Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ea62407278796941882285f892be7adbad75feb.cer
File:                     6ea62407278796941882285f892be7adbad75feb.cer (raw, json)
Hash identifier:          HGwCFUcX4O3u6dIaT6jnQOULXXrOh7+C8hWdmIUtWEU=
Subject key identifier:   80:D1:84:55:72:EA:C8:EB:26:93:1A:79:B9:48:B8:CC:CC:9D:34:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F462DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df9e2075-3f5a-4d51-a56b-91554cd26843/6ea62407278796941882285f892be7adbad75feb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df9e2075-3f5a-4d51-a56b-91554cd26843/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:53 +0000
Certificate not after:    Mon 09 Sep 2024 05:00:00 +0000
Subordinate resources:    IP: 170.238.64.0/23
                          IP: 2801:1f8::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16016091 (0xf462db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:53 2017 GMT
            Not After : Sep  9 05:00:00 2024 GMT
        Subject: CN=6ea62407278796941882285f892be7adbad75feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:83:c6:f2:b7:b9:e9:63:8c:d6:9d:cb:b6:
                    72:6e:1e:6a:a7:ef:8f:63:0f:a5:52:df:c0:1b:64:
                    64:75:fe:cb:69:c7:77:83:73:1b:03:ab:b1:4d:ce:
                    68:a2:26:9b:88:2b:4c:bd:65:19:11:74:25:7f:c8:
                    a7:4b:60:62:41:56:a1:d2:5c:68:cc:83:8b:a3:86:
                    42:75:09:d0:16:5b:2f:f3:2c:07:75:76:9b:71:cc:
                    09:9f:78:06:ca:2b:d0:9d:b1:5f:37:0e:e8:a7:6f:
                    cc:ef:df:da:ba:3b:6b:cd:4b:b7:18:39:7f:43:ea:
                    50:4e:a3:62:c5:19:71:b9:83:c2:03:72:58:cc:10:
                    84:c0:66:54:1a:9f:a2:1a:66:59:f6:d8:ab:7e:d6:
                    0d:11:c6:a4:0c:ab:cc:c1:20:48:58:a5:45:fb:b5:
                    4f:aa:fb:30:d6:4a:be:6f:ec:77:c6:b6:e3:89:a3:
                    15:56:9f:6b:6a:91:db:69:3e:e0:88:15:ff:e3:7b:
                    d5:4a:35:71:44:42:4f:18:30:3e:7b:06:1c:aa:bf:
                    25:ff:11:7c:89:f2:3e:27:08:0b:bc:b8:9a:5e:cd:
                    38:46:8a:4d:09:61:bb:c5:52:73:28:6c:e2:8e:fc:
                    d6:73:43:34:ef:94:d9:fa:89:ba:e2:38:f8:f1:3a:
                    0c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:84:55:72:EA:C8:EB:26:93:1A:79:B9:48:B8:CC:CC:9D:34:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df9e2075-3f5a-4d51-a56b-91554cd26843/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df9e2075-3f5a-4d51-a56b-91554cd26843/6ea62407278796941882285f892be7adbad75feb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.64.0/23
                IPv6:
                  2801:1f8::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:82:e4:10:20:6f:60:e1:a8:15:1e:d7:38:74:b3:99:ea:
         0a:bc:91:53:b8:5a:c8:b8:44:fe:90:95:1c:35:ea:83:38:32:
         20:c9:73:ab:c1:8e:bf:4a:5e:f5:3c:e7:97:55:5c:4a:6d:57:
         64:03:b7:48:6c:12:09:98:8f:52:31:ee:10:a1:ac:e4:a5:11:
         8e:8b:db:60:4d:ed:5a:75:a7:6e:43:e6:21:c1:d8:68:6d:b7:
         c2:b9:0d:99:0a:0d:59:91:ea:f9:cb:19:28:1a:97:01:2a:e1:
         69:e2:8c:93:88:04:8a:94:72:f0:c3:67:29:22:5f:48:69:a3:
         3d:9f:16:b1:5b:e4:5d:de:62:d6:2a:3c:31:0d:27:e9:fb:d7:
         86:30:b2:0c:51:0f:5e:7d:81:23:f1:eb:59:8f:38:7e:9f:59:
         5a:26:5d:b9:09:13:f7:c4:cd:b2:e6:6f:1e:bf:3e:4a:da:54:
         01:a0:c9:52:be:5f:b5:e3:ad:27:95:a8:7e:e6:f6:bd:4b:7d:
         a1:44:2f:c3:d4:7c:5b:7e:6c:36:d0:5d:2d:83:b7:42:7c:7e:
         a7:73:c4:9e:8d:e7:52:c5:3c:62:a4:07:d6:77:e6:5e:bd:03:
         9d:49:83:d2:2d:1c:2a:38:2c:1f:2e:d6:7b:1b:d5:da:86:bb:
         99:ff:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----