Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0278e45d26ada05276ca10293e8fdc4538350ff2.cer
File:                     0278e45d26ada05276ca10293e8fdc4538350ff2.cer (raw, json)
Hash identifier:          u7O3uIZYVA0K0kZgifjCtZSNmDPFKZ2OPvW/mI3wIgU=
Subject key identifier:   B6:CE:A3:56:07:D1:1C:88:8F:EF:3A:5B:42:9C:DC:BB:F6:BF:D7:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD7E68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cd85d1a2-1da3-47c6-80f9-845cdeb63474/0278e45d26ada05276ca10293e8fdc4538350ff2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cd85d1a2-1da3-47c6-80f9-845cdeb63474/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:05 +0000
Certificate not after:    Sat 02 Mar 2024 15:00:00 +0000
Subordinate resources:    IP: 190.107.0.0/20
                          IP: 2800:230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14515816 (0xdd7e68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:05 2017 GMT
            Not After : Mar  2 15:00:00 2024 GMT
        Subject: CN=0278e45d26ada05276ca10293e8fdc4538350ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:da:9e:ba:10:2f:04:04:bf:4e:76:dd:33:
                    01:6c:0f:6c:5c:0d:4f:d4:b4:55:dd:90:55:92:00:
                    8c:fc:03:5b:9b:f6:82:80:28:42:20:e3:11:02:13:
                    40:47:32:35:eb:d0:b6:be:82:3b:4d:ec:cc:bd:3f:
                    11:56:25:b5:be:02:89:9f:a9:bc:bc:70:7e:13:f3:
                    fb:19:fe:4c:b9:e3:f6:77:b9:6a:3b:27:62:43:74:
                    a3:29:9e:4e:2c:19:d8:6a:18:f3:ae:46:a8:14:9b:
                    32:b4:25:0c:f0:19:5c:6e:34:04:97:79:f2:a9:ae:
                    1d:13:0d:bd:11:c6:9e:de:70:6d:61:31:7c:a3:08:
                    53:f1:1d:76:58:3f:81:c2:32:c4:04:03:7e:3c:b2:
                    74:ad:a6:c2:2d:08:89:59:fc:4f:5a:b9:80:19:28:
                    2a:9c:68:80:5b:4b:0e:f1:81:8d:5e:fb:e8:84:8c:
                    62:c0:07:a2:6f:11:84:6a:d7:91:5f:c6:6d:77:47:
                    80:f5:f8:6a:fb:f4:03:75:03:4b:a0:4b:65:c6:e4:
                    e8:ec:02:c9:dd:b8:af:43:c2:13:51:63:5c:a8:76:
                    28:05:b4:6f:aa:a7:26:4d:bd:27:90:0a:4b:36:0b:
                    1b:88:b1:14:99:45:ad:ab:f8:f8:2a:d1:c0:75:df:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CE:A3:56:07:D1:1C:88:8F:EF:3A:5B:42:9C:DC:BB:F6:BF:D7:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cd85d1a2-1da3-47c6-80f9-845cdeb63474/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cd85d1a2-1da3-47c6-80f9-845cdeb63474/0278e45d26ada05276ca10293e8fdc4538350ff2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.0.0/20
                IPv6:
                  2800:230::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:81:f7:ce:db:d3:69:ab:e9:35:ad:8b:7e:fb:a4:4e:df:2f:
         0f:d5:13:07:a7:99:76:3e:b2:83:17:67:22:07:8a:85:00:b7:
         7d:7e:61:dc:1c:e9:f8:65:d8:b2:dd:59:14:dc:8e:45:4c:f1:
         8e:41:fa:7c:bc:12:32:85:05:2f:a0:7d:04:e5:20:f0:96:eb:
         cb:a5:65:f4:3e:73:54:3c:6b:f6:75:b4:28:c0:b4:d9:75:8f:
         8d:a5:e0:dc:47:cf:08:1d:f3:fc:c5:11:5e:ba:4d:50:0b:cb:
         9e:f9:b5:78:a5:13:02:02:f7:8e:76:2b:23:8c:10:b7:9e:26:
         18:f2:13:b7:7a:e2:03:36:75:59:fd:59:15:bb:8c:ba:d9:cf:
         28:55:9e:cf:fa:16:72:b9:30:7b:b2:eb:e9:bf:6b:e3:47:e6:
         fc:eb:5d:17:c9:a0:36:bf:5a:7d:6d:b9:c3:42:f4:2a:b6:4a:
         3c:bb:7d:9d:3e:1c:d4:36:b7:17:48:a4:be:02:5d:66:35:d3:
         7c:f3:3a:79:cb:46:85:c0:bc:39:f9:de:22:35:8d:ea:f3:87:
         26:cd:6f:5a:97:c2:4a:a1:2d:3c:09:20:18:ec:66:6b:55:3e:
         18:c7:2f:e5:e7:30:e7:d3:b9:d7:76:28:5e:9e:70:1c:b9:7e:
         10:31:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----