Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
File:                     7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer (raw, json)
Hash identifier:          tbHVRj87axh0ztSF633h28qMe5f5+8h6U0tRGvNIRLA=
Subject key identifier:   34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2A1C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:00 +0000
Certificate not after:    Thu 22 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 52228
                          IP: 152.231.128.0/17
                          IP: 179.50.128.0/17
                          IP: 186.15.0.0/16
                          IP: 186.64.128.0/17
                          IP: 186.159.128.0/17
                          IP: 2803:6000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15901128 (0xf2a1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:00 2017 GMT
            Not After : Aug 22 15:00:00 2024 GMT
        Subject: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:3e:7b:52:86:63:04:bc:55:93:81:33:97:
                    1c:ae:b6:a7:54:11:d3:2f:f6:df:2d:4b:f2:23:e0:
                    b7:23:ae:cc:1a:65:35:7e:10:40:d8:4b:d6:ab:02:
                    a1:09:95:5a:23:cd:dc:94:a0:bf:da:9f:26:b8:3a:
                    32:8d:4e:e1:66:4b:c3:53:73:64:11:2a:8b:65:be:
                    47:11:ec:5c:a7:cd:df:76:3b:7c:13:b4:c9:8c:3d:
                    e3:56:82:b7:3e:89:a4:cf:32:5b:ca:9c:2c:1f:95:
                    4f:fc:ba:e3:38:74:18:ac:c4:d2:ec:3d:a6:60:9f:
                    0b:59:f9:3b:52:81:e7:36:2b:00:71:23:41:02:3b:
                    1c:9d:af:de:55:2a:4a:a4:6a:f6:6e:8e:13:77:af:
                    7f:68:f5:51:80:b2:8b:1a:93:06:25:60:73:e0:a1:
                    cc:11:a6:6c:a4:7c:03:50:8e:18:56:83:63:d3:5d:
                    e2:98:13:2a:67:fd:fb:ee:85:cd:21:54:da:bf:63:
                    5e:78:79:fc:3a:1c:5e:60:63:e0:0b:62:05:a0:51:
                    88:92:42:08:2f:7f:b3:85:70:81:1f:0b:79:94:22:
                    38:a3:7b:c9:be:96:39:ed:9f:e6:28:76:36:d1:b9:
                    89:50:49:08:f8:e6:d2:0c:7c:f0:70:8d:89:a5:96:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.128.0/17
                  179.50.128.0/17
                  186.15.0.0/16
                  186.64.128.0/17
                  186.159.128.0/17
                IPv6:
                  2803:6000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52228

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:1e:ec:7a:d6:9f:be:a8:e0:52:2b:24:5a:f4:24:64:c5:
         9a:15:ef:0f:08:54:a3:79:67:e2:72:a0:35:3d:d7:28:e2:a0:
         e0:b7:04:ad:8c:52:7d:e6:f4:e9:14:1f:c3:57:94:77:7c:45:
         6e:89:98:74:d0:84:e9:49:ba:9b:4c:68:e9:04:30:af:cb:e1:
         24:f1:81:d8:73:24:30:ca:e1:e1:af:0c:a4:2f:35:c7:ae:71:
         55:17:3f:74:eb:77:67:f1:d8:e8:07:5b:b6:70:7a:1d:5b:6e:
         33:79:dc:0a:cf:28:8d:2c:60:ba:46:48:cd:a4:6a:a7:11:30:
         ab:28:de:e6:d8:db:98:aa:9f:21:bc:d3:4d:72:fb:24:40:40:
         1e:91:c2:0c:d3:fc:f6:e9:90:1b:e0:24:a8:1a:27:0a:14:ee:
         ba:8a:25:9f:3e:39:6f:9d:9d:eb:26:79:38:78:26:5c:5c:49:
         0d:ff:93:1a:49:34:f2:6f:df:37:9d:12:ae:5a:65:5f:6c:a7:
         cd:b0:15:a8:1a:6b:bf:cd:93:9a:6e:87:db:c2:f7:8b:92:80:
         d7:18:86:ec:c6:74:a8:59:a7:11:5c:c4:59:3a:32:6b:83:fe:
         15:69:c1:72:db:6b:10:43:88:6b:b4:db:16:3f:06:9a:fb:2a:
         be:33:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----