Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer
File:                     4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer (raw, json)
Hash identifier:          lrs4esvTTQX1+usDQVVytS2PKmZQR0fGunqsZG6qLD4=
Subject key identifier:   04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F08DB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:16 +0000
Certificate not after:    Sat 03 Aug 2024 23:11:33 +0000
Subordinate resources:    IP: 45.224.96.0/22
                          IP: 2803:9c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15764921 (0xf08db9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:16 2017 GMT
            Not After : Aug  3 23:11:33 2024 GMT
        Subject: CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:e6:37:2f:ba:5e:11:1e:43:c9:cc:69:d1:
                    95:05:52:49:bf:df:6a:d1:40:43:f9:5d:ca:75:f8:
                    cf:3b:7b:f0:a3:5a:f3:a0:ed:cb:b5:88:67:bc:b4:
                    02:9a:af:e6:b7:b5:aa:ee:84:36:ec:37:74:29:a0:
                    7c:5a:0c:59:3f:17:21:36:8e:70:74:ea:69:03:57:
                    62:68:04:ae:df:9d:a6:65:27:da:4e:e0:ea:70:bf:
                    01:eb:84:13:87:48:e3:c6:57:9f:0f:95:fe:7e:53:
                    e5:84:23:72:98:85:04:e9:a4:7a:16:ba:e2:bc:15:
                    f8:52:d9:71:70:60:b8:24:a1:1e:e2:38:58:a4:67:
                    f8:09:d3:50:4f:32:7f:ee:17:87:0d:e2:5f:24:d5:
                    b6:26:5c:d8:56:63:c5:ca:80:90:64:6d:f9:2c:fb:
                    d6:8f:49:d6:e3:ba:c6:3b:1f:68:f2:44:79:c4:19:
                    a1:62:dd:94:1c:d6:98:e9:84:50:94:34:b7:67:24:
                    c8:43:fb:70:2c:86:2b:88:79:3a:d0:af:04:f2:12:
                    1a:02:61:47:48:bf:38:ff:fc:4d:c2:68:a4:84:92:
                    1f:57:59:c7:a5:31:27:da:3f:14:bb:6d:aa:0f:ad:
                    20:89:0c:6d:06:18:e9:06:69:42:9a:c0:83:bc:88:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.96.0/22
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:9e:b1:e0:f9:3d:1c:ad:6a:77:ed:9c:aa:cc:2a:ec:90:
         bb:e8:9d:d7:89:80:b2:50:2c:d9:c7:85:47:de:21:4d:6f:f3:
         cb:1e:66:d2:55:ef:4c:fb:d6:bd:f3:04:10:55:93:b2:aa:0c:
         23:50:c1:67:85:9c:e5:0f:a0:a7:b7:07:35:6b:d5:17:21:16:
         af:77:86:be:8b:69:91:c8:b5:48:96:87:e1:4b:0d:a4:56:89:
         20:13:36:25:55:3b:2d:f9:2a:b9:f7:44:7c:a9:45:b2:53:e4:
         8d:75:0b:3c:af:9b:20:28:36:83:4d:eb:bc:df:49:c0:1a:7c:
         59:67:b5:69:14:10:07:28:8b:78:d9:21:31:d2:b6:e9:14:e9:
         e9:f0:6c:01:cf:db:2e:7f:31:54:86:b7:da:34:06:6c:22:79:
         81:f3:55:91:4e:ac:d8:0f:91:ca:29:12:2b:e7:64:f5:3a:4e:
         74:a9:22:5c:76:20:3b:81:d8:3b:f7:c9:57:27:45:4a:86:61:
         13:58:56:6c:38:4d:37:ea:0d:19:62:56:d2:6c:06:74:1c:d6:
         e7:5c:be:9c:9b:20:0c:36:f2:08:0b:66:55:dd:fa:13:c3:eb:
         c6:7b:2a:dd:2a:f7:1a:33:ba:ce:88:ae:fd:d7:d0:8d:e5:34:
         52:63:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----