Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f10c441369c1387ed2084a1a987d9f4016969d.cer
File:                     28f10c441369c1387ed2084a1a987d9f4016969d.cer (raw, json)
Hash identifier:          H+W7kZzVa4rvLypovq4huvo9pU7/+BEJqLDZvllTGdg=
Subject key identifier:   05:3A:DA:DC:9E:42:28:2A:68:70:16:C8:C0:84:EA:94:6A:A6:0E:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FACAB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/28f10c441369c1387ed2084a1a987d9f4016969d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Sat 26 Oct 2024 20:16:29 +0000
Subordinate resources:    IP: 179.61.12.0/22
                          IP: 2803:5c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16435889 (0xfacab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Oct 26 20:16:29 2024 GMT
        Subject: CN=28f10c441369c1387ed2084a1a987d9f4016969d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:12:7b:f7:61:b3:c4:c2:ba:3f:51:93:6f:
                    c6:0a:b0:35:ba:a5:4b:0a:4c:1d:09:d1:cf:32:1f:
                    90:64:a4:2a:3b:30:12:c9:a2:0c:a4:f9:37:9b:0e:
                    53:d7:2a:c7:27:10:8c:63:b7:47:c4:f7:5b:3f:55:
                    39:bf:27:71:19:f9:5f:37:69:31:c9:84:9c:ff:c8:
                    8d:07:df:c5:fe:f6:3b:4e:6a:db:1b:96:8a:5a:e2:
                    48:b7:a0:51:1d:49:6a:20:2c:e3:53:cc:d1:db:be:
                    f2:bb:63:f9:c1:b9:42:76:25:c2:76:13:54:fb:52:
                    ef:4f:88:80:9d:fe:b6:8b:47:c2:84:64:04:c1:0f:
                    b4:2a:60:e0:ca:f8:46:67:cf:03:71:16:c5:93:ed:
                    6f:6a:b7:43:91:cb:93:c4:6f:24:9e:5b:d5:1e:5c:
                    c4:8d:d1:cd:22:b5:38:25:a1:53:c0:41:ed:56:87:
                    8d:08:70:9e:39:5f:32:62:2b:40:be:f8:08:d3:0e:
                    00:14:1d:62:c2:ec:a3:83:0f:f9:8a:26:e3:7c:48:
                    c8:ac:fb:15:0c:58:1a:6f:7a:41:2f:92:31:7f:8e:
                    a0:81:38:30:c3:75:67:c9:d8:74:98:04:ad:28:f1:
                    70:a2:46:9d:da:92:34:cd:4a:d1:b7:d0:52:82:3f:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3A:DA:DC:9E:42:28:2A:68:70:16:C8:C0:84:EA:94:6A:A6:0E:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/28f10c441369c1387ed2084a1a987d9f4016969d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.12.0/22
                IPv6:
                  2803:5c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:22:d2:cd:3a:28:27:f6:b3:ff:c8:35:b6:d9:ed:f5:51:46:
         eb:32:8d:23:11:75:4a:11:0b:0f:0c:69:71:bf:be:2e:8f:05:
         59:70:89:d4:49:de:ae:fb:a3:b0:84:19:11:a4:80:62:20:7c:
         0f:b5:96:69:65:e0:b9:32:3b:95:d1:d7:1c:16:46:60:05:b4:
         8f:a2:18:dd:6a:e0:72:7e:7b:32:2b:60:a6:88:53:a8:ad:ae:
         4e:e4:6c:53:b0:00:32:c5:7c:14:ed:c7:06:f0:5f:0b:4b:60:
         ae:d1:a0:47:7b:5f:c1:24:27:4a:5c:8a:0d:dc:bf:37:a7:c5:
         3c:91:7d:09:d8:54:db:eb:55:32:ff:c4:7b:5a:1b:b8:08:96:
         35:5c:3b:36:79:87:6f:fe:b2:60:a8:f5:96:74:48:9e:d3:a3:
         6d:f3:35:8b:85:07:17:b4:2c:3a:79:b7:f9:f8:a9:a5:cd:72:
         f2:f7:5e:04:ce:49:c1:38:c2:95:ec:f2:87:e3:c2:0d:b2:74:
         a7:2a:f9:eb:76:64:4c:3e:38:28:2f:7c:e4:8f:f0:0d:75:11:
         02:fb:aa:cf:02:a8:7a:16:be:76:14:1c:4c:96:38:a5:03:17:
         f3:14:42:b9:71:fd:5d:0d:af:3b:a2:72:51:6b:3c:0b:04:21:
         1a:3c:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----