Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
File:                     415bbdadc090f33ec878e16eb6264e70c552a90c.cer (raw, json)
Hash identifier:          FuoFwGdlh9knyYHr4MSGmjzbK011JJcDL3Nwg2UT+3w=
Subject key identifier:   75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F88769
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:17 +0000
Certificate not after:    Mon 07 Oct 2024 16:50:54 +0000
Subordinate resources:    IP: 186.33.128.0/18
                          IP: 2800:bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16287593 (0xf88769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:17 2017 GMT
            Not After : Oct  7 16:50:54 2024 GMT
        Subject: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:e8:48:2f:53:cb:57:a3:75:bb:d9:f4:cb:
                    45:35:02:dd:16:8c:35:39:82:57:89:9a:c7:be:6f:
                    21:05:f1:8e:34:4d:c2:8c:97:c4:10:01:c2:b7:98:
                    f2:39:8d:25:d9:d5:5b:29:3c:ca:bb:13:0f:c6:dd:
                    44:bc:0c:53:ce:22:e5:2c:c2:a1:66:74:9a:3f:d3:
                    53:89:b1:61:eb:bf:d9:d8:c8:8f:5e:7e:35:1c:01:
                    3a:79:23:18:d2:76:21:bd:3b:5c:1e:ec:d5:a2:d4:
                    21:5a:ff:95:12:b6:94:c6:58:5a:9d:30:f1:18:e2:
                    41:da:8b:61:fa:1f:ee:c6:b6:a2:2a:83:eb:34:4d:
                    f4:be:0d:26:0e:cb:75:8a:6c:d4:5d:af:48:80:a8:
                    80:0b:5d:84:27:1a:66:35:d0:5e:13:b5:26:df:ce:
                    62:be:8f:fe:7b:f5:58:49:90:48:82:23:98:6e:08:
                    5a:27:58:d5:ee:5b:2a:75:1b:97:39:25:18:f3:51:
                    b0:b6:d8:06:60:63:0f:68:b6:f6:f2:d9:58:b5:ef:
                    46:30:29:bb:5a:4e:06:34:97:b3:3d:68:1d:6c:45:
                    b7:34:4b:8b:ad:35:3c:4c:6a:73:1a:3d:62:a5:2e:
                    8c:2d:d9:9f:78:25:99:2a:4c:6b:5d:d2:97:4d:6b:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.128.0/18
                IPv6:
                  2800:bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:c2:73:d4:bc:fe:52:ae:65:f3:72:46:4c:c8:8e:89:64:82:
         39:f7:20:2b:80:1b:9f:93:b8:5f:ec:ff:e5:83:47:e4:6a:87:
         49:ed:18:2f:7f:c2:b6:e3:eb:ce:b2:1f:f8:f4:69:87:3f:3a:
         06:b0:72:01:37:12:ce:4a:9e:ee:a1:1e:2c:a8:84:7e:2f:a1:
         59:cb:96:5e:ec:12:4e:09:c9:2f:d2:18:69:78:95:5f:53:ab:
         70:a4:fe:c6:f3:9b:b7:ab:ab:91:b4:dd:03:c2:6f:49:5d:fc:
         c6:da:db:25:a7:8d:c5:ce:7c:de:98:26:6b:75:f0:7d:96:6f:
         54:b1:33:9e:67:49:8f:27:db:18:6d:f5:b9:34:0c:60:25:5c:
         70:31:bf:23:be:e7:df:46:ab:2c:e5:3c:e7:ca:ab:56:61:67:
         a9:2e:87:a1:b0:92:ed:43:1b:18:cc:2a:dc:1f:e7:67:0e:73:
         fc:e0:b9:43:ed:8f:f2:e1:1f:32:18:a1:ad:44:8d:35:a8:d1:
         67:90:e4:52:a3:0a:aa:07:37:80:28:c2:64:3a:ba:94:34:48:
         5c:1e:db:b2:c6:53:77:a6:2c:46:5e:91:93:bb:c5:78:6b:b9:
         c7:77:96:28:19:62:34:c6:94:84:3f:0c:00:aa:97:20:34:9f:
         63:b4:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----