Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
File:                     61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer (raw, json)
Hash identifier:          dwWS/AMKtKFMyVhAGUGImW3t+H83I+4IhMTLz0LpoCo=
Subject key identifier:   3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3F0D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:18 +0000
Certificate not after:    Wed 04 Sep 2024 05:00:00 +0000
Subordinate resources:    IP: 2801:1f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15986897 (0xf3f0d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:18 2017 GMT
            Not After : Sep  4 05:00:00 2024 GMT
        Subject: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:d0:27:9f:84:53:32:2c:c8:62:07:3e:56:
                    04:d4:5b:8c:b9:a6:10:d6:65:df:e2:cc:d9:4f:02:
                    ca:42:a2:bd:b2:1c:44:04:3e:d8:e0:91:31:2e:fa:
                    2d:c9:84:7c:c1:7c:51:47:52:aa:88:c5:55:94:cf:
                    7d:6a:6d:3c:51:a1:9b:0d:fa:f0:5d:d3:36:66:1a:
                    de:11:0f:8c:36:05:23:48:21:72:27:84:1f:5e:52:
                    83:84:a0:6d:f5:cf:c8:59:6e:c2:be:ce:5d:03:a0:
                    54:a5:4a:32:77:25:dd:44:b7:29:04:de:c7:64:9e:
                    c0:e9:cf:8a:18:d7:49:10:fc:c6:16:18:d8:b1:e1:
                    95:3d:bd:6b:88:cf:77:94:4c:af:22:9e:22:d3:24:
                    1e:d7:50:b9:40:e6:ab:17:5c:47:f1:be:39:cc:9e:
                    ad:8c:7f:3e:26:c0:c2:ea:91:a4:28:ef:70:27:6f:
                    5d:9e:d1:61:69:43:42:9c:20:cd:ce:b7:22:96:06:
                    4d:ce:de:84:51:d4:90:bc:7e:bd:13:38:6f:98:3a:
                    be:c8:1b:d5:8b:ff:6c:94:09:77:a3:97:8f:3e:9d:
                    2c:0a:ac:f3:b7:e2:6f:0d:77:32:e1:2d:e3:34:0e:
                    c1:c4:aa:1a:7e:e5:ed:bf:52:45:1f:5a:bf:16:bc:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:18:d9:14:05:c9:1e:09:31:aa:9b:bc:ce:18:e6:f3:db:
         91:8e:40:f1:aa:36:c7:cf:1c:48:9e:6a:cc:b6:7a:45:d8:17:
         03:08:48:27:2c:04:30:33:7a:bf:f8:45:fa:eb:bb:f7:07:ee:
         c3:45:3b:46:21:d1:11:14:8d:1d:b7:ce:61:3b:a2:e7:52:53:
         ae:d6:3b:43:8f:f7:73:b1:73:8d:d5:b5:85:90:7c:fc:0e:8f:
         33:82:03:04:3e:73:e6:51:3b:97:f0:a9:1c:cc:51:94:85:13:
         9e:81:cc:11:1e:7d:b9:2a:ae:94:19:6e:ad:8d:b4:07:11:8f:
         69:22:d4:23:48:0d:c4:09:c7:1f:bb:a3:de:25:9e:48:8a:f6:
         3d:70:c5:50:ab:f1:ef:29:57:41:f4:9f:49:15:78:33:97:ca:
         32:84:32:b4:50:49:64:c6:f5:81:e3:30:6b:e3:80:d2:6d:25:
         ca:3a:ff:a8:e2:4b:9c:e5:8e:be:11:b7:f3:93:5c:69:ea:db:
         f9:ad:07:60:bb:94:6f:6c:e7:8f:6a:a9:65:f7:fd:9d:8a:a0:
         0e:ad:a1:0e:9e:1d:15:75:35:64:f5:69:80:21:35:a4:1f:97:
         f3:38:1d:d1:56:18:1d:a7:3d:80:04:cb:a1:eb:70:7e:f9:33:
         5d:0c:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----