Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d475d555eb0b10b477d52fe34b0ad39bbb50c1d.cer
File:                     7d475d555eb0b10b477d52fe34b0ad39bbb50c1d.cer (raw, json)
Hash identifier:          bpX6UA7bGOoxnMNT67HbeJMWZAYC4Swj1iR+ZlV9HHg=
Subject key identifier:   55:2E:21:A1:76:78:69:B9:DB:00:E6:30:E3:2B:69:4C:6A:02:BD:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF865C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/7d475d555eb0b10b477d52fe34b0ad39bbb50c1d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Sat 27 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 27933
                          IP: 200.9.255.0/24
                          IP: 2800:1a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15697500 (0xef865c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Jul 27 15:00:00 2024 GMT
        Subject: CN=7d475d555eb0b10b477d52fe34b0ad39bbb50c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:ef:c5:26:4a:55:82:fb:af:78:3d:36:b4:
                    c2:1b:85:00:5f:25:e0:8c:67:5d:6c:aa:97:8f:b8:
                    11:5a:10:90:24:03:38:fa:2f:8d:87:42:76:11:05:
                    72:51:58:a2:b8:1b:69:be:2a:79:e7:26:8e:a6:a3:
                    f0:bf:b1:04:62:3c:f6:96:14:9c:4b:26:a1:38:bb:
                    a0:3a:cc:9a:15:5d:27:70:b0:e5:21:62:ee:83:3f:
                    55:07:6d:9c:fa:0e:7a:25:8e:3f:95:1c:6e:d3:a7:
                    be:05:14:48:95:15:4b:33:60:18:c3:2a:93:82:2a:
                    03:23:d8:7d:f3:4e:07:15:61:d9:24:b9:37:9e:29:
                    01:e6:62:f3:d8:a6:e2:58:16:ff:b9:0d:3f:8b:60:
                    61:61:5c:73:0e:5e:54:20:f5:3f:4b:3a:87:0f:4f:
                    36:a9:55:3b:d9:83:a4:8e:97:e0:3d:2c:c7:0f:23:
                    e7:53:06:e3:4c:17:99:ef:68:64:45:dd:3b:2e:fc:
                    50:27:e1:29:ee:3c:08:86:9c:25:79:d8:56:0f:be:
                    f2:c7:5a:98:f6:69:88:2e:39:96:58:9c:6b:fa:51:
                    1e:33:f6:5f:23:cd:30:14:3e:66:99:7e:a6:8d:98:
                    72:b4:9f:ce:6e:9c:eb:30:33:b1:db:c4:c3:7f:f9:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2E:21:A1:76:78:69:B9:DB:00:E6:30:E3:2B:69:4C:6A:02:BD:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/7d475d555eb0b10b477d52fe34b0ad39bbb50c1d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.255.0/24
                IPv6:
                  2800:1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27933

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:1f:8c:e8:a4:6d:94:5e:74:f3:a8:e0:9d:7c:64:f9:ff:
         42:b4:85:78:07:cf:c4:ac:cc:c5:9f:f3:85:1d:29:8d:56:7e:
         12:a0:0c:64:ac:6b:d8:a7:68:d5:9c:ae:4b:34:d0:e6:59:8b:
         92:d8:ae:91:b6:4e:5d:5f:27:9c:b4:70:b1:93:82:f2:b1:2b:
         c8:9f:54:28:a5:61:fc:78:35:e3:b8:f8:d1:06:47:fa:3d:6a:
         48:33:10:fe:0c:07:fe:d7:fe:9e:5a:bc:48:84:58:11:af:1e:
         f0:30:06:f4:3f:27:0a:75:da:f9:2e:cb:97:d6:e2:e0:15:0a:
         4d:cc:ca:09:61:12:fc:09:45:75:b8:41:84:08:2e:8d:76:66:
         28:21:1c:f0:cd:f9:df:f5:49:a1:35:d6:61:b3:50:ed:a2:dc:
         35:b4:2b:38:47:79:a5:15:ed:51:76:e2:51:12:04:92:aa:ea:
         27:b5:7d:9d:6f:56:67:ca:86:21:4d:89:43:83:7b:72:7a:8a:
         8e:41:9d:f8:34:62:7a:bc:65:18:f7:3a:22:d2:70:ba:da:fd:
         fc:fa:11:43:17:c8:a5:de:ba:49:ac:51:44:a1:ab:13:6d:bb:
         6f:a5:2d:d5:01:ad:48:73:6b:2b:8d:06:f3:11:c3:24:f0:fe:
         2b:c3:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----