Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08c1026e4a85490be0a491c7fc23850086ed1cb0.cer
File:                     08c1026e4a85490be0a491c7fc23850086ed1cb0.cer (raw, json)
Hash identifier:          SOldOj9V7mXcG2aPrmTur8KOMiF0D3WiaRzHAEPqzFE=
Subject key identifier:   89:7A:AF:2E:2D:D9:5A:42:1E:07:72:7D:5D:B9:FD:B8:05:FB:9E:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9DAF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/08c1026e4a85490be0a491c7fc23850086ed1cb0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:10 +0000
Certificate not after:    Fri 18 Oct 2024 15:00:00 +0000
Subordinate resources:    AS: 28025
                          IP: 190.120.64.0/19
                          IP: 190.123.48.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16374517 (0xf9daf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:10 2017 GMT
            Not After : Oct 18 15:00:00 2024 GMT
        Subject: CN=08c1026e4a85490be0a491c7fc23850086ed1cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:40:16:fe:9e:74:9c:6d:59:ac:98:f5:af:
                    9a:6d:fc:bb:8b:a6:01:5a:2f:e0:f7:a2:26:c7:d7:
                    10:95:0e:d2:d8:e6:6d:37:c5:7e:68:2d:7d:ef:12:
                    93:44:25:03:4c:7c:23:e1:b5:24:48:94:f7:2e:24:
                    a6:df:ff:1a:83:08:88:d8:95:a6:63:66:26:8f:94:
                    3f:ab:76:e9:68:94:82:74:f2:4b:35:ff:1e:26:3a:
                    66:7d:1c:00:41:60:78:8e:cd:7a:b7:8d:da:26:85:
                    41:44:f5:66:fa:b3:a5:4f:49:d0:aa:35:37:48:e2:
                    96:1c:24:68:21:6c:87:e4:59:45:35:0f:6d:01:5d:
                    78:b3:11:ea:fd:d7:0e:db:ab:5a:f2:8b:65:6a:03:
                    f3:cf:75:37:2b:c4:38:cb:40:ff:39:21:03:9b:48:
                    f1:f6:7a:ee:e4:ff:7d:c4:7c:c4:d2:7a:71:4e:a3:
                    2f:ba:3c:0c:78:01:9b:a0:e4:dc:ee:ae:62:7f:5f:
                    71:0a:e2:0a:e4:c8:8e:fe:56:29:a5:bd:ff:3c:98:
                    d8:77:f5:c2:36:82:3e:09:10:4c:7e:02:2c:eb:4c:
                    78:49:f5:e2:fb:0a:46:68:22:97:39:e7:ad:e4:8e:
                    d0:73:de:3b:0c:4d:4f:9b:79:a3:d1:8f:ce:f0:ec:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7A:AF:2E:2D:D9:5A:42:1E:07:72:7D:5D:B9:FD:B8:05:FB:9E:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/08c1026e4a85490be0a491c7fc23850086ed1cb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.64.0/19
                  190.123.48.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28025

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:fb:d0:06:a1:ed:2b:c3:98:73:e4:59:0d:15:f7:3d:28:
         8e:8c:5b:1e:04:b6:69:f1:cd:c4:16:e3:5b:7a:21:32:cc:f3:
         e3:4c:2e:46:ce:68:b3:e1:95:dc:59:55:8a:c9:44:44:66:8a:
         23:84:5d:60:f5:d2:74:3e:e5:39:c1:ee:b5:f2:18:fe:c3:37:
         43:cf:cc:fc:7e:d6:57:24:c9:a9:d4:38:fb:97:5e:85:fe:32:
         01:f7:78:c7:e2:81:fb:5f:9d:5a:48:67:85:53:70:d3:05:e0:
         3f:51:50:b1:92:f1:cf:ff:54:71:f1:2e:1f:0d:c7:08:d0:68:
         56:79:3e:98:1f:e4:c7:5a:85:ac:f2:5e:2a:e1:19:a1:69:41:
         35:14:c1:34:d9:94:2f:38:21:48:e9:a9:8b:54:4c:96:a4:05:
         f2:c6:46:47:01:cb:f2:e2:71:76:eb:9f:30:95:bc:26:dd:b7:
         a0:95:b5:da:cb:32:67:9d:4f:99:12:7d:26:6e:7e:05:58:fc:
         31:25:d9:e6:af:6b:25:fe:67:51:c8:52:38:42:a5:16:cc:05:
         a0:f1:be:a1:b1:77:43:1f:81:5a:da:65:8f:2c:2e:7b:57:a3:
         74:31:0a:8a:0b:be:86:07:35:4a:50:d7:af:96:8a:e9:19:a8:
         24:1e:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----