Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.cer
File:                     1d39e33473e4bb1b07dda4a78b92c9b0f538c685.cer (raw, json)
Hash identifier:          ibBna7ZWMhQ3H7pov6iOmkGUT7ZDvIfK71CwDWgp6PI=
Subject key identifier:   F8:44:59:C4:4D:8A:E6:17:2A:87:3E:3D:D2:41:C2:89:60:F8:B1:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F10430
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:41 +0000
Certificate not after:    Wed 07 Aug 2024 15:42:00 +0000
Subordinate resources:    AS: 52285
                          IP: 190.111.120.0/22
                          IP: 2803:4f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15795248 (0xf10430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:41 2017 GMT
            Not After : Aug  7 15:42:00 2024 GMT
        Subject: CN=1d39e33473e4bb1b07dda4a78b92c9b0f538c685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:23:8f:96:27:94:c0:aa:2a:e9:50:f7:06:
                    9d:75:34:e8:d5:14:76:ac:5c:6c:4a:6b:00:35:7b:
                    77:7c:a8:bf:2f:1f:36:e4:e1:6d:92:09:49:0d:a0:
                    39:fc:c5:70:2a:b4:f9:71:4e:2d:87:0f:97:cf:b3:
                    dc:f9:c4:4a:11:3a:28:4b:2e:ac:a6:c1:f0:0c:51:
                    30:90:0f:52:54:52:14:6c:02:f3:06:ca:e6:6c:98:
                    29:c4:de:dd:4c:fd:54:ad:79:42:49:47:69:4f:6f:
                    26:b1:52:94:a8:6c:b1:8c:e0:0c:65:85:df:dd:46:
                    01:cc:fc:ff:58:23:dc:8b:8d:56:6a:18:dc:5e:ea:
                    66:49:38:9b:16:f7:fa:e8:1a:e1:19:59:43:04:7c:
                    b8:ab:bd:65:f8:95:e0:2c:42:f1:52:7f:47:4c:99:
                    38:8f:51:54:38:8f:d4:31:c0:30:04:95:be:be:de:
                    ed:fd:bc:5f:42:68:31:5e:e5:a2:1b:0a:50:c8:e5:
                    2d:84:0b:ca:2d:dc:a0:d4:96:ab:68:3a:03:3b:51:
                    fe:3a:d0:be:72:54:1e:6c:a3:bd:39:51:04:76:42:
                    f9:c1:38:36:41:9e:77:09:c2:1f:cf:35:0a:ab:66:
                    43:9a:e1:e0:a6:2a:3d:dd:8e:80:f3:ad:46:2d:e2:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:59:C4:4D:8A:E6:17:2A:87:3E:3D:D2:41:C2:89:60:F8:B1:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.120.0/22
                IPv6:
                  2803:4f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52285

    Signature Algorithm: sha256WithRSAEncryption
         8b:a1:02:ee:cd:f9:2e:2a:f7:43:b7:ae:42:d9:31:55:b9:8e:
         39:f6:40:5a:40:a0:1b:ec:8e:8f:fa:73:a6:f9:54:40:c7:e3:
         c5:be:ee:0c:e0:53:38:df:ab:b9:49:cf:49:44:42:94:db:b8:
         d5:7c:f3:17:84:c9:98:5d:6e:9f:4c:3f:cd:46:f1:91:3d:ff:
         91:ab:7c:76:db:0e:4b:ab:d4:bd:69:63:df:95:d6:aa:bb:df:
         0d:2d:2b:d7:9b:a3:19:5b:da:ac:37:e3:dc:26:a7:35:cb:60:
         c0:43:bc:61:16:a1:12:c0:89:e8:a9:4f:6c:73:43:de:68:c5:
         03:ca:cb:1e:ed:46:89:a1:e4:52:fb:82:42:94:ce:ee:b4:c0:
         9b:69:72:7c:a8:8f:5a:c2:20:38:d4:e1:9c:ea:bb:16:36:ac:
         92:69:2a:09:85:19:3a:5d:14:a8:34:4a:d8:16:fa:33:d2:50:
         3a:81:68:ca:0f:51:c9:08:6e:a0:ea:57:6f:72:a7:94:c4:3c:
         f7:6f:bc:09:1a:11:d6:50:ac:6d:a1:6e:68:92:05:24:06:2a:
         63:c4:51:8c:74:d8:fe:c0:58:2e:ca:4e:2f:ca:0e:a4:97:86:
         44:25:fc:01:62:1d:35:ba:84:87:e2:bf:f8:ef:1b:1c:94:8e:
         7e:b9:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----