Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513aff20d0cdcc2d2629f1e5e517572eb944dba2.cer
File:                     513aff20d0cdcc2d2629f1e5e517572eb944dba2.cer (raw, json)
Hash identifier:          146sTDV7nL7Jz5JR7bUl2u73CYM6f8rXT26VHbIy/FQ=
Subject key identifier:   9A:2F:48:B1:87:04:85:99:98:9C:94:B5:F9:E6:F7:68:CD:30:F5:4F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106C443
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/513aff20d0cdcc2d2629f1e5e517572eb944dba2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 May 2018 23:45:05 +0000
Certificate not after:    Sun 04 May 2025 20:34:02 +0000
Subordinate resources:    IP: 131.196.212.0/22
                          IP: 2801:15:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17220675 (0x106c443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 23:45:05 2018 GMT
            Not After : May  4 20:34:02 2025 GMT
        Subject: CN=513aff20d0cdcc2d2629f1e5e517572eb944dba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:7d:8a:33:58:a0:c4:07:66:e1:af:7b:70:
                    23:33:45:59:7f:b6:39:d9:fc:ae:23:61:06:ec:85:
                    5c:b6:cb:fd:28:7e:78:0d:cf:4a:e7:ab:78:00:e2:
                    3c:bf:dd:8a:4e:48:c1:5a:25:62:48:a6:f7:8e:11:
                    d8:aa:55:f4:80:fe:e8:aa:ed:12:41:49:ae:f5:0a:
                    00:22:55:55:7c:4b:df:35:84:6a:f1:a7:c6:27:ad:
                    3d:46:e2:ca:59:8d:8d:04:3e:55:70:c2:c9:3d:e4:
                    87:90:ae:fd:22:5d:57:6b:fe:fa:e5:16:98:ac:49:
                    5d:6a:dc:c7:99:bf:3c:a1:a0:3f:3d:c3:6c:c9:04:
                    d5:39:e4:20:51:4b:e1:b7:43:56:6b:0e:5d:e9:3d:
                    fe:e4:11:e3:f9:2c:9f:37:5b:0d:14:5d:fb:c3:57:
                    74:1a:f7:6b:1d:16:b5:6e:e9:cc:5f:4e:d6:4e:20:
                    83:9f:a2:83:bd:f2:73:17:f1:50:da:56:46:23:4e:
                    60:39:7a:87:5c:60:3f:a1:c5:aa:28:f4:d1:ce:fb:
                    89:a9:e3:9c:0f:e3:aa:4b:ce:fe:79:12:21:af:d8:
                    93:27:a6:03:9f:7f:e8:bc:32:34:8b:4a:b5:be:d0:
                    11:f8:4b:6c:be:b2:93:23:14:fb:b7:ba:9b:cc:ab:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2F:48:B1:87:04:85:99:98:9C:94:B5:F9:E6:F7:68:CD:30:F5:4F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/513aff20d0cdcc2d2629f1e5e517572eb944dba2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.212.0/22
                IPv6:
                  2801:15:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:64:4d:25:9b:df:e3:f5:ff:60:3b:70:fb:d8:b0:b1:94:7c:
         3e:37:20:c5:33:13:8f:08:9d:44:90:f0:27:26:6f:d8:93:e5:
         ff:d1:63:7e:54:6b:02:cf:f3:9e:1d:ac:1a:97:55:6f:3f:26:
         b9:5d:d7:ce:a6:37:51:0c:81:78:58:5b:90:79:ef:69:a9:52:
         1e:ae:e7:b8:1e:59:07:e8:a3:ab:1c:72:4f:b5:70:35:cb:bc:
         f6:7a:3e:f5:c7:01:16:d9:5c:71:3e:04:58:34:6a:2f:e0:06:
         14:f5:0f:ea:2a:a7:51:53:fd:4f:25:72:ea:fa:6d:cf:31:d8:
         ba:e4:19:ca:a9:03:ad:cb:5a:35:fd:f7:86:d0:60:25:a4:d5:
         c6:d9:a4:bd:e9:6a:67:10:83:a2:d3:1a:91:79:10:89:7d:5a:
         7d:3f:a4:09:31:47:57:7c:50:b0:f2:02:a6:45:b9:d5:a1:6e:
         44:fd:f7:b4:ef:50:4c:5b:c0:eb:a5:f5:fe:c1:ed:41:aa:0e:
         ac:9d:f6:7f:31:e5:c1:0b:74:ab:84:1c:67:1c:3d:93:bb:37:
         86:59:d6:14:e0:15:94:76:62:b7:82:94:01:4c:ca:ca:14:2f:
         d3:4f:b7:c3:d9:57:57:79:31:0a:09:df:ed:7f:92:28:2a:01:
         ab:84:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----