Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7955196f919ee9639a3eefb43580c1411b377e84.cer
File:                     7955196f919ee9639a3eefb43580c1411b377e84.cer (raw, json)
Hash identifier:          XICdtx3D0jmQ+Drc46y5gJvX5/iAyGoECZgWkEe6G0w=
Subject key identifier:   5B:4D:B8:BC:E6:14:91:33:A0:2D:C4:DE:B3:31:D0:E2:69:30:33:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB7442
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/7955196f919ee9639a3eefb43580c1411b377e84.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:17 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.188.48.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16479298 (0xfb7442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:17 2017 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=7955196f919ee9639a3eefb43580c1411b377e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:ab:51:f5:7f:92:62:2f:ee:a3:4d:9e:46:
                    63:a5:b9:ee:d4:15:b4:4e:d4:1e:d9:85:7a:ad:c1:
                    35:0a:14:a3:b4:8b:c7:6e:c6:0b:bc:05:a4:bb:76:
                    53:2a:a5:8a:9e:85:fd:f6:7a:0e:c3:5c:18:06:4f:
                    7e:12:44:46:fb:58:19:d1:44:c3:35:76:71:87:39:
                    ef:89:0c:12:95:15:e2:84:70:84:81:3b:b3:93:48:
                    ad:17:3c:8f:da:d2:ab:c7:42:5c:69:19:e8:eb:cf:
                    32:b7:63:1a:13:b6:53:c8:c5:02:59:3d:29:f2:16:
                    f5:8f:80:f0:0b:4c:df:aa:c0:24:40:b4:d9:6b:ce:
                    6f:2f:db:69:71:a7:ca:d5:d0:54:04:e3:1a:f0:73:
                    3f:42:ab:72:38:a7:fc:4d:ab:8c:65:95:08:af:bb:
                    33:c7:7a:7f:01:e2:ba:89:78:e1:74:be:38:a3:bb:
                    c4:56:88:db:67:35:63:cf:6c:e0:4b:7a:39:e6:1c:
                    7d:97:ed:72:32:a4:db:fa:65:3c:39:70:26:e9:2f:
                    65:fa:56:c1:ff:a3:2e:0d:76:f6:0d:de:27:e9:2a:
                    10:a2:22:f2:c6:28:fb:25:54:5d:ba:37:f9:66:03:
                    5a:a9:83:b0:37:ad:ca:5d:83:12:55:c2:e0:90:05:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4D:B8:BC:E6:14:91:33:A0:2D:C4:DE:B3:31:D0:E2:69:30:33:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/7955196f919ee9639a3eefb43580c1411b377e84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:c4:4c:46:6a:e5:86:1c:cf:8f:b6:c5:34:36:82:17:af:
         61:79:e9:11:22:ce:a9:c9:dd:72:b0:f9:ca:d4:77:e2:4d:da:
         58:0c:e2:bd:47:01:f9:92:5e:7e:c8:87:e7:cc:ba:c1:01:f8:
         e1:6c:a4:8e:85:24:ae:fb:7e:85:7d:47:41:24:a3:4f:e7:74:
         6e:82:3e:27:00:89:06:11:d2:aa:d3:3c:f6:e6:74:36:69:ee:
         1d:4c:e4:77:58:07:43:60:d7:43:3c:7a:51:24:d7:96:52:e0:
         f9:49:e6:e9:a6:e1:66:35:64:17:34:21:df:3e:55:6a:ac:ef:
         5b:9d:47:d4:1b:da:86:43:0a:1e:bd:11:f8:bb:66:e1:ef:31:
         cf:ec:c6:2d:ca:7a:91:ca:2e:94:f9:2d:47:8f:25:5b:65:bd:
         9e:cf:fb:3d:c6:7d:38:b7:81:24:66:68:4b:cb:87:d9:f5:f6:
         5b:e5:f3:a4:ef:b5:00:3d:2c:92:db:33:51:1f:52:cc:d4:5c:
         42:1e:a8:64:03:12:fb:05:a2:f6:d3:ea:f8:56:9a:ac:57:7d:
         6d:10:f3:32:5f:3f:98:15:a3:9b:78:9f:cd:73:7e:39:bd:78:
         2c:11:73:ae:a6:a2:41:9c:41:bf:cc:4e:59:ff:d2:ba:a5:ff:
         fa:a8:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----