Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cf41af69dceaafcf56abd9202e1b2eb9af343ad.cer
File:                     7cf41af69dceaafcf56abd9202e1b2eb9af343ad.cer (raw, json)
Hash identifier:          jT0tzou4Qgj3whBVHFMyqeDY40gyQGjbp7H9GUThKGk=
Subject key identifier:   19:DE:E9:CC:88:54:CD:52:13:E5:F1:A5:C1:8B:D8:C3:59:45:35:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EED823
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/7cf41af69dceaafcf56abd9202e1b2eb9af343ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Tue 27 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 27868
                          IP: 190.123.0.0/23
                          IP: 2803:b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15652899 (0xeed823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Aug 27 06:00:00 2024 GMT
        Subject: CN=7cf41af69dceaafcf56abd9202e1b2eb9af343ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:84:a4:5b:bf:c4:aa:d2:99:ac:8c:21:66:
                    55:c5:05:3a:aa:38:8b:8e:3e:43:af:e1:45:3a:5c:
                    04:60:69:75:d3:13:a2:ef:dc:91:86:20:24:63:b1:
                    35:77:71:19:89:46:62:0b:80:80:05:12:64:15:8b:
                    2f:45:a4:0e:3e:69:61:22:5b:0f:5a:db:f7:3a:e3:
                    5b:d4:26:28:43:71:59:38:7f:99:bb:87:2e:d6:a6:
                    5c:2c:59:60:ee:47:77:d0:c4:55:86:66:e8:c5:38:
                    d0:eb:bf:15:45:18:2e:3b:6c:07:a5:05:78:06:f2:
                    3c:57:e5:1c:e2:b5:57:18:7c:2e:f6:e9:c3:1f:16:
                    6f:67:5f:55:39:d2:88:2b:36:95:d1:ab:f1:35:e3:
                    38:ed:be:92:a3:5e:73:09:54:8f:3b:04:33:b7:28:
                    2e:3d:bf:57:19:8d:1f:7a:ae:a0:a0:61:55:ba:0c:
                    c6:a3:8f:38:e5:dd:45:20:51:a8:b2:a3:09:15:63:
                    cd:40:66:f1:cc:78:71:56:2f:7e:5d:d3:8e:0a:90:
                    65:0e:29:54:f2:52:49:a0:c9:cd:09:f1:04:f1:92:
                    4e:d5:ea:7e:ee:8e:8e:45:c2:76:e2:d3:7f:82:bc:
                    b2:8e:81:0e:0d:56:21:74:83:ee:e6:73:77:de:60:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DE:E9:CC:88:54:CD:52:13:E5:F1:A5:C1:8B:D8:C3:59:45:35:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/7cf41af69dceaafcf56abd9202e1b2eb9af343ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.0.0/23
                IPv6:
                  2803:b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27868

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:0d:da:fb:01:db:ac:05:26:94:ad:26:96:93:7f:3a:f0:
         28:da:e8:3f:97:28:46:35:39:36:23:58:24:0e:1c:89:31:26:
         f8:60:92:9f:d5:a1:c5:55:34:1e:ce:de:e1:d6:55:78:33:5c:
         e9:15:7a:90:cc:42:87:e1:f5:48:75:16:e8:6d:f8:69:66:0a:
         f0:8b:bd:27:4f:58:83:13:95:16:7e:87:3d:7e:84:7b:f2:b3:
         c2:95:83:0f:f1:70:c9:91:e2:be:b4:92:1f:85:d3:b0:61:0e:
         7e:da:6d:49:b6:7f:cf:ec:ec:04:87:db:be:82:0d:5e:71:c7:
         2b:d5:81:b4:ad:cf:d9:f9:2c:3c:5d:94:bf:c0:a8:90:13:56:
         0e:9e:56:c1:17:13:2b:49:fd:f3:fb:c0:9c:95:08:59:99:3b:
         85:42:c5:f1:f5:6a:0b:c7:37:3b:06:9d:9d:a5:00:12:15:6a:
         d9:90:ea:bb:f1:b3:64:2a:62:6c:80:e6:c5:98:01:41:20:75:
         70:17:21:2c:ee:f0:94:f0:35:10:e3:77:df:5d:11:70:9b:51:
         c3:03:60:4c:5b:11:43:f3:53:57:cb:d2:3c:02:1c:eb:fd:c2:
         f3:28:e2:89:d1:b1:8f:86:0e:84:18:17:32:40:23:45:13:b0:
         fa:0b:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----