Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c2e8add2b764288ba9a362319bf1173258f5739.cer
File:                     2c2e8add2b764288ba9a362319bf1173258f5739.cer (raw, json)
Hash identifier:          EwxT8Gb/0cTbFQA5fKEkVxAZjeHnpjgk1owgMWJyql0=
Subject key identifier:   DD:FE:7C:09:33:C3:79:4F:70:E3:E8:C5:8C:B7:C2:39:0C:F8:7D:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7DC27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2e9e59e9-8569-4edc-adf3-4cddcd34cb1b/2c2e8add2b764288ba9a362319bf1173258f5739.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2e9e59e9-8569-4edc-adf3-4cddcd34cb1b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:17 +0000
Certificate not after:    Thu 03 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 28104
                          IP: 138.185.208.0/22
                          IP: 190.107.248.0/21
                          IP: 2803:4900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16243751 (0xf7dc27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:17 2017 GMT
            Not After : Oct  3 05:00:00 2024 GMT
        Subject: CN=2c2e8add2b764288ba9a362319bf1173258f5739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b2:70:ab:d2:dc:8c:fe:15:bd:ea:c0:fc:61:
                    57:61:12:f8:5a:e8:09:b5:8b:c4:06:ea:37:a2:b5:
                    7b:41:bd:03:f2:4d:78:9a:42:68:12:52:a2:82:d8:
                    61:b9:a4:3b:f3:b2:3a:af:4f:77:b8:26:19:7c:b3:
                    b9:6a:24:b2:4a:ac:70:b1:3e:83:7f:c4:95:ff:d6:
                    35:69:cf:78:80:a5:b5:3c:36:3b:69:04:f9:1d:b3:
                    70:ef:78:5b:f8:0b:7a:26:4e:2d:2b:79:a8:22:a4:
                    c5:08:2f:b1:8d:88:0b:cb:04:ae:f0:e4:b9:26:a1:
                    65:62:d2:00:9a:03:ab:ef:ff:d8:b6:65:8e:0c:e1:
                    b9:24:0f:9e:70:d6:8b:de:04:67:6d:55:ee:0c:9b:
                    d8:25:9d:9f:e4:d4:c6:f5:f2:18:c9:4b:7a:5d:d8:
                    0e:7a:4f:f3:88:dd:29:f9:49:eb:92:94:40:7a:3c:
                    7d:59:ca:27:33:2e:3f:84:83:ff:21:34:58:aa:06:
                    9b:39:f7:e1:0e:8f:b4:ac:b3:f0:9a:e6:9b:0c:ef:
                    c4:01:a7:2c:e6:ae:80:25:d9:41:47:2a:a5:bc:ff:
                    f4:44:7e:e1:1b:46:90:15:66:f2:43:c4:02:b1:24:
                    ef:ed:77:0b:52:79:b3:2b:00:45:81:fb:ad:e9:a7:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FE:7C:09:33:C3:79:4F:70:E3:E8:C5:8C:B7:C2:39:0C:F8:7D:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2e9e59e9-8569-4edc-adf3-4cddcd34cb1b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2e9e59e9-8569-4edc-adf3-4cddcd34cb1b/2c2e8add2b764288ba9a362319bf1173258f5739.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.208.0/22
                  190.107.248.0/21
                IPv6:
                  2803:4900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28104

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:5d:24:2c:5e:c1:b9:14:87:b9:d6:5c:d6:8e:38:60:eb:
         11:cc:6e:57:16:32:55:9e:3a:44:39:37:a2:f6:a9:e8:41:64:
         a6:74:cc:0b:16:f3:42:21:c8:9f:a6:40:29:4d:ba:37:f1:0c:
         21:f9:fc:c3:c2:74:36:78:86:88:aa:cc:00:69:84:7a:bd:5f:
         d0:ba:1d:04:57:ae:ab:5f:6d:76:ec:5e:95:79:2c:76:41:a0:
         f8:2f:85:fc:b0:44:d2:24:0b:9a:f8:ef:e1:6c:7f:e7:54:e2:
         d2:3e:5a:80:35:1c:9d:ed:1a:da:5d:18:a2:ce:89:8d:6c:b9:
         da:70:77:a0:37:e6:37:43:5f:c8:3e:f6:5b:b9:31:0f:60:21:
         cb:ee:11:96:75:61:48:c8:9b:e7:c6:c2:a8:1a:c3:48:da:0b:
         3d:1a:03:57:8c:9f:ca:f5:17:81:2d:47:5f:84:41:ab:67:2b:
         bc:df:f2:b5:af:20:b7:4f:eb:5c:73:b0:86:4b:6e:a9:4b:d7:
         e8:c8:0e:ce:26:f2:ab:0f:b9:b1:38:55:5e:84:df:76:b8:ed:
         a3:47:d9:b8:22:d8:e5:40:dc:f9:20:4d:73:9c:29:be:28:32:
         cc:53:b6:bc:80:a4:d8:31:9e:89:12:a4:62:94:e0:e5:23:b1:
         50:4b:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----