Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
File:                     55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer (raw, json)
Hash identifier:          ekYBln1bOWOww4yy4t/WDWBwFzjX8a34vXJO8RNHAxU=
Subject key identifier:   BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6AA38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2018 17:31:29 +0000
Certificate not after:    Thu 07 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 266728
                          IP: 45.229.87.0/24
                          IP: 2803:5320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14068280 (0xd6aa38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  7 17:31:29 2018 GMT
            Not After : Dec  7 04:00:00 2023 GMT
        Subject: CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ea:ff:49:dd:de:78:fa:db:1a:53:0c:1d:8d:
                    67:e1:4c:7a:ee:34:e0:6f:0a:6a:2d:83:a3:03:b4:
                    b8:8e:67:6b:e0:ec:15:49:44:41:a7:2e:64:d3:fb:
                    95:7c:a0:ab:51:91:e3:29:ee:47:0f:83:e8:a6:38:
                    5c:23:c6:85:0b:66:83:b9:f6:1f:1c:6f:98:4b:ac:
                    dd:7a:51:fd:01:4c:13:cc:14:67:b4:36:b9:20:09:
                    cc:ee:8b:9f:d3:71:d4:17:01:1d:f7:79:32:48:7b:
                    79:69:d9:64:15:15:67:b9:64:55:96:81:bb:1d:b5:
                    1b:db:3c:2a:06:15:45:95:b8:f6:94:a2:cc:c1:bd:
                    5d:47:49:87:49:7a:00:e6:46:13:83:46:c8:23:00:
                    e9:e1:14:51:4e:7a:fc:14:6e:db:09:1a:3a:8b:0b:
                    c4:24:0d:88:c6:cb:c3:42:bf:14:b3:13:f3:73:2d:
                    e7:41:a4:9e:f1:38:73:db:6a:83:34:ad:ed:88:3b:
                    11:c9:fc:0b:d6:9b:ff:53:5c:8f:2b:b6:1c:96:e0:
                    c1:ac:ae:33:37:66:17:d9:4e:d2:78:ec:01:97:dc:
                    87:a0:6b:07:62:74:31:d7:6d:e3:2a:23:7b:88:96:
                    2d:23:a1:92:96:38:f7:42:b9:45:f3:5f:f8:16:d9:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.87.0/24
                IPv6:
                  2803:5320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266728

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:40:1c:74:f7:50:1d:0f:29:d1:c2:aa:13:ba:cf:3d:85:
         1d:cb:30:b8:f9:c4:d5:7b:d8:8d:04:a4:d9:ef:cc:27:b6:2b:
         6e:d1:59:27:75:df:3f:06:b3:03:5b:0b:54:ec:53:a0:3b:9b:
         f9:e3:6a:7f:ea:72:6b:18:03:16:c7:3c:ef:9c:97:3e:5e:2e:
         04:14:0d:18:d2:6a:22:63:43:82:75:1f:61:ab:6d:a9:a3:87:
         99:ba:7a:59:b9:d9:c3:c1:7e:89:e9:38:70:87:c4:12:d1:0b:
         3b:69:c3:23:5b:30:fb:9e:8a:58:26:25:de:cb:b7:8a:cd:64:
         cf:9d:76:48:87:a1:39:ea:dc:c9:a0:81:66:02:2a:62:e5:f1:
         be:79:57:2e:7c:8f:c1:db:ca:47:0d:93:54:d0:3c:5f:1c:2a:
         42:bc:d9:8d:bf:18:b7:c4:70:98:68:28:b0:5c:77:fa:46:0f:
         53:59:85:ae:1c:8b:42:46:fe:6d:44:fb:3d:5f:13:5e:7d:7f:
         4c:20:02:1a:42:43:6b:33:24:d2:ce:0a:44:4e:6c:db:0e:dd:
         25:b1:bb:0e:1e:b6:c0:f0:80:48:7b:bd:1d:0c:c7:e8:47:56:
         cf:98:30:73:15:4a:3d:4b:d9:f5:d0:3b:ec:7f:ab:8c:e9:72:
         86:8a:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----