Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a7270422ecb91448a4bb7fdbe36b2b012d270fd.cer
File:                     2a7270422ecb91448a4bb7fdbe36b2b012d270fd.cer (raw, json)
Hash identifier:          GxCVoFwAfLC6h8IOacRGGK568smBZPoKurqTBIUGjAA=
Subject key identifier:   AF:B5:78:72:DB:28:32:70:C5:3B:62:AB:72:89:E1:83:D0:4A:F1:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6BFD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/2a7270422ecb91448a4bb7fdbe36b2b012d270fd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Jan 2019 19:57:37 +0000
Certificate not after:    Fri 27 Sep 2024 05:00:00 +0000
Subordinate resources:    IP: 45.224.186.0/24
                          IP: 2801:1e4::/42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16170964 (0xf6bfd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 19:57:37 2019 GMT
            Not After : Sep 27 05:00:00 2024 GMT
        Subject: CN=2a7270422ecb91448a4bb7fdbe36b2b012d270fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:78:c3:f6:70:d8:35:91:80:72:f8:a5:68:
                    1d:13:2a:6f:bc:cf:52:29:bc:7e:62:47:82:e3:1b:
                    b9:a7:49:fa:7c:c2:66:db:3b:c5:40:f3:79:8e:ec:
                    3b:09:a1:9f:a1:5e:e9:a5:9d:87:0d:c1:c1:7d:1c:
                    5e:d6:b5:9e:75:50:3a:67:7f:fa:97:c1:fc:f1:a8:
                    26:7e:93:34:a9:8a:64:29:eb:b8:1a:6f:05:60:68:
                    d2:65:0c:68:0b:65:ff:1b:78:65:7a:ba:d1:e5:22:
                    d5:bc:3d:c7:4a:2a:62:1a:3e:1f:59:bf:9e:9d:ac:
                    f6:f6:df:e1:c2:5c:53:f1:a1:6b:c3:e6:62:2d:68:
                    f0:ea:aa:46:75:7a:b0:2a:7a:14:fe:b8:87:e7:86:
                    3e:10:e6:1d:e9:fc:06:75:cd:f2:8e:1f:79:82:af:
                    73:a4:5b:b1:15:b6:8f:a5:3d:74:77:9b:a8:38:98:
                    3e:6e:e6:6e:f9:08:82:90:33:f7:f9:cb:0c:a7:ab:
                    bc:bd:fa:9c:16:3a:b5:da:3a:be:8c:4d:86:8e:27:
                    77:51:f2:91:01:06:b7:63:6c:92:2e:00:e4:51:22:
                    10:ce:58:e8:22:9b:31:90:51:1a:04:05:4c:33:89:
                    a0:67:69:a5:53:db:e5:c1:ab:80:c2:a4:4b:00:44:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B5:78:72:DB:28:32:70:C5:3B:62:AB:72:89:E1:83:D0:4A:F1:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/2a7270422ecb91448a4bb7fdbe36b2b012d270fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.186.0/24
                IPv6:
                  2801:1e4::/42

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:ae:7d:24:f6:a8:a8:49:63:8b:57:cd:2e:74:05:a7:cd:
         16:d0:65:6f:3e:19:0a:20:48:5e:44:96:b1:f2:db:95:fd:22:
         33:0c:73:c7:8c:55:c1:df:a1:6a:89:85:ba:a6:53:cb:76:2b:
         dd:f0:8b:0b:f1:ab:7a:19:79:2b:e6:3c:6a:26:de:0e:fe:7f:
         a9:29:30:ad:fe:41:4c:a0:7c:ab:2b:94:94:15:93:bd:a8:0f:
         68:f4:14:51:5f:0c:d8:1c:e6:d4:7c:86:63:06:f2:10:6b:ca:
         49:a5:cf:b4:7c:b6:69:89:20:22:b2:e7:3b:78:b8:0b:c9:28:
         7c:91:6b:7d:8e:09:23:f7:c1:46:8e:27:5c:25:9c:8b:08:43:
         c0:11:0d:bd:f0:be:4b:31:78:14:35:89:a0:33:3b:a5:78:3b:
         d6:99:7a:a3:9a:88:29:2a:c3:af:4c:45:56:4c:77:7c:9d:b5:
         d8:e1:f1:e1:6b:6f:c6:e9:11:7e:a1:63:d0:78:0e:15:32:be:
         33:7b:57:c7:42:1f:08:c7:09:da:af:cf:95:36:64:29:cc:98:
         aa:d1:c4:5f:8b:bd:06:65:7b:e0:00:7f:01:05:b1:14:08:ae:
         90:ff:05:11:54:50:15:3a:7a:74:f0:72:ac:f5:78:b8:ed:8b:
         68:2f:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----