23:6f:81:e3:58:d4:a0:64:c1:a6:75:fd:
         fe:66:58:ea:b9:2a:9f:cf:d3:ac:97:6b:89:87:db:47:5a:fd:
         d9:c0:17:bc:8a:6e:fc:ee:f9:ba:8c:85:f9:1b:b4:d5:8b:48:
         88:0b:60:94:73:c1:11:f7:76:54:e1:7d:65:f2:0b:fd:2c:f9:
         7c:ad:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----