Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.cer
File:                     3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.cer (raw, json)
Hash identifier:          m3n1Q1hhsmwlkqPgvnjbEb9H+vJjXUTKal3jZL6/6+g=
Subject key identifier:   3A:3F:3B:1C:9A:82:51:F4:86:AC:4E:16:74:89:FB:FD:83:03:0A:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB8762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:07 +0000
Certificate not after:    Wed 07 Feb 2024 17:09:28 +0000
Subordinate resources:    IP: 45.6.40.0/22
                          IP: 2803:19c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14387042 (0xdb8762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:07 2017 GMT
            Not After : Feb  7 17:09:28 2024 GMT
        Subject: CN=3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:17:df:ba:4f:33:15:ed:f8:50:2e:32:d7:
                    f6:b5:a5:f8:9e:6b:ce:75:dc:c9:16:1f:59:db:fe:
                    af:89:cc:8b:bf:a7:38:43:b6:2e:fb:7d:91:f4:a2:
                    eb:ac:59:b0:d7:81:7f:a7:fc:b2:c0:cb:9f:e4:9c:
                    7c:f7:a3:07:62:5f:16:39:8b:1c:03:a8:cf:79:d8:
                    a7:84:dc:81:ec:86:24:4e:f5:e3:1f:ed:e9:ae:e6:
                    67:12:e7:b5:8e:a7:3e:d1:50:b8:d5:da:98:36:77:
                    2c:26:44:fb:52:61:6c:17:9d:78:b7:e8:fd:2a:5b:
                    29:b0:6d:ad:b6:2a:52:85:7e:72:0e:e1:fa:fa:28:
                    d0:6c:16:f3:25:2b:7e:3f:2a:94:ef:7d:3e:08:bc:
                    14:dd:48:69:ee:3c:f4:96:4c:82:80:06:3e:b8:fe:
                    cf:4d:7b:de:80:fa:af:24:d5:70:1a:46:82:a7:0a:
                    45:5f:5c:00:b5:1b:f1:c7:91:1f:ea:31:e6:4d:d0:
                    d3:ec:1b:53:62:e6:e1:75:e2:a5:35:a2:25:c5:88:
                    f1:0c:6a:d6:a5:aa:63:dc:78:91:dc:1a:7e:d4:26:
                    3c:52:40:8a:39:26:66:d5:b8:51:22:5b:7c:9c:bf:
                    33:b4:f5:c2:11:bf:89:d2:2c:7b:13:f4:fa:ae:12:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3F:3B:1C:9A:82:51:F4:86:AC:4E:16:74:89:FB:FD:83:03:0A:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.40.0/22
                IPv6:
                  2803:19c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:e5:fb:ab:20:e4:52:36:0d:33:00:0e:a4:41:40:1c:08:19:
         ed:3d:71:f3:7c:69:8d:8c:99:ce:c4:6f:8f:9b:e9:cc:fa:94:
         fa:35:1f:df:e1:06:74:27:ab:eb:44:ce:f6:0a:63:c7:77:ee:
         04:69:9b:f6:82:fa:6c:50:2d:c9:0f:0d:67:01:9b:c8:d4:d9:
         29:b3:47:87:39:82:bf:7a:43:c8:78:2c:3c:ac:e1:5a:40:2d:
         51:4e:8e:08:df:bb:e2:16:73:a4:0e:22:d0:83:79:e3:5c:56:
         db:4c:9c:bc:41:04:d2:43:a7:e6:2a:d3:b6:06:e0:9f:0b:2a:
         ff:23:51:6b:ad:68:e5:05:01:1e:98:9c:cf:80:63:24:e4:3f:
         7c:90:0d:ee:cb:ec:68:fe:e4:76:28:df:61:a2:a9:3c:c4:59:
         12:5f:59:d3:fb:d8:2a:40:50:6f:2b:42:05:f7:34:be:29:57:
         83:97:f2:d7:78:1a:a6:35:26:a2:17:34:27:12:7e:5a:93:c1:
         71:f0:f7:e3:19:fc:ca:be:57:90:4a:4e:ea:05:17:54:01:f6:
         80:58:c4:14:06:5d:2c:ac:e1:b4:01:13:c3:7b:83:c7:83:55:
         fa:40:b1:df:ba:f2:d5:17:dd:83:6d:cc:f4:db:a6:27:15:e2:
         a5:e1:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----