Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/008d84b9cd2a920928195441c2861e0a51e5d736.cer
File:                     008d84b9cd2a920928195441c2861e0a51e5d736.cer (raw, json)
Hash identifier:          cramHwpED8lIZhhQpx+clWIPHhrhL1rGGa/WDQofTbw=
Subject key identifier:   BA:61:65:43:DF:06:89:2E:D2:C6:8F:9F:90:65:89:49:58:05:B5:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9E71C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/008d84b9cd2a920928195441c2861e0a51e5d736.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 16 Jul 2018 01:53:07 +0000
Certificate not after:    Fri 18 Oct 2024 19:50:27 +0000
Subordinate resources:    AS: 266677
                          IP: 45.228.60.0/22
                          IP: 2803:b920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16377628 (0xf9e71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 16 01:53:07 2018 GMT
            Not After : Oct 18 19:50:27 2024 GMT
        Subject: CN=008d84b9cd2a920928195441c2861e0a51e5d736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:e9:4b:cd:15:21:fa:f7:1c:3e:4e:34:a1:
                    ff:39:5d:39:64:37:88:79:ac:80:e4:d9:3e:6f:1c:
                    ae:44:6a:15:53:1a:9f:ad:7b:5a:e0:56:a1:97:f3:
                    7f:32:50:5d:1f:d0:e6:63:a8:5e:7c:87:c0:99:71:
                    3e:22:e9:27:7b:9d:94:20:a8:2e:37:5e:4a:42:f5:
                    12:00:27:dd:36:f7:05:f2:94:80:19:00:62:32:c4:
                    5a:8f:92:3e:df:9b:98:a7:4c:d5:63:d0:9b:ce:e8:
                    11:d3:fe:e6:53:30:43:35:71:a6:25:63:79:3b:c2:
                    f7:6b:26:7e:d3:a4:78:5c:5b:e0:fd:c4:5b:9f:f8:
                    dc:52:75:ba:2e:b2:23:65:a5:ad:4c:23:85:14:3f:
                    10:50:de:bf:00:d2:70:d9:0d:ff:dc:0b:66:4b:03:
                    86:db:11:fb:11:1d:86:38:97:90:23:c8:a8:2e:85:
                    a5:23:d1:6a:f6:8e:12:04:44:22:0d:75:d1:8b:9d:
                    ac:a0:20:4b:c0:c5:20:c9:34:44:3b:af:cf:d4:e2:
                    c3:ed:5f:c8:1d:0f:7c:6a:45:bf:94:5f:3e:87:50:
                    33:23:fa:53:fa:9a:be:be:7b:df:b0:10:9e:c0:35:
                    69:10:91:ef:bf:ca:67:aa:10:08:e0:12:64:da:d7:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:61:65:43:DF:06:89:2E:D2:C6:8F:9F:90:65:89:49:58:05:B5:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/008d84b9cd2a920928195441c2861e0a51e5d736.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.60.0/22
                IPv6:
                  2803:b920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266677

    Signature Algorithm: sha256WithRSAEncryption
         80:79:e1:52:22:5f:10:a8:87:9d:93:1b:64:1d:cb:a8:4a:f7:
         3c:3d:85:11:70:66:f6:5c:fa:86:fc:14:e0:89:87:6b:3f:a8:
         19:db:9c:86:0b:28:73:63:bb:2b:ca:70:17:d5:ad:5d:f7:63:
         bb:bc:03:f6:9d:03:27:f4:34:df:e0:fb:3f:e2:fc:11:fa:f3:
         b7:b4:be:37:b9:43:69:53:ea:ff:95:73:01:93:24:d2:9f:91:
         c4:72:69:99:dc:e7:02:c5:91:5d:62:e1:89:95:ce:bf:c5:6a:
         39:a3:8c:b8:71:6d:2e:ff:64:ed:64:1c:c7:63:ae:e2:f5:5d:
         50:3a:ea:74:ea:6c:a1:78:ea:55:7d:cb:fb:29:f9:14:22:8a:
         c2:b8:17:ef:18:bb:5c:5a:88:38:ec:18:62:8b:52:52:fa:68:
         2a:12:1d:2b:c9:c0:05:e2:ae:e1:e9:eb:43:80:8f:01:f2:5e:
         82:e4:09:ce:a9:de:59:1e:60:d6:ed:46:d2:ad:6a:48:37:05:
         e7:2c:0d:b4:e4:72:4c:3e:8b:65:31:13:9f:92:4a:1d:fc:e9:
         05:4e:02:d3:e3:cf:09:78:ac:c8:dd:d8:99:ac:b7:ea:29:a2:
         44:20:a2:a7:e4:63:51:f1:8f:9c:14:84:b3:5b:21:ab:d8:36:
         54:9a:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----