Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer
File:                     702a8ccc0bc2940e8862741717474a0961649f65.cer (raw, json)
Hash identifier:          SpF4MPNikdxEL2CdDz3XrUoxR2yhDKnNTYUdry4eDMY=
Subject key identifier:   2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8F18E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Dec 2018 02:55:49 +0000
Certificate not after:    Thu 10 Oct 2024 18:20:54 +0000
Subordinate resources:    IP: 2801:10:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16314766 (0xf8f18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 12 02:55:49 2018 GMT
            Not After : Oct 10 18:20:54 2024 GMT
        Subject: CN=702a8ccc0bc2940e8862741717474a0961649f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:54:99:73:03:e8:c6:14:8f:76:64:6c:b0:5a:
                    f8:52:f9:b1:72:0b:3d:a9:91:19:8b:67:3a:99:b0:
                    b5:d7:47:12:08:da:13:a9:98:11:61:d9:68:42:fa:
                    cc:bb:c3:37:3b:23:0b:ef:9f:5e:3a:15:8e:da:08:
                    e1:1a:27:40:7f:db:5d:14:0f:f4:72:a1:eb:1f:e0:
                    ab:16:07:b9:48:f8:4a:f3:ca:58:9d:6d:5b:04:b8:
                    1c:df:34:d3:8a:5f:3e:df:da:03:33:c9:82:22:9e:
                    70:8a:54:a9:0b:40:37:ba:81:df:08:3c:4d:0f:b0:
                    ac:8c:de:73:c9:cc:42:81:89:a0:58:5b:4d:c2:1e:
                    e9:8d:a0:9e:d0:c4:88:13:af:d6:ce:66:9f:9c:76:
                    99:0d:5f:5a:d5:d5:75:9d:cf:81:f4:e4:e0:0c:85:
                    66:85:2a:24:88:e4:25:d7:25:2a:1f:de:c6:69:e3:
                    ef:c5:5f:bc:82:70:45:9e:ad:80:cb:94:7c:b3:83:
                    50:06:31:bd:d9:c9:54:dd:dd:d6:77:ce:f1:de:ef:
                    61:8d:b1:3b:2a:13:9d:9f:ed:64:1d:9b:19:f6:7c:
                    ed:d5:57:7b:3a:69:f0:d3:98:ec:44:a4:45:39:c5:
                    4b:db:ea:61:0c:63:1b:e0:e4:ae:7a:37:aa:74:a2:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:3c:22:39:af:02:f0:95:2c:f0:2b:c3:0b:b5:7d:b7:01:
         56:f9:4c:53:3f:ec:ee:25:29:c2:76:24:3d:15:f9:d1:80:1c:
         b8:6c:5b:e3:55:b1:d6:3a:e6:86:5e:fb:9f:4f:e4:51:7e:55:
         a2:ce:27:41:89:89:f3:25:d8:99:70:cf:81:94:53:19:b9:70:
         d1:4e:f5:56:28:bc:5f:b1:2e:21:41:06:55:65:42:ab:df:5b:
         ba:69:70:f6:61:5b:59:d1:ba:b6:4d:d0:ec:ec:8a:c2:0a:31:
         1a:3b:4d:97:98:ff:62:be:08:dd:c8:fc:9c:2b:8a:0d:96:10:
         20:80:5b:56:6c:11:25:6b:b7:d7:dd:bd:c2:bd:07:20:9b:f1:
         5d:16:f2:cd:dc:58:1b:bc:dc:93:d6:27:f1:10:6d:84:26:ea:
         d7:bb:1b:29:0e:e2:82:a9:f2:92:e4:56:f8:08:8f:0d:e6:77:
         24:82:e4:a5:86:58:fb:b4:e9:b2:b9:60:1f:85:0b:8a:d4:43:
         6d:ff:bf:48:ec:83:7e:4b:48:6b:85:a9:0e:80:b7:55:81:0b:
         9f:95:03:d5:bd:7e:6d:d8:c9:b1:18:1e:fb:03:4f:1b:ee:00:
         61:b8:06:61:24:3c:67:9e:5d:fd:76:2e:60:d2:07:11:57:1a:
         be:0f:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----